Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier: cbK3PCijz+lK7PcrtnD7X0L6gpx43aL5zb3AZf9RE9s=
Subject key identifier: 9D:A4:78:FB:3D:1B:B4:6C:24:31:0D:73:92:61:26:7B:45:B2:A1:85
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 0197722D3CBA79749ACED737BC8E3338F16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number: 0FE0
Signing time: Sun 15 Jun 2025 06:00:56 +0000
Manifest this update: Sun 15 Jun 2025 06:00:56 +0000
Manifest next update: Mon 16 Jun 2025 06:00:56 +0000
Files and hashes: 1: 3hbfOacsgkP1pg9qyg2MfHcWFYc.roa (hash: cOfUIokArUM0fSLBq8ZJr6uobm8IIPK6h0yhiKwO2kU=)
2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: STVYAGvtJppoGXVkGMFy40cUDobKtC9hQGmT4StnOuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2d:3c:ba:79:74:9a:ce:d7:37:bc:8e:33:38:f1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: Jun 15 06:00:56 2025 GMT
Not After : Jun 16 06:00:56 2025 GMT
Subject: CN=9da478fb3d1bb46c24310d739261267b45b2a185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:55:7b:af:3c:99:3d:8f:4b:a5:57:13:0c:
de:c2:d7:cf:82:b0:cd:66:28:ba:79:4f:6f:21:90:
16:84:61:70:20:98:db:1d:53:2b:55:d6:5b:05:0a:
63:46:9e:a2:23:1c:90:86:52:b5:dc:48:70:5e:6b:
91:6c:e8:26:5c:91:1e:bf:02:c5:9f:d6:11:4c:02:
08:89:28:a4:50:65:59:b9:c6:d3:5d:4f:b6:03:05:
ad:98:a5:ba:b9:63:d9:28:fc:79:a0:f8:5a:fe:dc:
c5:78:dd:6f:49:90:9d:2f:95:18:c1:2e:9d:4b:d9:
70:2a:d7:44:56:ea:53:b0:32:26:e5:ce:5e:ea:4f:
8e:5d:63:22:9e:af:5f:70:8a:06:14:62:ca:48:b3:
2f:56:7a:e3:fb:63:eb:74:8b:16:fe:58:cf:59:7a:
35:c0:19:33:99:4b:fb:45:48:71:d2:6f:76:7d:9a:
b4:b7:29:44:14:56:6e:ab:06:5f:9a:d6:65:6e:55:
af:c3:34:38:10:1a:71:d9:a9:f4:b7:73:99:5a:3b:
1a:b2:5d:c5:2d:8d:af:c9:69:79:10:31:7a:b5:84:
a0:4f:c0:7f:35:fb:b2:c3:f5:8c:81:47:41:19:34:
5c:94:86:b0:b0:53:dc:fc:19:9e:4e:b8:bb:43:83:
6c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A4:78:FB:3D:1B:B4:6C:24:31:0D:73:92:61:26:7B:45:B2:A1:85
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7e:63:4b:55:d0:fb:fc:4d:36:d9:cb:88:4f:04:dc:98:b3:
2b:d0:8a:a1:fe:2c:75:4e:1e:8e:9b:a0:d0:a8:b8:e5:f4:f0:
1a:61:a8:fe:9b:39:c9:26:cf:e0:e6:92:6b:c8:c1:09:bb:99:
b1:7f:28:8a:c8:20:df:7c:d9:23:16:4e:c9:a9:d3:3d:18:3d:
b4:c1:06:39:45:c4:4f:a2:70:22:23:20:13:12:51:f3:3a:8a:
3f:0a:00:f9:01:c8:d9:51:78:92:55:85:13:c8:3e:ab:52:4b:
98:45:5e:89:94:7b:6c:61:1d:f5:60:26:9e:11:b6:a8:f7:f7:
5e:fa:f6:81:01:a1:17:7e:b6:da:2c:be:d4:9b:02:e0:ce:a2:
05:5e:04:39:e9:19:a9:8a:2b:fa:f0:db:7d:5c:4e:7a:0a:29:
91:92:9c:32:33:6c:3b:0a:ab:54:bf:02:72:30:50:36:18:00:
b8:70:51:13:e9:f7:52:40:72:3b:f0:6e:0f:b4:cd:10:33:47:
1a:44:f6:54:c2:7e:df:23:a5:58:30:58:cc:15:6b:30:0e:75:
68:ff:04:e0:9f:75:6b:92:28:38:10:a7:cc:af:05:ab:57:49:
9a:96:76:18:69:9c:48:14:0a:68:c3:46:93:ce:8e:de:2b:73:
8e:32:4c:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyLTy6eXSaztc3vI4zOPFtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNTkwNzdlMDQzODc3MDU5NjAzY2FhMGUzZTU4NGIxNjI2
ZThmN2IwHhcNMjUwNjE1MDYwMDU2WhcNMjUwNjE2MDYwMDU2WjAzMTEwLwYDVQQD
Eyg5ZGE0NzhmYjNkMWJiNDZjMjQzMTBkNzM5MjYxMjY3YjQ1YjJhMTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2glVe688mT2PS6VXEwzewtfPgrDN
Zii6eU9vIZAWhGFwIJjbHVMrVdZbBQpjRp6iIxyQhlK13EhwXmuRbOgmXJEevwLF
n9YRTAIIiSikUGVZucbTXU+2AwWtmKW6uWPZKPx5oPha/tzFeN1vSZCdL5UYwS6d
S9lwKtdEVupTsDIm5c5e6k+OXWMinq9fcIoGFGLKSLMvVnrj+2PrdIsW/ljPWXo1
wBkzmUv7RUhx0m92fZq0tylEFFZuqwZfmtZlblWvwzQ4EBpx2an0t3OZWjsasl3F
LY2vyWl5EDF6tYSgT8B/Nfuyw/WMgUdBGTRclIawsFPc/BmeTri7Q4NsUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2kePs9G7RsJDENc5JhJntFsqGFMB8GA1UdIwQY
MBaAFPFZB34EOHcFlgPKoOPlhLFibo97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wYWE1NDEtZTkwZi00NmZkLWEwZGMt
MDNkOTA0YzgwMmNlLzEvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8wYWE1NDEtZTkwZi00NmZkLWEwZGMtMDNkOTA0YzgwMmNl
LzEvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAin5jS1XQ
+/xNNtnLiE8E3JizK9CKof4sdU4ejpug0Ki45fTwGmGo/ps5ySbP4OaSa8jBCbuZ
sX8oisgg33zZIxZOyanTPRg9tMEGOUXET6JwIiMgExJR8zqKPwoA+QHI2VF4klWF
E8g+q1JLmEVeiZR7bGEd9WAmnhG2qPf3Xvr2gQGhF3622iy+1JsC4M6iBV4EOekZ
qYor+vDbfVxOegopkZKcMjNsOwqrVL8CcjBQNhgAuHBRE+n3UkByO/BuD7TNEDNH
GkT2VMJ+3yOlWDBYzBVrMA51aP8E4J91a5IoOBCnzK8Fq1dJmpZ2GGmcSBQKaMNG
k86O3itzjjJMgQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:02:37 2025 by rpki-client