Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier: In6/YNE/S5WdHXv7gEjhFGTO2jAa1D0xJuXXqJ7xw5U=
Subject key identifier: 87:3E:A1:01:94:C4:F1:EE:B4:EA:81:7E:B3:8F:5C:0F:C4:57:65:0B
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 0196594B2B57E37D7E767EC3A49312474B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number: 1041
Signing time: Mon 21 Apr 2025 17:00:20 +0000
Manifest this update: Mon 21 Apr 2025 17:00:20 +0000
Manifest next update: Tue 22 Apr 2025 17:00:20 +0000
Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: MBNRcCYXXnowK+iOn06+Y2KaNX8bRGmtFqW0tSQ6y5M=)
2: egJez3AEE17hCNzFwTYyy-yFWOk.roa (hash: tusTlSSqSFD7zKHlwWaKcKWcJ80R+Gl9wxxF6SdsjMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:2b:57:e3:7d:7e:76:7e:c3:a4:93:12:47:4b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: Apr 21 17:00:20 2025 GMT
Not After : Apr 22 17:00:20 2025 GMT
Subject: CN=873ea10194c4f1eeb4ea817eb38f5c0fc457650b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:26:9d:17:6a:e1:e9:45:06:5f:05:1b:e9:d0:
89:b0:05:db:ee:83:80:fa:23:6d:6a:d3:1d:b1:91:
2c:19:24:0a:16:f2:e9:8f:8d:1d:f2:15:ea:50:37:
1d:d8:a8:21:dc:a0:c5:57:25:dd:d4:8e:d8:3c:f2:
f3:35:00:4d:db:71:64:89:54:4c:df:f9:d4:e0:b3:
28:94:8c:4a:48:ce:78:e4:82:c6:ab:32:cb:1a:bb:
ac:db:15:9b:d9:8a:57:9d:a3:04:d7:eb:97:14:0f:
a1:9f:54:d7:3a:ac:80:96:20:c8:2c:c6:4b:ac:c6:
8d:8d:28:24:fb:82:f2:5a:dc:d8:12:ed:23:ca:48:
66:81:3c:36:83:f2:bc:06:72:44:9a:0b:69:78:a7:
c5:55:d5:d9:c3:02:50:de:e6:91:98:5e:85:d3:62:
f3:9a:54:7f:66:90:7c:13:79:38:6e:f4:45:8c:76:
c4:99:05:51:2b:43:b7:4f:64:b9:ab:f3:fe:55:84:
6c:ad:4b:d6:f7:3d:30:02:5d:9f:1a:f2:45:bd:88:
6a:65:27:fe:7f:5d:b8:8c:2c:2e:34:2a:4c:2b:d9:
7a:77:fb:39:2c:3b:1f:31:0d:b9:ac:10:7d:4d:00:
a0:ea:36:b6:78:7b:58:63:97:49:a1:4e:e8:1c:bd:
45:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3E:A1:01:94:C4:F1:EE:B4:EA:81:7E:B3:8F:5C:0F:C4:57:65:0B
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:90:cd:43:97:a7:05:fc:60:88:87:89:67:af:63:fe:2c:3f:
a3:5d:ae:fe:ba:87:b7:30:11:9f:49:0f:9c:11:ff:0d:c7:a5:
16:dc:c4:08:39:08:d8:28:78:e5:83:6d:4d:21:4d:1e:9e:05:
90:24:90:67:49:41:30:05:3a:8a:bd:8d:2d:59:e8:f6:30:d4:
5f:82:a6:32:a9:54:a7:3a:b0:f0:96:48:f8:5d:45:f8:38:cd:
f7:3f:1a:de:5e:78:45:ab:f7:68:fe:8b:82:56:66:52:62:3e:
8d:7a:d2:39:40:8f:50:fa:6a:01:54:86:69:93:ed:b7:1f:0b:
ee:96:01:0a:68:30:ad:d4:f3:2b:2d:7f:79:fd:27:33:a2:6b:
7d:3e:a1:a6:78:cf:ca:1a:48:da:9e:b5:e9:01:58:df:15:30:
59:6a:81:e0:2c:8b:0b:80:11:e9:87:17:81:fd:fe:aa:54:78:
29:b2:45:65:02:cc:00:68:8a:d3:ce:53:56:3c:fa:9f:7a:20:
ff:00:23:c5:33:59:94:e8:b7:0f:bb:c3:6c:f2:5d:6f:41:df:
dc:1b:d6:47:43:1e:f5:12:3b:35:f1:a1:63:46:02:d5:77:57:
74:f6:48:f1:8a:09:22:8b:ec:b4:d1:36:fa:3d:5e:b6:c1:ef:
1b:26:79:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZSytX431+dn7DpJMSR0sPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYjI4ZDZhYzZlYzQwZGZiMjJmOTZmN2I1NTYxNjljMDQ5
OTAxMzcwHhcNMjUwNDIxMTcwMDIwWhcNMjUwNDIyMTcwMDIwWjAzMTEwLwYDVQQD
Eyg4NzNlYTEwMTk0YzRmMWVlYjRlYTgxN2ViMzhmNWMwZmM0NTc2NTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyadF2rh6UUGXwUb6dCJsAXb7oOA
+iNtatMdsZEsGSQKFvLpj40d8hXqUDcd2Kgh3KDFVyXd1I7YPPLzNQBN23FkiVRM
3/nU4LMolIxKSM545ILGqzLLGrus2xWb2YpXnaME1+uXFA+hn1TXOqyAliDILMZL
rMaNjSgk+4LyWtzYEu0jykhmgTw2g/K8BnJEmgtpeKfFVdXZwwJQ3uaRmF6F02Lz
mlR/ZpB8E3k4bvRFjHbEmQVRK0O3T2S5q/P+VYRsrUvW9z0wAl2fGvJFvYhqZSf+
f124jCwuNCpMK9l6d/s5LDsfMQ25rBB9TQCg6ja2eHtYY5dJoU7oHL1FsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIc+oQGUxPHutOqBfrOPXA/EV2ULMB8GA1UdIwQY
MBaAFPCyjWrG7EDfsi+W97VWFpwEmQE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81Y2U3ZjctZTBmZS00MzYxLTgyYzIt
NDc0NjU5ZWRiMzYxLzEvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81Y2U3ZjctZTBmZS00MzYxLTgyYzItNDc0NjU5ZWRiMzYx
LzEvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJDNQ5en
BfxgiIeJZ69j/iw/o12u/rqHtzARn0kPnBH/DcelFtzECDkI2Ch45YNtTSFNHp4F
kCSQZ0lBMAU6ir2NLVno9jDUX4KmMqlUpzqw8JZI+F1F+DjN9z8a3l54Rav3aP6L
glZmUmI+jXrSOUCPUPpqAVSGaZPttx8L7pYBCmgwrdTzKy1/ef0nM6JrfT6hpnjP
yhpI2p616QFY3xUwWWqB4CyLC4AR6YcXgf3+qlR4KbJFZQLMAGiK085TVjz6n3og
/wAjxTNZlOi3D7vDbPJdb0Hf3BvWR0Me9RI7NfGhY0YC1XdXdPZI8YoJIovstNE2
+j1etsHvGyZ5Ww==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:37 2025 by rpki-client