Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
File: x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json)
Hash identifier: kf6BhWHjB+LpdU7yS0VR7TeoPJDPo2g8prRKPy0GN3c=
Subject key identifier: 99:9B:E7:2B:59:C8:BB:C6:15:71:4A:B7:1D:F1:A4:4D:78:A1:07:0C
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 019674F984CA790DC7F9C7DC1AAFEA1EE408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
Manifest number: 1023
Signing time: Sun 27 Apr 2025 02:00:31 +0000
Manifest this update: Sun 27 Apr 2025 02:00:31 +0000
Manifest next update: Mon 28 Apr 2025 02:00:31 +0000
Files and hashes: 1: 6Cj8H-p47dvCNhMHuB2pJCnFujI.roa (hash: etPYOFcz4B7xl7Yvi1fe6awoP2aM1hrkcXjgzl1XW2c=)
2: iNe91R6y78p-QSDXxoxxAjDA_Og.roa (hash: HR8YO++Y/qB7B+dcbqN5/SgR3c8dd7aULLQGyyrd4j8=)
3: tK6dqORitjCE9QSeqzn0Dd8QVZY.roa (hash: d9AZ6zPbtFV6hygn8HjICm+c22UNHE83e16IdW/3Zl4=)
4: uHPtlU3qdVrOCAD4M6mdiGrDzqE.roa (hash: AeMGCTul+AJixElOuUQNIP59RKHExeTwQIkWiWRzSzs=)
5: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: 79F4Qtov+5x9buH556XeKJY+sbukYY2kM+CSiKg+lbA=)
6: ydG33gjsDAOMifL-LMV8iBUmj5I.roa (hash: mGme2Sxc1/UzWWlnkXXzLuxU/TszYoE3oiJl3a+U4Tg=)
7: z131uKF1Jpc6EpB3kAHYRRM7XIQ.roa (hash: Z5tMUZHaMA8Bu87tPX511k88Z6BiQWZ5tSalbDOuIEw=)
8: zbII4RxH17JoDR9ukyJuiEde7IM.roa (hash: xBWfldiZFP31dGe7bTsuSEU+4Mx9LEr9W5jDRfUDGfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:84:ca:79:0d:c7:f9:c7:dc:1a:af:ea:1e:e4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Apr 27 02:00:31 2025 GMT
Not After : Apr 28 02:00:31 2025 GMT
Subject: CN=999be72b59c8bbc615714ab71df1a44d78a1070c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:6b:f1:db:f9:01:fc:3c:7c:33:5e:61:ba:
bb:49:39:38:9e:07:7b:2d:8f:c0:ac:05:aa:d0:4e:
55:d2:84:7b:31:2f:19:36:b8:5d:c9:46:23:16:b0:
88:e9:3b:a4:79:79:58:7f:d2:99:2f:1d:5e:c0:a4:
9b:ff:18:71:d2:f6:ad:75:28:c1:4a:c2:ff:bf:74:
78:16:01:69:73:0e:82:75:e2:2d:d1:ad:1f:a9:d8:
a3:f1:c3:e8:ac:d9:26:b7:b8:dd:e9:e8:39:62:08:
5b:6c:13:64:51:af:16:f2:75:30:ad:99:dc:6d:5d:
7b:af:b0:8a:2c:9a:a7:fe:2c:70:2b:dd:e7:e7:1c:
9d:69:f5:f2:be:58:a4:4e:2b:b8:84:0c:36:32:63:
94:dd:c6:53:84:c5:11:d4:b5:38:38:53:fd:18:a9:
c2:ef:f5:07:ea:38:2a:d4:a8:da:64:cb:a7:a5:7d:
d6:40:86:78:10:30:2f:cf:90:76:e4:e6:b8:8f:3d:
ef:9b:f7:83:26:f5:4c:23:3c:aa:2c:b1:ed:72:96:
ab:de:e9:1e:ec:88:a3:38:8d:97:9a:2b:f3:53:5c:
e9:e0:e5:e6:75:a2:9c:79:6b:ea:23:a9:cb:e4:67:
8e:26:44:de:fe:3d:72:f2:e9:5e:b8:9b:59:d0:a0:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9B:E7:2B:59:C8:BB:C6:15:71:4A:B7:1D:F1:A4:4D:78:A1:07:0C
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e7:88:6f:11:ee:ad:21:86:4d:04:07:8b:4f:cf:43:8a:7c:
21:2c:f5:b8:54:f6:73:67:40:75:00:b3:c8:dc:51:6e:6b:ae:
05:fb:6d:5b:3a:d8:ee:ad:8c:df:37:3b:25:2a:50:9e:d9:5a:
08:25:08:00:ce:8a:25:d2:2d:a4:e1:24:67:e2:0e:ba:9e:b4:
0e:71:30:9b:5f:42:af:77:7a:a7:07:18:8c:2e:47:fd:88:91:
02:40:b7:f6:6a:57:8e:03:4a:e2:d4:d9:dc:43:10:46:06:ed:
0c:27:f4:62:db:47:32:7f:58:e7:42:55:9d:10:ec:05:34:ae:
7b:51:d9:80:c8:59:e2:8c:8a:7d:1a:89:22:cb:8b:75:47:dc:
af:ef:39:5d:d0:d7:c7:06:77:ce:26:cc:a1:fe:30:3b:d9:2a:
d2:5b:50:a9:7d:6f:18:1f:96:17:11:57:d0:54:97:68:25:af:
0a:86:6a:b6:d3:86:b2:a2:6b:3a:f8:6e:b1:f1:7d:3e:37:31:
94:18:7c:c4:d6:f6:f5:a5:39:c0:18:71:a3:35:07:3d:f5:19:
ef:7f:7a:d0:45:d5:a5:b8:bf:82:f4:e0:54:55:5a:d2:04:9d:
c5:c2:ab:b6:e1:4e:93:d7:93:e9:b8:14:76:41:cb:0b:96:ef:
fd:d7:f9:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0+YTKeQ3H+cfcGq/qHuQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YzI0ZGU5OTEwMWZhZmRmNzRiY2EyOTNmZDZkOTUwNjBk
NTBhNjMwHhcNMjUwNDI3MDIwMDMxWhcNMjUwNDI4MDIwMDMxWjAzMTEwLwYDVQQD
Eyg5OTliZTcyYjU5YzhiYmM2MTU3MTRhYjcxZGYxYTQ0ZDc4YTEwNzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxxr8dv5Afw8fDNeYbq7STk4ngd7
LY/ArAWq0E5V0oR7MS8ZNrhdyUYjFrCI6TukeXlYf9KZLx1ewKSb/xhx0vatdSjB
SsL/v3R4FgFpcw6CdeIt0a0fqdij8cPorNkmt7jd6eg5YghbbBNkUa8W8nUwrZnc
bV17r7CKLJqn/ixwK93n5xydafXyvlikTiu4hAw2MmOU3cZThMUR1LU4OFP9GKnC
7/UH6jgq1KjaZMunpX3WQIZ4EDAvz5B25Oa4jz3vm/eDJvVMIzyqLLHtcpar3uke
7IijOI2XmivzU1zp4OXmdaKceWvqI6nL5GeOJkTe/j1y8uleuJtZ0KBQfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmb5ytZyLvGFXFKtx3xpE14oQcMMB8GA1UdIwQY
MBaAFMfCTemRAfr990vKKT/W2VBg1QpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQt
ZWQ1ZDZjZThkN2U4LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQtZWQ1ZDZjZThkN2U4
LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeueIbxHu
rSGGTQQHi0/PQ4p8ISz1uFT2c2dAdQCzyNxRbmuuBfttWzrY7q2M3zc7JSpQntla
CCUIAM6KJdItpOEkZ+IOup60DnEwm19Cr3d6pwcYjC5H/YiRAkC39mpXjgNK4tTZ
3EMQRgbtDCf0YttHMn9Y50JVnRDsBTSue1HZgMhZ4oyKfRqJIsuLdUfcr+85XdDX
xwZ3zibMof4wO9kq0ltQqX1vGB+WFxFX0FSXaCWvCoZqttOGsqJrOvhusfF9Pjcx
lBh8xNb29aU5wBhxozUHPfUZ73960EXVpbi/gvTgVFVa0gSdxcKrtuFOk9eT6bgU
dkHLC5bv/df5sg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:09:14 2025 by rpki-client