Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
File: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json)
Hash identifier: Vh9nG7zPmK7Uhqcm7iVfciEcUSL0tIoQ/9fG1caWvYc=
Subject key identifier: 39:95:B9:8C:D3:91:9C:6F:40:58:A7:B4:1E:B8:6E:47:C0:8D:F7:55
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial: 019781D6FCB7916AC2E3E8E569377CDF8951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
Manifest number: 070B
Signing time: Wed 18 Jun 2025 07:00:39 +0000
Manifest this update: Wed 18 Jun 2025 07:00:39 +0000
Manifest next update: Thu 19 Jun 2025 07:00:39 +0000
Files and hashes: 1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: LsLfKGctgh3BzWngwGhgSSAmxnUSjPuQU1NxGNMTT9w=)
2: nJ3bZDTF3klediLdsGzrGEizejI.roa (hash: XOv5pl5Y0ikBc3XP047Nh+8GGnppEmfe5vg+dWr14YI=)
3: qnlY-2XHeoB5T91L-eAv--psw3s.roa (hash: GlcTsLYuOrrcX+rD96Cshdq9OCpUu7GdPBcBG+rwyLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:d6:fc:b7:91:6a:c2:e3:e8:e5:69:37:7c:df:89:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
Validity
Not Before: Jun 18 07:00:39 2025 GMT
Not After : Jun 19 07:00:39 2025 GMT
Subject: CN=3995b98cd3919c6f4058a7b41eb86e47c08df755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:0f:38:fe:a6:a7:8a:8c:18:c2:ae:f1:d4:
b9:72:4d:f3:11:4a:cb:d3:1c:f2:58:17:2a:d2:d0:
90:42:aa:f6:cb:7c:bb:ca:33:d2:4c:15:47:6d:db:
1d:7a:63:2b:0e:82:eb:33:18:50:85:c9:7d:2c:24:
b2:07:e5:90:ba:1b:84:dd:c2:9d:ea:9d:b6:b2:78:
ad:24:b6:c4:10:8f:f4:97:06:63:09:84:06:1c:f1:
ed:97:a1:66:0e:df:e2:d8:95:fb:a1:fc:dd:e2:51:
41:77:aa:85:30:11:cb:05:ac:85:52:97:ee:cf:43:
b5:f5:ec:98:72:96:6d:a3:78:ec:52:73:15:da:f6:
6e:0b:a7:9b:6f:b9:64:d3:6c:1e:40:1a:2e:bf:e7:
8b:58:cb:76:3d:08:ec:19:69:fe:8b:ae:f0:a3:b8:
74:f0:54:f9:b6:28:d5:8c:0f:b6:14:c3:3d:f9:1c:
ff:a4:91:3f:5e:0d:69:a2:2a:2e:44:20:22:df:aa:
b2:cb:db:0e:43:06:38:4a:c8:72:57:6f:06:2e:28:
57:81:9e:c0:99:85:f6:4f:39:7b:e0:dc:3b:27:07:
86:1d:a3:51:8b:e5:1b:55:3b:58:ec:3f:31:f8:fc:
85:aa:bb:07:54:48:da:d7:0e:77:e5:ae:0c:8e:18:
fb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:95:B9:8C:D3:91:9C:6F:40:58:A7:B4:1E:B8:6E:47:C0:8D:F7:55
X509v3 Authority Key Identifier:
keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:85:c2:8e:62:e4:c6:ad:0b:e8:f6:dd:ae:64:e8:1f:7e:09:
5f:25:b5:05:31:13:bd:41:46:98:c7:2b:46:09:8e:74:cd:4a:
