Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
File: 8oB_KA2plWnsokNGur6dyFrBMkA.mft (raw, json)
Hash identifier: d0LuHTzRQSPnnbpZt7SlXkgoqZAcqEh7bKHa/7KfgGk=
Subject key identifier: B7:0D:F4:7C:99:B2:39:29:2B:83:A6:2A:05:8D:D5:99:49:C2:2A:38
Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
Certificate issuer: /CN=f2807f280da99569eca24346babe9dc85ac13240
Certificate serial: 019650487D50406FE08A7E7B104D077C0193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
Manifest number: 103D
Signing time: Sat 19 Apr 2025 23:00:49 +0000
Manifest this update: Sat 19 Apr 2025 23:00:49 +0000
Manifest next update: Sun 20 Apr 2025 23:00:49 +0000
Files and hashes: 1: 8oB_KA2plWnsokNGur6dyFrBMkA.crl (hash: X/Uz4pR+e5NOx6FC7+euDrizMUkplYS6+gpUnNwm5MI=)
2: RxiVRcsHeclsIn7rqDibVKMm4qY.roa (hash: RdPDIHwu5UxKtKljTR4KLIRVl+B3RPcwmBVzbEhliKU=)
3: n1BFonHtDGvA8w45LaQUVIMy610.roa (hash: UPpZGSFwSh5u0Vmh3TPpTDA5brKnQclTUnn56OlMfIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:7d:50:40:6f:e0:8a:7e:7b:10:4d:07:7c:01:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240
Validity
Not Before: Apr 19 23:00:49 2025 GMT
Not After : Apr 20 23:00:49 2025 GMT
Subject: CN=b70df47c99b239292b83a62a058dd59949c22a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:65:b6:ae:a4:ce:56:a2:35:58:0c:a5:d8:50:
97:13:77:02:79:09:b0:c7:5e:05:25:5b:a9:8c:b9:
93:a8:3f:ba:b6:e0:83:38:cc:a5:d0:9c:7a:b8:e5:
ff:77:54:ae:19:3e:c0:ae:dd:a5:33:4f:9a:e4:87:
9d:c0:0a:6e:1f:9b:62:ea:e5:a4:82:13:cf:ae:c1:
09:22:98:5b:a7:ed:33:76:43:f4:57:6a:b5:08:77:
31:96:e4:94:39:4e:9b:27:ff:55:c0:ff:af:13:56:
88:a4:56:52:64:5a:1b:5f:7b:e0:1d:56:dc:47:2b:
2f:64:be:f8:cc:54:42:70:0b:41:1b:23:22:e2:b0:
4a:78:61:bc:b7:12:9f:02:16:3e:47:90:62:e5:23:
8d:b4:62:e3:5c:d3:f0:9b:d7:14:50:96:6b:a2:ad:
94:80:be:98:8c:1f:4c:9b:7e:10:77:df:83:6d:ab:
45:66:6f:b1:2b:c3:ec:73:97:a8:40:e9:fd:d1:e7:
0c:fc:4e:25:74:7d:b4:26:66:bf:03:f2:bf:42:39:
02:e4:26:8e:13:e4:a3:c2:d7:58:42:26:27:a5:46:
4f:dc:9c:d1:db:68:c3:61:45:a8:8f:42:84:0a:16:
92:a4:c9:ae:09:b1:f4:57:6f:a7:89:e4:3a:7e:f6:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0D:F4:7C:99:B2:39:29:2B:83:A6:2A:05:8D:D5:99:49:C2:2A:38
X509v3 Authority Key Identifier:
keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:58:46:7d:23:70:da:70:59:74:99:1b:dd:38:13:f1:dd:00:
e7:82:9b:a6:72:fd:88:c6:6e:f0:3f:cd:fa:0b:7e:51:19:a2:
