Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
File: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft (raw, json)
Hash identifier: CYVJVyTgHVxeLvA7Cm+RBu3vRg7JK5/bBgvZLWeJWzw=
Subject key identifier: AB:2F:DF:76:03:E8:40:91:CD:3E:51:72:28:6A:EF:A1:14:68:C4:A8
Authority key identifier: 8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
Certificate issuer: /CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Certificate serial: 019788484229202AEFF714851833EA866354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
Manifest number: 152F
Signing time: Thu 19 Jun 2025 13:02:06 +0000
Manifest this update: Thu 19 Jun 2025 13:02:06 +0000
Manifest next update: Fri 20 Jun 2025 13:02:06 +0000
Files and hashes: 1: di6vtJn17ke553wiZoaxDGK1MLE.roa (hash: HpCMH1Ia0lvZ8f3O26OMSYPbId0TPu+1abwCSdtco9A=)
2: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl (hash: S00oYqv5kLX1+3Vti30Pw8P7Grk6ggPKATaG0DUUpG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:48:42:29:20:2a:ef:f7:14:85:18:33:ea:86:63:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Validity
Not Before: Jun 19 13:02:06 2025 GMT
Not After : Jun 20 13:02:06 2025 GMT
Subject: CN=ab2fdf7603e84091cd3e5172286aefa11468c4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:96:86:3e:b8:b7:0b:a8:c8:c1:f5:d6:96:a7:
1d:e5:de:cf:f3:ad:aa:84:ef:0c:60:7b:a2:99:90:
84:97:78:8b:66:12:37:fe:be:7c:fd:f5:16:6a:a1:
4e:0e:7b:a4:23:c7:44:2b:f4:13:35:cf:9d:03:6c:
5b:71:17:61:90:91:e2:58:49:94:d8:f4:de:fb:b9:
3f:3f:fc:b9:8e:72:af:61:11:16:41:7a:68:2a:85:
83:4d:df:45:91:f1:0e:4b:c0:ae:f1:43:99:89:83:
64:50:26:56:14:1d:2b:cf:65:a6:61:c6:b5:1f:d9:
9a:c5:bb:b6:b7:eb:44:06:32:c0:fa:53:6e:fb:df:
2f:1d:1b:fc:b9:b7:9e:25:58:b5:a5:db:f3:5a:a7:
4e:64:a6:2d:11:98:5e:b9:9d:e4:7f:6a:f2:91:74:
df:3b:9e:7d:13:93:07:3e:0a:1e:bc:5f:e0:c0:50:
b6:86:92:d2:34:22:5c:64:62:df:5e:41:75:25:25:
06:9a:c8:04:2a:74:1d:e0:e5:24:c5:1e:ab:8a:27:
a9:b3:da:c2:7d:a2:49:e7:16:ad:49:30:42:71:30:
b0:b7:fe:ad:52:72:6f:55:ff:23:a4:c2:8d:ce:30:
89:55:0d:97:a5:38:3e:a8:2a:8b:98:91:f6:2e:5a:
24:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2F:DF:76:03:E8:40:91:CD:3E:51:72:28:6A:EF:A1:14:68:C4:A8
X509v3 Authority Key Identifier:
keyid:8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:39:95:35:1a:a7:48:9e:65:87:00:e9:d5:90:4e:80:18:c3:
7b:70:2a:14:6b:c0:54:02:02:38:6b:1f:4c:70:3b:f0:08:81:
13:41:36:19:bc:6f:29:33:a6:db:b9:3c:62:55:c5:2c:35:89:
d0:52:04:8a:e0:65:26:c7:b6:aa:87:df:c4:d2:8e:27:36:d8:
1a:e5:a1:e2:c7:7b:ef:d5:57:ce:65:0c:2b:1f:78:e9:cf:51:
37:45:6d:f3:27:31:4c:91:4e:8b:4e:eb:f0:d3:3c:18:25:b7:
27:68:b0:cc:73:20:90:e8:1d:ae:33:00:c8:13:c0:72:fd:aa:
75:8a:25:3f:4c:5f:df:60:42:6f:44:a4:c0:36:a3:04:bd:ab:
bc:4f:48:c2:b1:86:18:69:ef:2c:f8:d5:18:92:c6:7e:08:61:
cf:59:23:44:c6:ec:61:17:1b:90:9f:38:76:60:2c:bb:3b:4b:
4b:79:5e:b0:7c:7a:df:5f:75:75:28:c8:ed:d6:7c:ef:c2:ed:
12:a9:50:48:ae:83:8e:e7:9a:58:fa:3f:2f:d0:b1:96:d5:cc:
22:ff:33:b9:9c:79:10:87:5f:e1:3d:57:da:78:9e:af:21:72:
08:3b:b3:c4:80:f8:90:05:5e:49:ea:27:47:19:5f:09:ac:92:
5c:58:fb:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeISEIpICrv9xSFGDPqhmNUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiY2JkYjUxZWI4MDIyNmY0MTQ3N2E3YmM1MGUwZjk2MTQ1
NWVkODMwHhcNMjUwNjE5MTMwMjA2WhcNMjUwNjIwMTMwMjA2WjAzMTEwLwYDVQQD
EyhhYjJmZGY3NjAzZTg0MDkxY2QzZTUxNzIyODZhZWZhMTE0NjhjNGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZaGPri3C6jIwfXWlqcd5d7P862q
hO8MYHuimZCEl3iLZhI3/r58/fUWaqFODnukI8dEK/QTNc+dA2xbcRdhkJHiWEmU
2PTe+7k/P/y5jnKvYREWQXpoKoWDTd9FkfEOS8Cu8UOZiYNkUCZWFB0rz2WmYca1
H9maxbu2t+tEBjLA+lNu+98vHRv8ubeeJVi1pdvzWqdOZKYtEZheuZ3kf2rykXTf
O559E5MHPgoevF/gwFC2hpLSNCJcZGLfXkF1JSUGmsgEKnQd4OUkxR6riieps9rC
faJJ5xatSTBCcTCwt/6tUnJvVf8jpMKNzjCJVQ2XpTg+qCqLmJH2LlokmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsv33YD6ECRzT5Rcihq76EUaMSoMB8GA1UdIwQY
MBaAFIvL21HrgCJvQUd6e8UOD5YUVe2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81NjRmM2EtNTJkNi00ZDA5LTgxZTIt
ZWZhOTM5MWY3ZDllLzEvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy81NjRmM2EtNTJkNi00ZDA5LTgxZTItZWZhOTM5MWY3ZDll
LzEvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTmVNRqn
SJ5lhwDp1ZBOgBjDe3AqFGvAVAICOGsfTHA78AiBE0E2GbxvKTOm27k8YlXFLDWJ
0FIEiuBlJse2qoffxNKOJzbYGuWh4sd779VXzmUMKx946c9RN0Vt8ycxTJFOi07r
8NM8GCW3J2iwzHMgkOgdrjMAyBPAcv2qdYolP0xf32BCb0SkwDajBL2rvE9IwrGG
GGnvLPjVGJLGfghhz1kjRMbsYRcbkJ84dmAsuztLS3lesHx63191dSjI7dZ878Lt
EqlQSK6DjueaWPo/L9CxltXMIv8zuZx5EIdf4T1X2nieryFyCDuzxID4kAVeSeon
RxlfCaySXFj7Ng==
-----END CERTIFICATE-----
Generated at Thu Jun 19 19:19:21 2025 by rpki-client