Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft
File: 8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft (raw, json)
Hash identifier: rn9dqCzkppzgkl31w23CZhFrMguWk3v4nF80eQN9HuE=
Subject key identifier: 2F:B1:A6:3C:72:9C:94:ED:FE:E1:65:38:37:7E:93:F6:E1:4E:37:F6
Authority key identifier: F0:7B:E9:D1:18:97:71:B7:33:7E:FC:1C:ED:2C:82:5D:C2:47:2A:56
Certificate issuer: /CN=f07be9d1189771b7337efc1ced2c825dc2472a56
Certificate serial: 019652DB962985295FEBA2BADAB3E9CF9311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft
Manifest number: 0225
Signing time: Sun 20 Apr 2025 11:00:44 +0000
Manifest this update: Sun 20 Apr 2025 11:00:44 +0000
Manifest next update: Mon 21 Apr 2025 11:00:44 +0000
Files and hashes: 1: 8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl (hash: 8jMHc4DqRymi7q7SKYEklmTZ8Jwl3DgMl6E54bRM6zY=)
2: J2wzb8YKKVcFBB9aw2nmFsUG6Ac.roa (hash: uNatwiz0kls9jaP1S1snowxFlS7dqcfH880Un/eLhPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:96:29:85:29:5f:eb:a2:ba:da:b3:e9:cf:93:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f07be9d1189771b7337efc1ced2c825dc2472a56
Validity
Not Before: Apr 20 11:00:44 2025 GMT
Not After : Apr 21 11:00:44 2025 GMT
Subject: CN=2fb1a63c729c94edfee16538377e93f6e14e37f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:e0:55:31:53:5d:6b:9e:79:e4:1a:16:f2:
59:dc:73:0b:73:cb:7c:c9:f7:85:ce:12:f6:d2:a2:
fd:ac:7b:f1:da:c5:c9:71:80:59:11:3b:1a:cf:a5:
72:c1:eb:f8:56:d1:34:85:c9:bf:55:c1:9e:00:80:
9e:90:37:45:51:e8:a8:55:d2:4d:ee:57:52:27:0b:
cd:56:ca:79:e2:3c:48:7b:69:4b:e7:14:a2:9f:e9:
4d:20:f5:4f:32:48:e0:1c:67:f9:7a:a1:25:c4:a4:
e9:a0:69:11:8b:95:98:6a:da:ae:67:3f:88:9b:99:
4e:18:8f:a7:ee:0c:b7:15:4b:42:a6:ab:dd:51:38:
3c:89:0b:79:9e:9a:e6:4e:24:fa:8d:77:c5:7a:e9:
fd:ee:56:7b:b9:25:e1:21:c0:2d:11:65:73:64:0d:
a3:bd:75:39:49:d2:51:ad:8e:d3:1f:b9:b9:9e:50:
5d:a2:48:95:13:0b:e7:a7:55:6b:37:68:75:37:94:
20:0c:8d:55:46:db:63:bf:9a:9d:16:77:2b:d2:ac:
ad:c7:bd:32:cf:a8:3c:90:ba:31:e3:3a:af:3c:2d:
23:4c:03:57:19:fd:2b:63:00:18:5b:9f:fe:5d:93:
d9:74:cb:94:b0:8a:8b:68:f2:ed:5a:1a:e3:62:ae:
63:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B1:A6:3C:72:9C:94:ED:FE:E1:65:38:37:7E:93:F6:E1:4E:37:F6
X509v3 Authority Key Identifier:
keyid:F0:7B:E9:D1:18:97:71:B7:33:7E:FC:1C:ED:2C:82:5D:C2:47:2A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:db:50:c6:c2:75:8f:84:b9:b6:0a:5b:3b:20:ff:d0:cf:ba:
