Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier: x41X+bnF71ciezK2CmfRBfpnOii2sZem9vnlmz1RFMM=
Subject key identifier: 6B:F9:20:D8:47:D8:CE:64:69:87:92:EC:98:CC:F9:22:61:FD:C2:3B
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 0196771EB5BB566B5DDBA7FA277691F63A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number: 0F5E
Signing time: Sun 27 Apr 2025 12:00:23 +0000
Manifest this update: Sun 27 Apr 2025 12:00:23 +0000
Manifest next update: Mon 28 Apr 2025 12:00:23 +0000
Files and hashes: 1: 3hbfOacsgkP1pg9qyg2MfHcWFYc.roa (hash: cOfUIokArUM0fSLBq8ZJr6uobm8IIPK6h0yhiKwO2kU=)
2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: uSNHLYDpANCBR4fMKlQnPKKx3Iv/5ozLiP3QS2PhzmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:b5:bb:56:6b:5d:db:a7:fa:27:76:91:f6:3a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: Apr 27 12:00:23 2025 GMT
Not After : Apr 28 12:00:23 2025 GMT
Subject: CN=6bf920d847d8ce64698792ec98ccf92261fdc23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:76:50:ee:3e:d8:df:05:8b:ca:e8:ed:9e:2f:
38:2c:6d:55:4c:06:98:c2:cb:c9:2f:7a:07:a3:e3:
92:9f:ac:74:d2:ab:82:81:8d:a1:7b:7a:73:a3:f1:
05:b6:97:5a:aa:bb:54:ad:20:61:36:51:c1:fc:9f:
94:3c:bc:84:05:69:7a:94:47:b9:90:7a:6f:bd:cf:
9a:a0:52:85:91:3b:0d:2d:a8:a2:14:95:5d:df:99:
62:de:bd:17:c5:d3:32:b1:d6:fe:1e:2e:f1:1f:ba:
59:84:e6:1e:fe:d0:61:a8:f9:ee:1f:a8:1d:eb:85:
04:8f:bc:4e:d0:11:50:6c:7e:96:85:ed:30:ff:a7:
a7:36:49:47:9f:a0:ba:55:38:06:4e:87:3c:e7:9a:
d6:14:32:36:7b:63:5e:9a:af:07:d4:10:f7:43:1a:
a9:18:a0:60:d5:98:67:d5:d3:b2:45:e9:34:24:a8:
00:96:a2:69:cb:d1:6e:a9:94:ce:de:c0:af:84:4c:
46:5c:b7:c5:f4:c0:ab:7a:34:98:1d:ca:dd:8e:f1:
37:79:7d:ca:0b:c0:fc:98:aa:01:0e:68:c7:13:8f:
3a:e6:3b:b4:c7:63:a9:3b:0d:fe:6b:43:d1:12:70:
38:5a:b1:17:5f:80:c6:ea:02:99:b7:58:0b:91:ff:
dd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F9:20:D8:47:D8:CE:64:69:87:92:EC:98:CC:F9:22:61:FD:C2:3B
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8c:9a:3e:95:e1:b6:d9:10:ba:57:dd:b0:c9:bb:d7:db:48:
0d:b3:5b:27:88:b0:5a:1a:41:7d:85:2c:54:b2:e7:f8:6f:46:
21:99:f8:33:67:9f:17:ba:f9:d4:ff:67:76:34:e7:d6:3d:73:
89:82:cf:f2:00:4e:0a:8b:64:09:a6:7b:8c:3a:6c:68:9e:05:
66:51:c5:af:27:f8:a1:e4:5d:a8:78:52:03:46:c0:3f:ab:35:
93:35:f2:82:21:30:29:d7:ca:10:0f:c9:11:a6:5b:05:2d:dd:
5b:12:8d:e9:58:e5:8a:69:2c:22:6b:9c:c0:f8:b9:86:f0:a3:
05:43:3b:89:d1:99:0a:23:61:17:6a:44:bf:c4:de:35:3b:52:
07:31:a6:12:fa:af:18:6e:6d:3e:96:05:4e:36:14:e2:e0:94:
49:dc:f4:66:dc:12:d3:d9:c8:f1:3f:9c:e4:1d:75:16:a5:2f:
40:7c:6e:fa:aa:07:72:07:d2:3c:27:79:39:75:c6:8e:a0:d6:
6c:b5:a3:e5:7f:c4:a7:85:b6:ce:be:d7:58:ce:82:10:be:6d:
c9:22:2e:22:d6:24:7b:ba:24:ee:8b:a3:02:5e:e7:c1:bb:e1:
b2:06:00:a3:4e:a5:3a:01:6b:64:2a:87:58:5c:07:0a:d7:19:
d5:40:ed:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3HrW7Vmtd26f6J3aR9joZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNTkwNzdlMDQzODc3MDU5NjAzY2FhMGUzZTU4NGIxNjI2
ZThmN2IwHhcNMjUwNDI3MTIwMDIzWhcNMjUwNDI4MTIwMDIzWjAzMTEwLwYDVQQD
Eyg2YmY5MjBkODQ3ZDhjZTY0Njk4NzkyZWM5OGNjZjkyMjYxZmRjMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43ZQ7j7Y3wWLyujtni84LG1VTAaY
wsvJL3oHo+OSn6x00quCgY2he3pzo/EFtpdaqrtUrSBhNlHB/J+UPLyEBWl6lEe5
kHpvvc+aoFKFkTsNLaiiFJVd35li3r0XxdMysdb+Hi7xH7pZhOYe/tBhqPnuH6gd
64UEj7xO0BFQbH6Whe0w/6enNklHn6C6VTgGToc855rWFDI2e2Nemq8H1BD3Qxqp
GKBg1Zhn1dOyRek0JKgAlqJpy9FuqZTO3sCvhExGXLfF9MCrejSYHcrdjvE3eX3K
C8D8mKoBDmjHE4865ju0x2OpOw3+a0PREnA4WrEXX4DG6gKZt1gLkf/d4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGv5INhH2M5kaYeS7JjM+SJh/cI7MB8GA1UdIwQY
MBaAFPFZB34EOHcFlgPKoOPlhLFibo97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wYWE1NDEtZTkwZi00NmZkLWEwZGMt
MDNkOTA0YzgwMmNlLzEvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8wYWE1NDEtZTkwZi00NmZkLWEwZGMtMDNkOTA0YzgwMmNl
LzEvOFZrSGZnUTRkd1dXQThxZzQtV0VzV0p1ajNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4yaPpXh
ttkQulfdsMm719tIDbNbJ4iwWhpBfYUsVLLn+G9GIZn4M2efF7r51P9ndjTn1j1z
iYLP8gBOCotkCaZ7jDpsaJ4FZlHFryf4oeRdqHhSA0bAP6s1kzXygiEwKdfKEA/J
EaZbBS3dWxKN6VjlimksImucwPi5hvCjBUM7idGZCiNhF2pEv8TeNTtSBzGmEvqv
GG5tPpYFTjYU4uCUSdz0ZtwS09nI8T+c5B11FqUvQHxu+qoHcgfSPCd5OXXGjqDW
bLWj5X/Ep4W2zr7XWM6CEL5tySIuItYke7ok7oujAl7nwbvhsgYAo06lOgFrZCqH
WFwHCtcZ1UDtTA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:11:46 2025 by rpki-client