Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
File: 8Q057dsAjRuJ35dBlg2_IET2V_s.mft (raw, json)
Hash identifier: +p+xxciQQoDpJOqmb1Ros7cjEabx7REWiDJcFIEo9AI=
Subject key identifier: 8F:71:61:81:79:58:BC:BE:5A:22:9D:C5:7E:65:9A:B0:D7:80:44:8E
Authority key identifier: F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB
Certificate issuer: /CN=f10d39eddb008d1b89df9741960dbf2044f657fb
Certificate serial: 01967CEA10A4E99EFF1ACFCDF01777E18548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
Manifest number: 1519
Signing time: Mon 28 Apr 2025 15:00:36 +0000
Manifest this update: Mon 28 Apr 2025 15:00:36 +0000
Manifest next update: Tue 29 Apr 2025 15:00:36 +0000
Files and hashes: 1: 8Q057dsAjRuJ35dBlg2_IET2V_s.crl (hash: xyvO3SpVr5KOIF4VisLw+oeHnqtgnJsQuWVXoBGOE6o=)
2: PKwMXWtc8zi6lG0zPr4Lt6yvauU.roa (hash: b1FZV9Y7SIyLBl239X/9J22IOe+GTQHWzBo3nom91OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:ea:10:a4:e9:9e:ff:1a:cf:cd:f0:17:77:e1:85:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10d39eddb008d1b89df9741960dbf2044f657fb
Validity
Not Before: Apr 28 15:00:36 2025 GMT
Not After : Apr 29 15:00:36 2025 GMT
Subject: CN=8f7161817958bcbe5a229dc57e659ab0d780448e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:2f:a3:b7:e0:28:79:0c:c9:bc:ec:e9:e8:
c8:1c:d6:08:7c:95:e7:d1:41:fc:b2:46:f1:c0:10:
8e:b3:c3:a2:16:03:36:b1:61:b7:2a:27:79:13:c9:
01:45:a7:3d:5c:7b:e9:82:94:4e:e1:2e:79:51:fa:
7f:05:ce:96:e5:25:b7:05:bf:36:b5:d4:d7:21:35:
36:a2:35:ff:71:65:af:c3:7c:4c:2d:33:97:72:82:
af:40:4c:05:58:29:de:db:55:02:32:f9:c5:a3:aa:
2b:b4:ac:24:1a:df:3c:a9:8f:0b:63:43:d1:64:1e:
cb:6e:2f:ec:84:7f:18:3d:2f:95:02:64:00:c4:5c:
63:3f:2b:e0:ee:65:fe:34:9b:2a:1e:fb:39:ae:d6:
4f:42:d9:58:76:a9:80:65:1f:d3:82:3c:af:91:f1:
95:31:4d:3f:55:c8:80:7c:b3:af:41:55:c8:9c:3e:
89:37:2a:b3:f1:46:06:34:54:f2:62:14:c5:f9:3b:
12:d9:f0:69:2d:02:99:22:69:c8:d7:2b:48:47:1a:
54:8d:f6:0b:ea:24:54:9a:0d:b9:a0:a1:37:78:8e:
74:85:4f:20:16:6d:93:45:04:23:d3:9c:e8:eb:83:
88:11:e5:4c:27:eb:58:49:b1:d9:fe:4b:52:f1:fc:
57:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:71:61:81:79:58:BC:BE:5A:22:9D:C5:7E:65:9A:B0:D7:80:44:8E
X509v3 Authority Key Identifier:
keyid:F1:0D:39:ED:DB:00:8D:1B:89:DF:97:41:96:0D:BF:20:44:F6:57:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Q057dsAjRuJ35dBlg2_IET2V_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/8Q057dsAjRuJ35dBlg2_IET2V_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a4:b1:be:79:01:18:0f:ea:fb:2c:ea:ac:4b:72:23:8e:47:
16:a0:a3:48:53:08:7a:63:94:4c:21:27:23:a6:f8:71:c9:3f:
e4:01:2f:2b:25:30:53:58:83:51:5a:b0:b2:b5:ec:4c:8c:ca:
0b:e7:5d:ac:60:12:a6:e1:64:87:9f:5d:31:1a:d0:3d:23:c5:
f2:09:df:1a:ff:a2:cc:12:ca:d3:77:ed:d2:d0:77:3f:7b:da:
da:e0:6c:a1:b3:5f:de:13:cc:92:ce:d4:78:58:d4:f8:cd:dc:
73:be:41:bc:72:93:63:cd:cf:aa:7c:d6:7c:1a:bd:f1:3a:6d:
b5:db:8e:48:6b:37:8b:df:92:15:2d:4a:5d:52:17:06:68:cf:
c9:63:ba:53:de:84:29:c9:c0:95:f0:6a:a5:c5:13:db:2e:d8:
d2:21:b4:2f:e6:f3:e9:05:5e:d8:ef:f3:d0:65:97:60:e1:18:
d5:70:6e:82:f5:6c:a9:5b:a9:79:5d:33:26:3e:d2:06:f6:22:
c7:c3:70:d7:40:11:97:3d:a5:d2:3d:15:f6:9e:97:05:3b:2b:
bf:07:5d:20:d3:aa:e7:2d:3a:49:0d:4c:78:17:0e:69:1c:74:
53:22:c5:10:0d:bf:f2:fb:df:f7:b9:3e:e8:b8:8d:84:68:22:
9f:53:58:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ86hCk6Z7/Gs/N8Bd34YVIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMGQzOWVkZGIwMDhkMWI4OWRmOTc0MTk2MGRiZjIwNDRm
NjU3ZmIwHhcNMjUwNDI4MTUwMDM2WhcNMjUwNDI5MTUwMDM2WjAzMTEwLwYDVQQD
Eyg4ZjcxNjE4MTc5NThiY2JlNWEyMjlkYzU3ZTY1OWFiMGQ3ODA0NDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU4vo7fgKHkMybzs6ejIHNYIfJXn
0UH8skbxwBCOs8OiFgM2sWG3Kid5E8kBRac9XHvpgpRO4S55Ufp/Bc6W5SW3Bb82
tdTXITU2ojX/cWWvw3xMLTOXcoKvQEwFWCne21UCMvnFo6ortKwkGt88qY8LY0PR
ZB7Lbi/shH8YPS+VAmQAxFxjPyvg7mX+NJsqHvs5rtZPQtlYdqmAZR/TgjyvkfGV
MU0/VciAfLOvQVXInD6JNyqz8UYGNFTyYhTF+TsS2fBpLQKZImnI1ytIRxpUjfYL
6iRUmg25oKE3eI50hU8gFm2TRQQj05zo64OIEeVMJ+tYSbHZ/ktS8fxXIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9xYYF5WLy+WiKdxX5lmrDXgESOMB8GA1UdIwQY
MBaAFPENOe3bAI0bid+XQZYNvyBE9lf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUt
ZjU2MmI4OTc0ZDhiLzEvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUtZjU2MmI4OTc0ZDhi
LzEvOFEwNTdkc0FqUnVKMzVkQmxnMl9JRVQyVl9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqSxvnkB
GA/q+yzqrEtyI45HFqCjSFMIemOUTCEnI6b4cck/5AEvKyUwU1iDUVqwsrXsTIzK
C+ddrGASpuFkh59dMRrQPSPF8gnfGv+izBLK03ft0tB3P3va2uBsobNf3hPMks7U
eFjU+M3cc75BvHKTY83PqnzWfBq98TpttduOSGs3i9+SFS1KXVIXBmjPyWO6U96E
KcnAlfBqpcUT2y7Y0iG0L+bz6QVe2O/z0GWXYOEY1XBugvVsqVupeV0zJj7SBvYi
x8Nw10ARlz2l0j0V9p6XBTsrvwddINOq5y06SQ1MeBcOaRx0UyLFEA2/8vvf97k+
6LiNhGgin1NYcw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:02:03 2025 by rpki-client