
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft
File: i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft (raw, json)
Hash identifier: C+MRB9+z81j9lqs03pCZVHmpNjf7Chf1ePhKdFkgJeA=
Subject key identifier: 16:4E:2D:33:74:47:2F:BB:A6:1A:53:44:5A:56:33:E5:F4:6F:88:FA
Authority key identifier: 8B:C3:94:8D:8B:93:A2:1E:6D:57:D9:C6:55:4D:5E:DD:10:7D:09:AF
Certificate issuer: /CN=8bc3948d8b93a21e6d57d9c6554d5edd107d09af
Certificate serial: 01968A6ED66A97750EF155D6B9603657021C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8OUjYuToh5tV9nGVU1e3RB9Ca8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft
Manifest number: 011B
Signing time: Thu 01 May 2025 06:00:41 +0000
Manifest this update: Thu 01 May 2025 06:00:41 +0000
Manifest next update: Fri 02 May 2025 06:00:41 +0000
Files and hashes: 1: fvjwad8hv5M8RT1bW6F3smOFB2Y.roa (hash: at0gl2Sa+um/oWDDDgR4biQkEbCFJi5QlnnXaGwjc0g=)
2: i8OUjYuToh5tV9nGVU1e3RB9Ca8.crl (hash: jztiz6JGhtvsAm+JdaLZaZ7pAzwGZTH5W7ws54SlERw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8OUjYuToh5tV9nGVU1e3RB9Ca8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:6e:d6:6a:97:75:0e:f1:55:d6:b9:60:36:57:02:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bc3948d8b93a21e6d57d9c6554d5edd107d09af
Validity
Not Before: May 1 06:00:41 2025 GMT
Not After : May 2 06:00:41 2025 GMT
Subject: CN=164e2d3374472fbba61a53445a5633e5f46f88fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:2e:33:a2:18:ed:92:22:a0:08:d7:99:42:
22:1b:3e:d1:ce:57:54:20:d5:85:1a:13:8c:2c:b5:
5b:93:44:7f:1c:63:90:a2:af:ed:af:cd:15:a2:fa:
10:bb:a1:ab:36:03:40:78:6f:52:b4:ce:0d:f2:8a:
55:d2:1c:47:44:be:b5:72:fd:6c:64:5b:65:e4:87:
d2:3e:d2:0e:96:5b:74:cd:4b:1e:ca:06:01:17:ec:
53:82:ed:98:3d:9d:6b:b3:7f:32:89:8b:33:05:b3:
6f:9d:2f:e2:1d:a4:84:99:b8:d0:69:d4:09:cc:f8:
4e:24:3c:7d:7d:9d:66:0f:02:b0:d9:d6:b8:34:d9:
25:b0:83:97:1d:fc:d4:44:89:58:92:87:0f:0d:11:
a1:6a:ea:df:48:3f:34:63:cd:13:73:33:27:84:d8:
f6:01:c4:38:c8:00:01:e4:2b:75:dd:48:56:6e:83:
b0:eb:4f:88:0f:96:aa:8c:a4:58:6d:eb:a4:88:a4:
db:83:50:35:2c:77:fc:51:c4:c9:8a:bd:9b:cc:c2:
87:68:a8:b2:b8:9f:8e:4f:00:8f:a1:f1:10:cd:ca:
82:2e:73:ac:34:a8:4e:fb:a8:b7:6b:5d:74:40:8c:
48:36:ac:c3:f6:8d:48:ab:08:33:32:de:ca:06:f2:
22:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4E:2D:33:74:47:2F:BB:A6:1A:53:44:5A:56:33:E5:F4:6F:88:FA
X509v3 Authority Key Identifier:
keyid:8B:C3:94:8D:8B:93:A2:1E:6D:57:D9:C6:55:4D:5E:DD:10:7D:09:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8OUjYuToh5tV9nGVU1e3RB9Ca8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:db:8a:e8:2f:14:b5:fe:35:18:38:77:3b:c4:9f:4f:cd:75:
