Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
File: 8fF-vMKlJa_PySIYFZyvUogpeNI.mft (raw, json)
Hash identifier: x7bAMsojftz3UuiN/oMRbnbP5kvDZCEgGc5fyMaO1L0=
Subject key identifier: 4F:DC:68:7F:3E:19:60:FA:23:D1:A1:F2:BB:A0:E9:85:3F:86:81:31
Authority key identifier: F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
Certificate issuer: /CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Certificate serial: 01964E5A02AFF6C2D87ADFE72FB91A4BDFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
Manifest number: 055A
Signing time: Sat 19 Apr 2025 14:00:43 +0000
Manifest this update: Sat 19 Apr 2025 14:00:43 +0000
Manifest next update: Sun 20 Apr 2025 14:00:43 +0000
Files and hashes: 1: 8fF-vMKlJa_PySIYFZyvUogpeNI.crl (hash: Bz0o9diLD+YYFWEy9c/w2iwpygduti5SKexquQ7b/do=)
2: xG5nFDK1Nyvy5vl4sT_P7td-s98.roa (hash: 9ZslVC10Wq5A6L0EoqSP1oGGII0oefI9/cuRC4XS49Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:5a:02:af:f6:c2:d8:7a:df:e7:2f:b9:1a:4b:df:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Validity
Not Before: Apr 19 14:00:43 2025 GMT
Not After : Apr 20 14:00:43 2025 GMT
Subject: CN=4fdc687f3e1960fa23d1a1f2bba0e9853f868131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:eb:de:77:01:ab:a4:66:7c:41:98:e4:0e:99:
a0:25:3f:74:2d:e4:4c:2b:4d:d0:d6:76:d7:fc:21:
8b:3f:f7:24:6d:d8:7f:d8:79:d8:06:e4:0a:e8:e5:
f5:66:31:eb:37:a5:37:d9:60:4d:63:4e:09:bf:de:
a7:42:ed:73:80:f0:d7:cb:3a:02:21:6e:ba:e8:d4:
b6:cd:1e:3d:67:d7:3a:c5:1c:76:d3:5a:d1:79:91:
cc:8d:33:62:c6:f5:dc:9d:70:e1:42:cf:ba:85:a9:
fa:d7:3c:96:39:7b:0a:7b:1f:ec:e6:76:32:d2:dc:
93:74:95:7d:b5:e7:f3:4f:2a:4a:ad:10:c7:c3:53:
1e:be:84:7c:6f:3f:81:62:da:b7:70:5c:86:0e:7e:
e2:ea:77:9c:2f:d7:4a:42:c6:d2:66:2a:91:15:f9:
84:95:1a:19:05:61:bc:08:1c:77:cf:65:55:8b:05:
ca:6e:b2:6d:c0:72:e8:14:eb:ff:94:92:12:42:1e:
bc:58:07:cc:e0:cf:ac:2c:7c:4a:27:2f:8c:c0:86:
e9:5d:99:d4:ec:70:9b:1e:3c:86:7a:83:3a:b8:15:
97:38:aa:82:d4:df:45:0e:95:89:eb:5b:c8:22:a7:
dc:56:f2:fc:2f:00:19:a2:25:0b:56:af:2f:25:84:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DC:68:7F:3E:19:60:FA:23:D1:A1:F2:BB:A0:E9:85:3F:86:81:31
X509v3 Authority Key Identifier:
keyid:F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:e0:81:8a:07:bf:c2:fe:85:72:04:94:97:3f:c9:57:05:bb:
