Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json)
Hash identifier: mxzK8YzvLgj3Sb+kIaQ71ntulUq27Av4EpLyKCd0S+o=
Subject key identifier: B3:A9:B8:EE:0A:E4:1C:20:4B:FE:CF:35:8C:0D:0E:1A:E4:B6:0B:7B
Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae
Certificate serial: 0196753061EE54019D2BD1FF538086F08105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
Manifest number: 048D
Signing time: Sun 27 Apr 2025 03:00:27 +0000
Manifest this update: Sun 27 Apr 2025 03:00:27 +0000
Manifest next update: Mon 28 Apr 2025 03:00:27 +0000
Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: W0x5I9DmOddih6ZsjtS21mWX+FPt9iknqu0PLGgQYxs=)
2: yze2rcJ637RL8GZo48PGt4d8nY8.roa (hash: H8OFKVxMCjsZaNXr8DPY/I8jq0ZMaggP4bkjrXxk6OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:61:ee:54:01:9d:2b:d1:ff:53:80:86:f0:81:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae
Validity
Not Before: Apr 27 03:00:27 2025 GMT
Not After : Apr 28 03:00:27 2025 GMT
Subject: CN=b3a9b8ee0ae41c204bfecf358c0d0e1ae4b60b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:1f:af:d3:11:06:f3:3c:1d:25:2c:7e:93:
d5:2e:f0:f0:69:f6:20:7a:2a:d9:e3:dc:e3:30:c9:
5e:77:df:27:51:43:15:cc:aa:fd:2f:4f:80:f4:a4:
9a:c5:c8:f9:35:01:2a:a9:79:e4:93:2e:dc:44:79:
e1:f1:2b:07:97:ab:d1:58:4d:53:1f:d3:5c:3a:b7:
81:b1:20:b7:ca:4c:75:1a:05:7d:c3:38:20:64:83:
97:01:cc:26:3e:75:76:da:b1:e1:40:ca:a1:52:df:
c1:ed:d4:8b:d2:18:97:a5:2d:1b:55:a6:ee:ce:1e:
9f:e8:8a:21:cc:d4:c6:20:1f:4e:4b:ec:fd:7d:b2:
97:b9:37:8f:90:c0:56:bc:0d:42:19:a6:c6:7e:41:
76:71:e7:6f:c7:5f:14:08:4a:c0:e4:82:44:e3:b4:
92:3f:2e:8a:9b:6a:a9:ce:f6:36:43:a8:51:23:80:
f0:35:73:b7:79:ae:12:a1:5b:98:e1:6d:8d:6c:54:
ab:2d:6b:cc:83:e5:2f:cc:8e:10:9b:d3:d7:0e:2d:
75:46:85:c2:fc:16:31:61:8c:cc:51:e2:d7:af:e1:
41:e5:ad:bb:c9:fd:84:20:b4:a3:2c:a5:c7:e4:ba:
b1:df:4e:b6:08:e2:f7:6f:15:56:bc:64:f2:67:05:
34:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A9:B8:EE:0A:E4:1C:20:4B:FE:CF:35:8C:0D:0E:1A:E4:B6:0B:7B
X509v3 Authority Key Identifier:
keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fe:72:1d:19:44:bd:61:2e:af:4d:4c:cd:16:be:df:bc:ed:
ef:18:9f:98:e3:1e:ed:6c:f0:e6:95:95:a0:64:bd:c9:68:80:
c7:dc:11:14:2e:f5:29:79:c8:61:35:3d:8f:47:3f:5a:dd:87:
20:d0:06:4b:70:7e:5d:c8:ad:3a:16:7c:5d:cf:60:c0:da:f3:
41:95:19:46:ad:65:07:d0:92:27:e7:83:c5:36:12:0e:cf:79:
ea:ad:0d:d8:e6:96:38:cb:c4:82:0a:e7:b3:a8:1b:4b:48:90:
9f:5e:a6:d2:06:88:16:a5:35:27:ad:aa:e3:38:f6:36:57:1c:
9d:a8:ed:7f:8e:e4:60:b1:17:ff:b3:3d:dc:42:04:d7:82:1d:
ef:1a:36:55:d4:6a:8c:f1:09:54:27:8c:94:4c:52:3a:cb:2b:
28:c7:6f:df:9f:c3:c1:eb:5c:6b:fe:39:d6:74:9a:d1:58:db:
4c:55:1d:3b:b6:2a:22:d6:f1:bd:26:b4:19:9c:e4:f9:c6:52:
00:8d:71:6e:09:01:d1:71:c1:f3:cf:75:1d:d9:68:ad:ef:4c:
66:a0:95:da:b8:fa:26:7e:29:79:ca:30:8f:bd:ca:cc:23:8b:
3e:b3:b5:c7:ce:c6:32:f4:fe:19:45:01:d4:a9:7d:59:0e:eb:
a0:f9:ac:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1MGHuVAGdK9H/U4CG8IEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxODUyNzBlODMxOTNkMzI2OWY3Y2RlOWRhMDgwOGIxZWZm
NTUyYWUwHhcNMjUwNDI3MDMwMDI3WhcNMjUwNDI4MDMwMDI3WjAzMTEwLwYDVQQD
EyhiM2E5YjhlZTBhZTQxYzIwNGJmZWNmMzU4YzBkMGUxYWU0YjYwYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05Ufr9MRBvM8HSUsfpPVLvDwafYg
eirZ49zjMMled98nUUMVzKr9L0+A9KSaxcj5NQEqqXnkky7cRHnh8SsHl6vRWE1T
H9NcOreBsSC3ykx1GgV9wzggZIOXAcwmPnV22rHhQMqhUt/B7dSL0hiXpS0bVabu
zh6f6IohzNTGIB9OS+z9fbKXuTePkMBWvA1CGabGfkF2cedvx18UCErA5IJE47SS
Py6Km2qpzvY2Q6hRI4DwNXO3ea4SoVuY4W2NbFSrLWvMg+UvzI4Qm9PXDi11RoXC
/BYxYYzMUeLXr+FB5a27yf2EILSjLKXH5Lqx3062COL3bxVWvGTyZwU0twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOpuO4K5BwgS/7PNYwNDhrktgt7MB8GA1UdIwQY
MBaAFPGFJw6DGT0yaffN6doICLHv9VKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgt
ZmVmOTZlOTVhYmEwLzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgtZmVmOTZlOTVhYmEw
LzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOP5yHRlE
vWEur01MzRa+37zt7xifmOMe7Wzw5pWVoGS9yWiAx9wRFC71KXnIYTU9j0c/Wt2H
INAGS3B+XcitOhZ8Xc9gwNrzQZUZRq1lB9CSJ+eDxTYSDs956q0N2OaWOMvEggrn
s6gbS0iQn16m0gaIFqU1J62q4zj2Nlccnajtf47kYLEX/7M93EIE14Id7xo2VdRq
jPEJVCeMlExSOssrKMdv35/Dwetca/451nSa0VjbTFUdO7YqItbxvSa0GZzk+cZS
AI1xbgkB0XHB8891Hdlore9MZqCV2rj6Jn4pecowj73KzCOLPrO1x87GMvT+GUUB
1Kl9WQ7roPms7w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:02:16 2025 by rpki-client