23:98:2e:8f:9d:83:95:da:e2:f2:b1:5a:d5:9b:a1:a1:c2:d9:
be:19:bb:86:77:37:05:b6:21:27:9d:13:01:1a:b0:7b:cc:e6:
ea:ef:6c:02:54:fa:d9:3d:ff:75:92:b0:6c:b1:2b:be:7f:97:
e3:e8:8a:c8:0c:bf:e2:06:d1:60:b6:bb:21:64:09:92:49:6a:
e1:03:c5:0b:7c:5d:6c:0c:3d:1d:83:eb:9e:44:b5:98:52:e4:
2d:d5:ad:ca:a0:ac:98:08:9e:66:90:52:52:d0:b6:31:6c:a5:
08:cd:e6:73:c6:7d:8a:30:3e:8b:79:8a:03:6d:ae:21:fc:c5:
d6:78:e8:b2:c1:ad:ef:00:13:7f:41:f8:33:a7:dd:bc:73:72:
41:7e:de:85:39:a1:91:64:d8:36:6a:f8:e6:a1:d5:ee:54:5e:
98:11:ce:fd:41:ad:f6:e6:f0:4f:50:d9:09:13:b9:a4:98:35:
7e:bb:1c:a7:fa:1f:3a:fe:e4:77:84:67:5a:74:20:b0:e4:be:
bb:90:ff:a1:ac:44:2a:34:90:d1:8c:ce:3b:82:60:74:83:e8:
a5:50:76:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQSH1QQG/gin57EE0HfAGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyODA3ZjI4MGRhOTk1NjllY2EyNDM0NmJhYmU5ZGM4NWFj
MTMyNDAwHhcNMjUwNDE5MjMwMDQ5WhcNMjUwNDIwMjMwMDQ5WjAzMTEwLwYDVQQD
EyhiNzBkZjQ3Yzk5YjIzOTI5MmI4M2E2MmEwNThkZDU5OTQ5YzIyYTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmW2rqTOVqI1WAyl2FCXE3cCeQmw
x14FJVupjLmTqD+6tuCDOMyl0Jx6uOX/d1SuGT7Art2lM0+a5IedwApuH5ti6uWk
ghPPrsEJIphbp+0zdkP0V2q1CHcxluSUOU6bJ/9VwP+vE1aIpFZSZFobX3vgHVbc
RysvZL74zFRCcAtBGyMi4rBKeGG8txKfAhY+R5Bi5SONtGLjXNPwm9cUUJZroq2U
gL6YjB9Mm34Qd9+DbatFZm+xK8Psc5eoQOn90ecM/E4ldH20Jma/A/K/QjkC5CaO
E+SjwtdYQiYnpUZP3JzR22jDYUWoj0KEChaSpMmuCbH0V2+nieQ6fvZmVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcN9HyZsjkpK4OmKgWN1ZlJwio4MB8GA1UdIwQY
MBaAFPKAfygNqZVp7KJDRrq+nchawTJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG9CX0tBMnBsV25zb2tOR3VyNmR5RnJCTWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy83YjBhODUtOTY3Ny00ZDAzLWFmYjYt
YTlmYWY2YTI2NDI2LzEvOG9CX0tBMnBsV25zb2tOR3VyNmR5RnJCTWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy83YjBhODUtOTY3Ny00ZDAzLWFmYjYtYTlmYWY2YTI2NDI2
LzEvOG9CX0tBMnBsV25zb2tOR3VyNmR5RnJCTWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlhGfSNw
2nBZdJkb3TgT8d0A54KbpnL9iMZu8D/N+gt+URmiI5guj52Dldri8rFa1ZuhocLZ
vhm7hnc3BbYhJ50TARqwe8zm6u9sAlT62T3/dZKwbLErvn+X4+iKyAy/4gbRYLa7
IWQJkklq4QPFC3xdbAw9HYPrnkS1mFLkLdWtyqCsmAieZpBSUtC2MWylCM3mc8Z9
ijA+i3mKA22uIfzF1njossGt7wATf0H4M6fdvHNyQX7ehTmhkWTYNmr45qHV7lRe
mBHO/UGt9ubwT1DZCRO5pJg1frscp/ofOv7kd4RnWnQgsOS+u5D/oaxEKjSQ0YzO
O4JgdIPopVB2FA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:23:35 2025 by rpki-client