4c:92:26:db:2d:23:3f:07:28:0c:1f:79:35:5b:f0:41:5e:c5:
80:c7:84:16:d1:1e:c5:88:cf:75:67:b8:17:14:bc:6b:a8:65:
4c:07:e3:7e:ba:d1:e7:ad:cc:22:b5:e4:a0:fd:d8:88:d6:b6:
4b:a6:28:77:4c:ae:f5:bb:95:06:05:39:94:6a:66:48:1e:70:
7d:7e:e9:5b:56:18:12:53:8d:0a:69:1a:24:bc:ad:d9:4d:4e:
49:07:ec:f6:93:19:af:f2:99:27:9c:94:49:4f:8e:a0:47:e6:
ed:91:3c:78:0e:fd:a6:f9:28:97:94:b2:bf:d6:60:3f:6b:e2:
d3:48:18:a9:55:2d:48:7e:c8:62:3e:75:31:b5:42:36:bc:01:
07:e3:6a:3f:11:78:bc:3f:73:d8:fb:52:97:6c:96:7f:1b:f9:
95:17:cd:47:28:9e:44:9e:4a:b5:1f:59:6d:16:1a:59:48:03:
1b:a9:84:4b:9d:ac:66:12:b1:06:df:82:00:d1:06:96:92:74:
c7:48:6d:df:ab:ef:01:88:72:df:c3:58:41:b0:b4:2b:2f:1a:
18:6e:4b:11:8e:29:6d:2f:19:88:2e:e6:d8:2b:52:57:96:4f:
fa:a9:b8:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZS25YphSlf66K62rPpz5MRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwN2JlOWQxMTg5NzcxYjczMzdlZmMxY2VkMmM4MjVkYzI0
NzJhNTYwHhcNMjUwNDIwMTEwMDQ0WhcNMjUwNDIxMTEwMDQ0WjAzMTEwLwYDVQQD
EygyZmIxYTYzYzcyOWM5NGVkZmVlMTY1MzgzNzdlOTNmNmUxNGUzN2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouHgVTFTXWueeeQaFvJZ3HMLc8t8
yfeFzhL20qL9rHvx2sXJcYBZETsaz6Vywev4VtE0hcm/VcGeAICekDdFUeioVdJN
7ldSJwvNVsp54jxIe2lL5xSin+lNIPVPMkjgHGf5eqElxKTpoGkRi5WYatquZz+I
m5lOGI+n7gy3FUtCpqvdUTg8iQt5nprmTiT6jXfFeun97lZ7uSXhIcAtEWVzZA2j
vXU5SdJRrY7TH7m5nlBdokiVEwvnp1VrN2h1N5QgDI1VRttjv5qdFncr0qytx70y
z6g8kLox4zqvPC0jTANXGf0rYwAYW5/+XZPZdMuUsIqLaPLtWhrjYq5jMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+xpjxynJTt/uFlODd+k/bhTjf2MB8GA1UdIwQY
MBaAFPB76dEYl3G3M378HO0sgl3CRypWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEh2cDBSaVhjYmN6ZnZ3YzdTeUNYY0pIS2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lYzE4MTYtNTQ2Ni00NWE2LWFlNjEt
M2ZiMDg3MGVhMjU5LzEvOEh2cDBSaVhjYmN6ZnZ3YzdTeUNYY0pIS2xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lYzE4MTYtNTQ2Ni00NWE2LWFlNjEtM2ZiMDg3MGVhMjU5
LzEvOEh2cDBSaVhjYmN6ZnZ3YzdTeUNYY0pIS2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9tQxsJ1
j4S5tgpbOyD/0M+6TJIm2y0jPwcoDB95NVvwQV7FgMeEFtEexYjPdWe4FxS8a6hl
TAfjfrrR563MIrXkoP3YiNa2S6Yod0yu9buVBgU5lGpmSB5wfX7pW1YYElONCmka
JLyt2U1OSQfs9pMZr/KZJ5yUSU+OoEfm7ZE8eA79pvkol5Syv9ZgP2vi00gYqVUt
SH7IYj51MbVCNrwBB+NqPxF4vD9z2PtSl2yWfxv5lRfNRyieRJ5KtR9ZbRYaWUgD
G6mES52sZhKxBt+CANEGlpJ0x0ht36vvAYhy38NYQbC0Ky8aGG5LEY4pbS8ZiC7m
2CtSV5ZP+qm4zQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:26:58 2025 by rpki-client