Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
File: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft (raw, json)
Hash identifier: wkOIr2ZBJsqal1KG6iUSI0lktFzBGaebVp9IwTeuhfI=
Subject key identifier: 6A:82:7B:C6:02:D1:22:B6:57:31:48:6E:57:7F:4D:79:B8:DD:34:74
Authority key identifier: F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
Certificate issuer: /CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Certificate serial: 01976D3D5F72475BF9FAFB020AEFE0AB7142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
Manifest number: 122F
Signing time: Sat 14 Jun 2025 07:00:28 +0000
Manifest this update: Sat 14 Jun 2025 07:00:28 +0000
Manifest next update: Sun 15 Jun 2025 07:00:28 +0000
Files and hashes: 1: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl (hash: 0eKZuLQd3juPm+k1GYsspgfv2ZtDJhIqEPhVCt0n5dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:5f:72:47:5b:f9:fa:fb:02:0a:ef:e0:ab:71:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Validity
Not Before: Jun 14 07:00:28 2025 GMT
Not After : Jun 15 07:00:28 2025 GMT
Subject: CN=6a827bc602d122b65731486e577f4d79b8dd3474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:24:7f:5f:7e:70:f4:b7:11:5c:db:cd:8b:
39:ac:c6:a5:a5:bc:79:9a:cb:0c:21:dd:76:8c:2a:
dc:a7:eb:49:65:00:f1:05:c3:7c:81:6f:cf:55:3e:
93:ea:fd:4d:e3:8c:f6:43:32:b1:36:3a:50:55:50:
25:37:50:7c:11:92:d0:b2:a1:ee:de:e9:57:e5:45:
e5:05:94:c3:0c:71:9c:01:8a:fb:15:02:38:c9:ba:
b4:3e:f3:01:ac:75:fc:46:08:fd:82:a9:41:1a:fc:
aa:2b:2f:40:78:26:bd:fd:30:e0:ec:8a:81:79:5b:
b7:94:82:f4:d6:a0:97:53:fe:c8:a7:15:87:7e:85:
29:3f:5d:8d:01:5d:61:c9:05:7b:01:cc:b9:7f:25:
70:25:ab:83:be:0a:d6:1b:c7:37:2f:28:2d:3b:e5:
03:2a:ec:45:0b:68:aa:32:44:78:40:fa:0d:06:b8:
1a:b5:ac:31:da:a1:ca:be:a5:59:0e:5d:6c:a2:d6:
ea:8e:3b:c2:3d:70:a1:7b:33:b0:0c:05:3d:b7:b9:
6b:78:26:79:a5:69:cc:2b:58:a5:64:7b:e6:44:b1:
50:e1:01:4f:cc:1c:74:91:9f:6b:94:14:9e:1d:04:
5a:24:2a:25:c4:aa:8f:b5:37:e3:18:41:b2:dd:14:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:82:7B:C6:02:D1:22:B6:57:31:48:6E:57:7F:4D:79:B8:DD:34:74
X509v3 Authority Key Identifier:
keyid:F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1b:72:c5:74:53:f8:c0:a6:d6:93:42:3c:c6:e6:a4:66:7d:
68:82:b5:58:1b:c6:ea:68:22:0c:c7:90:02:f0:f9:5f:62:a3:
ee:80:18:ef:66:55:50:f4:7a:37:0f:07:db:50:8d:85:5f:5b:
0b:3d:61:4d:47:24:87:5d:f0:94:b5:cf:18:f3:24:27:af:af:
c9:9a:09:a8:81:1f:d0:ba:50:81:9d:ec:d7:a7:78:06:37:3b:
5d:e6:68:6b:f5:6c:e2:b8:c4:32:32:df:93:d6:66:25:39:92:
d2:f0:37:15:37:91:22:27:2e:0b:f6:5d:65:13:fd:6b:97:5e:
98:ca:e3:91:46:40:38:31:c4:6e:c0:6e:7a:f0:83:d4:87:47:
97:25:38:19:ef:8f:78:db:04:13:72:00:57:4c:97:71:2d:82:
fd:d4:36:bd:89:a1:e9:be:ae:a3:d8:ec:0c:04:41:01:43:8e:
b9:6e:b1:79:97:25:40:f7:56:b1:80:3e:0b:7c:19:46:43:a0:
a6:61:3f:ea:95:b2:b1:7a:63:b4:08:c3:54:55:66:2d:c7:5c:
29:7e:1a:cd:ae:f0:c4:72:cd:af:cf:11:2f:bb:7a:6e:e8:49:
5b:2e:89:12:42:17:26:f8:68:ba:e1:ea:d0:4e:a5:8b:bb:d2:
e4:5b:e1:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPV9yR1v5+vsCCu/gq3FCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMmIzODFlMDBkNjE2MjFhY2M0NWNmMThhM2U3MDU5N2Q1
YjkxODYwHhcNMjUwNjE0MDcwMDI4WhcNMjUwNjE1MDcwMDI4WjAzMTEwLwYDVQQD
Eyg2YTgyN2JjNjAyZDEyMmI2NTczMTQ4NmU1NzdmNGQ3OWI4ZGQzNDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsYkf19+cPS3EVzbzYs5rMalpbx5
mssMId12jCrcp+tJZQDxBcN8gW/PVT6T6v1N44z2QzKxNjpQVVAlN1B8EZLQsqHu
3ulX5UXlBZTDDHGcAYr7FQI4ybq0PvMBrHX8Rgj9gqlBGvyqKy9AeCa9/TDg7IqB
eVu3lIL01qCXU/7IpxWHfoUpP12NAV1hyQV7Acy5fyVwJauDvgrWG8c3LygtO+UD
KuxFC2iqMkR4QPoNBrgatawx2qHKvqVZDl1sotbqjjvCPXChezOwDAU9t7lreCZ5
pWnMK1ilZHvmRLFQ4QFPzBx0kZ9rlBSeHQRaJColxKqPtTfjGEGy3RTPAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqCe8YC0SK2VzFIbld/TXm43TR0MB8GA1UdIwQY
MBaAFPErOB4A1hYhrMRc8Yo+cFl9W5GGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFNzNEhnRFdGaUdzeEZ6eGlqNXdXWDFia1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84YjJjOWYtMTVjZS00MzRlLWJlOTMt
NWQ0MzZjZWY2MDhmLzEvOFNzNEhnRFdGaUdzeEZ6eGlqNXdXWDFia1lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84YjJjOWYtMTVjZS00MzRlLWJlOTMtNWQ0MzZjZWY2MDhm
LzEvOFNzNEhnRFdGaUdzeEZ6eGlqNXdXWDFia1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxtyxXRT
+MCm1pNCPMbmpGZ9aIK1WBvG6mgiDMeQAvD5X2Kj7oAY72ZVUPR6Nw8H21CNhV9b
Cz1hTUckh13wlLXPGPMkJ6+vyZoJqIEf0LpQgZ3s16d4Bjc7XeZoa/Vs4rjEMjLf
k9ZmJTmS0vA3FTeRIicuC/ZdZRP9a5demMrjkUZAODHEbsBuevCD1IdHlyU4Ge+P
eNsEE3IAV0yXcS2C/dQ2vYmh6b6uo9jsDARBAUOOuW6xeZclQPdWsYA+C3wZRkOg
pmE/6pWysXpjtAjDVFVmLcdcKX4aza7wxHLNr88RL7t6buhJWy6JEkIXJvhouuHq
0E6li7vS5Fvhsw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:42:06 2025 by rpki-client