f8:e4:64:99:28:02:15:e9:56:4c:ec:6e:58:9e:c1:e6:2f:48:
44:49:6f:10:9a:5d:df:41:2b:fc:37:d9:5f:4a:c6:18:fe:91:
4f:e3:5f:df:b3:fa:7e:47:ec:cd:0d:35:f5:98:91:b0:7d:74:
ab:89:ed:04:01:61:79:5b:89:d7:4b:1e:3b:56:c5:ff:2d:7d:
82:89:5d:65:0f:fb:48:6c:26:dc:e3:2b:04:5a:c1:3b:d7:be:
cf:3a:09:8c:f5:6d:0f:e0:a1:31:9d:18:45:22:ac:3d:23:d6:
eb:cd:96:2b:c3:79:3e:b8:9e:65:2d:e7:14:f7:0d:41:84:b8:
83:b0:a1:55:ff:75:68:fc:34:a1:f7:ca:96:d9:78:2d:07:9e:
02:51:9a:58:4b:59:91:78:5b:1a:73:44:b0:3f:4d:2b:db:64:
04:96:96:9f:d5:b1:1e:f8:ec:1d:db:0e:2d:d1:cd:e7:3b:9f:
cd:27:bf:b4:f3:24:27:0f:cf:60:62:7d:88:4e:90:a6:26:ba:
29:19:e0:10:b6:1c:4e:52:eb:70:ee:d4:fb:eb:a5:2f:01:08:
92:42:57:d3:42:1f:19:c6:12:bf:a1:67:66:cf:48:ce:d4:07:
7e:53:d5:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOWgKv9sLYet/nL7kaS9/nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjE3ZWJjYzJhNTI1YWZjZmM5MjIxODE1OWNhZjUyODgy
OTc4ZDIwHhcNMjUwNDE5MTQwMDQzWhcNMjUwNDIwMTQwMDQzWjAzMTEwLwYDVQQD
Eyg0ZmRjNjg3ZjNlMTk2MGZhMjNkMWExZjJiYmEwZTk4NTNmODY4MTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uvedwGrpGZ8QZjkDpmgJT90LeRM
K03Q1nbX/CGLP/ckbdh/2HnYBuQK6OX1ZjHrN6U32WBNY04Jv96nQu1zgPDXyzoC
IW666NS2zR49Z9c6xRx201rReZHMjTNixvXcnXDhQs+6han61zyWOXsKex/s5nYy
0tyTdJV9tefzTypKrRDHw1MevoR8bz+BYtq3cFyGDn7i6necL9dKQsbSZiqRFfmE
lRoZBWG8CBx3z2VViwXKbrJtwHLoFOv/lJISQh68WAfM4M+sLHxKJy+MwIbpXZnU
7HCbHjyGeoM6uBWXOKqC1N9FDpWJ61vIIqfcVvL8LwAZoiULVq8vJYRxFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/caH8+GWD6I9Gh8rug6YU/hoExMB8GA1UdIwQY
MBaAFPHxfrzCpSWvz8kiGBWcr1KIKXjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hNzJkYTEtYWY4MS00Nzg3LWEwODUt
ZmYzNGE4YWU5MDFhLzEvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9hNzJkYTEtYWY4MS00Nzg3LWEwODUtZmYzNGE4YWU5MDFh
LzEvOGZGLXZNS2xKYV9QeVNJWUZaeXZVb2dwZU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyeCBige/
wv6FcgSUlz/JVwW7+ORkmSgCFelWTOxuWJ7B5i9IRElvEJpd30Er/DfZX0rGGP6R
T+Nf37P6fkfszQ019ZiRsH10q4ntBAFheVuJ10seO1bF/y19goldZQ/7SGwm3OMr
BFrBO9e+zzoJjPVtD+ChMZ0YRSKsPSPW682WK8N5PrieZS3nFPcNQYS4g7ChVf91
aPw0offKltl4LQeeAlGaWEtZkXhbGnNEsD9NK9tkBJaWn9WxHvjsHdsOLdHN5zuf
zSe/tPMkJw/PYGJ9iE6Qpia6KRngELYcTlLrcO7U++ulLwEIkkJX00IfGcYSv6Fn
Zs9IztQHflPVpA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:39 2025 by rpki-client