67:b4:19:ea:47:6d:39:7c:7c:b6:42:86:4c:3f:0e:8c:db:99:
ee:06:9f:2b:a7:c6:3f:b4:09:63:7c:cb:7e:58:71:74:f5:aa:
20:60:ca:af:05:28:e8:d8:c7:c9:79:d6:64:65:56:96:bc:54:
d2:7b:a8:63:64:82:86:10:d5:ff:0a:54:62:21:7b:84:10:1f:
56:26:eb:e5:86:5b:cc:ca:ca:73:8c:aa:e3:87:4c:46:bc:f8:
53:dd:8b:5d:de:f1:5c:98:78:60:d4:a5:a6:c6:60:11:4a:0e:
56:90:29:f9:49:9b:2b:ba:e9:07:61:44:51:56:5c:72:a0:f2:
c6:f2:a0:1c:a4:28:a3:6b:97:7c:3d:9b:ed:b5:10:47:a6:10:
da:65:99:f8:35:44:7a:8a:76:46:6f:f2:37:1c:a6:18:27:89:
b2:98:36:f5:2d:db:dc:71:de:45:6e:6b:bc:09:af:72:02:51:
d8:db:d0:a4:e3:5c:97:ca:16:3e:3d:bb:a8:5b:58:6c:8a:2c:
14:47:20:a1:46:8a:5e:eb:76:2d:e5:0c:8b:10:ea:9a:06:d1:
1e:0d:50:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeB1vy3kWrC4+jlaTd834lRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMGJmNDYzMDNmZjU0YTUwNWY1MzNjNTU0MjUxOTIzZTQx
ZjU5MjYwHhcNMjUwNjE4MDcwMDM5WhcNMjUwNjE5MDcwMDM5WjAzMTEwLwYDVQQD
EygzOTk1Yjk4Y2QzOTE5YzZmNDA1OGE3YjQxZWI4NmU0N2MwOGRmNzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVcPOP6mp4qMGMKu8dS5ck3zEUrL
0xzyWBcq0tCQQqr2y3y7yjPSTBVHbdsdemMrDoLrMxhQhcl9LCSyB+WQuhuE3cKd
6p22snitJLbEEI/0lwZjCYQGHPHtl6FmDt/i2JX7ofzd4lFBd6qFMBHLBayFUpfu
z0O19eyYcpZto3jsUnMV2vZuC6ebb7lk02weQBouv+eLWMt2PQjsGWn+i67wo7h0
8FT5tijVjA+2FMM9+Rz/pJE/Xg1poiouRCAi36qyy9sOQwY4SshyV28GLihXgZ7A
mYX2Tzl74Nw7JweGHaNRi+UbVTtY7D8x+PyFqrsHVEja1w535a4Mjhj7ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmVuYzTkZxvQFintB64bkfAjfdVMB8GA1UdIwQY
MBaAFPIL9GMD/1SlBfUzxVQlGSPkH1kmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGd2MFl3UF9WS1VGOVRQRlZDVVpJLVFmV1NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84MTU1OTAtOTUxYy00YzFmLTg2OTct
YzM2OTQwODhmMzRhLzEvOGd2MFl3UF9WS1VGOVRQRlZDVVpJLVFmV1NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84MTU1OTAtOTUxYy00YzFmLTg2OTctYzM2OTQwODhmMzRh
LzEvOGd2MFl3UF9WS1VGOVRQRlZDVVpJLVFmV1NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuIXCjmLk
xq0L6PbdrmToH34JXyW1BTETvUFGmMcrRgmOdM1KZ7QZ6kdtOXx8tkKGTD8OjNuZ
7gafK6fGP7QJY3zLflhxdPWqIGDKrwUo6NjHyXnWZGVWlrxU0nuoY2SChhDV/wpU
YiF7hBAfVibr5YZbzMrKc4yq44dMRrz4U92LXd7xXJh4YNSlpsZgEUoOVpAp+Umb
K7rpB2FEUVZccqDyxvKgHKQoo2uXfD2b7bUQR6YQ2mWZ+DVEeop2Rm/yNxymGCeJ
spg29S3b3HHeRW5rvAmvcgJR2NvQpONcl8oWPj27qFtYbIosFEcgoUaKXut2LeUM
ixDqmgbRHg1Qhg==
-----END CERTIFICATE-----
Generated at Wed Jun 18 09:47:16 2025 by rpki-client