5a:69:c7:a0:16:bf:83:17:ef:8d:13:cb:3a:85:39:9e:28:35:
f7:63:31:63:51:44:46:5e:9c:fc:cd:43:c7:f8:f7:a5:3e:95:
7a:53:51:04:22:91:73:78:1a:c1:29:0a:3f:e5:8a:ed:02:b9:
a3:7c:91:a2:d0:fc:e3:6d:8c:26:47:03:87:33:0d:0f:57:24:
ef:87:f8:3a:b0:aa:d1:aa:6a:9e:c2:80:16:7e:6a:da:ea:b9:
ac:6c:5d:be:c4:da:fd:71:f0:93:a5:54:1a:72:6f:a2:60:a9:
4c:2f:86:06:c5:12:ad:ad:4a:25:04:94:6a:86:0a:15:72:49:
ec:61:b8:82:6a:f2:7a:8f:7a:63:5f:f4:78:f0:1b:03:35:22:
c1:1e:78:89:eb:28:7e:f2:b7:29:63:65:47:98:3a:83:08:e0:
37:35:25:75:57:bb:49:22:e4:32:d3:bf:cc:c3:d9:b4:3e:11:
61:b4:36:20:70:8e:25:4f:6a:81:e4:c9:e2:a6:49:f6:d6:c6:
63:8c:26:a9:b7:ed:bb:7d:07:67:55:7f:a1:1d:30:f9:7d:6d:
e5:0b:d9:f1:3b:83:e6:32:7f:58:42:07:12:9a:fc:66:20:a2:
22:e3:dd:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaKbtZql3UO8VXWuWA2VwIcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYzM5NDhkOGI5M2EyMWU2ZDU3ZDljNjU1NGQ1ZWRkMTA3
ZDA5YWYwHhcNMjUwNTAxMDYwMDQxWhcNMjUwNTAyMDYwMDQxWjAzMTEwLwYDVQQD
EygxNjRlMmQzMzc0NDcyZmJiYTYxYTUzNDQ1YTU2MzNlNWY0NmY4OGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0YuM6IY7ZIioAjXmUIiGz7RzldU
INWFGhOMLLVbk0R/HGOQoq/tr80VovoQu6GrNgNAeG9StM4N8opV0hxHRL61cv1s
ZFtl5IfSPtIOllt0zUseygYBF+xTgu2YPZ1rs38yiYszBbNvnS/iHaSEmbjQadQJ
zPhOJDx9fZ1mDwKw2da4NNklsIOXHfzURIlYkocPDRGhaurfSD80Y80TczMnhNj2
AcQ4yAAB5Ct13UhWboOw60+ID5aqjKRYbeukiKTbg1A1LHf8UcTJir2bzMKHaKiy
uJ+OTwCPofEQzcqCLnOsNKhO+6i3a110QIxINqzD9o1IqwgzMt7KBvIimQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZOLTN0Ry+7phpTRFpWM+X0b4j6MB8GA1UdIwQY
MBaAFIvDlI2Lk6IebVfZxlVNXt0QfQmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaThPVWpZdVRvaDV0VjluR1ZVMWUzUkI5Q2E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MTBlNTctMzhkYS00OTRkLTgyMDAt
ODkxZmEyMWM2ZjBiLzEvaThPVWpZdVRvaDV0VjluR1ZVMWUzUkI5Q2E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81MTBlNTctMzhkYS00OTRkLTgyMDAtODkxZmEyMWM2ZjBi
LzEvaThPVWpZdVRvaDV0VjluR1ZVMWUzUkI5Q2E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANuK6C8U
tf41GDh3O8SfT811WmnHoBa/gxfvjRPLOoU5nig192MxY1FERl6c/M1Dx/j3pT6V
elNRBCKRc3gawSkKP+WK7QK5o3yRotD8422MJkcDhzMND1ck74f4OrCq0apqnsKA
Fn5q2uq5rGxdvsTa/XHwk6VUGnJvomCpTC+GBsUSra1KJQSUaoYKFXJJ7GG4gmry
eo96Y1/0ePAbAzUiwR54iesofvK3KWNlR5g6gwjgNzUldVe7SSLkMtO/zMPZtD4R
YbQ2IHCOJU9qgeTJ4qZJ9tbGY4wmqbftu30HZ1V/oR0w+X1t5QvZ8TuD5jJ/WEIH
Epr8ZiCiIuPd6Q==
-----END CERTIFICATE-----
Generated at Thu May 1 11:16:39 2025 by rpki-client