Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier: arxZd3Ydpl9+p6v7HVgGH8hD4tvLWLgkPjl5T0B+tuc=
Subject key identifier: C3:56:BE:32:38:C1:C1:FE:BC:F6:5B:B8:0A:20:DD:58:F8:1F:89:04
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial: 01964556B6AF9B00DAD02ACFE1AF5696E885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number: 0F09
Signing time: Thu 17 Apr 2025 20:00:32 +0000
Manifest this update: Thu 17 Apr 2025 20:00:32 +0000
Manifest next update: Fri 18 Apr 2025 20:00:32 +0000
Files and hashes: 1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: GyPId2W3T+8kkh8KR3zdKao3z4ThdvA99DA/X5R2m08=)
2: rPbx58T-x5ORRRx0tEYr-rx7t3U.roa (hash: vSn+krLvdIPvrWL0ipO2XK8jiZxa1ds2oZDzxWzd7dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:b6:af:9b:00:da:d0:2a:cf:e1:af:56:96:e8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Validity
Not Before: Apr 17 20:00:32 2025 GMT
Not After : Apr 18 20:00:32 2025 GMT
Subject: CN=c356be3238c1c1febcf65bb80a20dd58f81f8904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:14:f3:dd:78:3b:7a:d7:57:bd:d4:78:93:
75:b9:8a:52:f9:ec:73:24:38:74:c7:f8:8d:cf:9e:
72:80:d4:76:b5:f1:14:ca:fa:6d:7b:62:8c:dd:0b:
d1:19:f1:6f:72:4d:d1:92:31:fb:ce:b6:84:2f:8d:
29:64:79:c8:df:e8:85:ed:e4:e3:76:3f:6c:a2:73:
82:fc:4c:7c:bb:10:c6:86:93:bd:e1:91:ae:03:33:
2f:94:13:09:cd:80:3f:aa:3e:1b:35:20:ea:96:c1:
38:e1:ea:de:9a:71:4c:d6:ef:84:a9:d3:83:56:eb:
ce:a6:c7:46:14:01:eb:72:98:5c:26:be:c3:76:a3:
c4:e9:26:7e:0b:96:a8:4d:b8:47:ba:95:52:88:6d:
fa:14:8f:d8:75:e4:15:b1:63:06:eb:ac:00:12:cb:
2b:59:1b:ca:37:0f:de:c8:b5:6c:65:37:b7:ab:02:
45:4e:fe:22:a9:62:c0:70:63:29:aa:6c:b3:43:83:
58:92:14:51:ba:2e:78:57:f9:7f:2d:18:ed:6e:f7:
91:6d:45:ba:3a:c9:7c:af:49:ab:05:4e:1c:60:b1:
6c:3a:e1:19:26:13:d1:e8:61:ce:d6:8c:07:7f:bc:
81:17:b0:a3:da:b3:0a:0d:cd:30:c1:e0:7b:ee:ba:
db:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:56:BE:32:38:C1:C1:FE:BC:F6:5B:B8:0A:20:DD:58:F8:1F:89:04
X509v3 Authority Key Identifier:
keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8a:46:ab:78:93:21:cf:b1:b6:95:8d:70:24:89:32:fd:b0:
bb:34:ea:35:c6:a8:98:ff:70:59:5a:0f:1a:e9:5b:1a:0f:66:
1d:24:71:ff:fc:18:4c:98:a6:d5:29:9b:7e:88:00:d7:29:ca:
2a:7c:cf:41:06:50:b4:91:3a:ed:e4:21:56:05:08:62:6c:6b:
ee:98:dd:80:35:2d:60:eb:4a:59:92:65:e3:39:88:b5:05:bc:
50:25:3b:33:2b:8c:d5:0e:f9:d4:04:2a:44:09:5a:27:64:60:
c2:e5:5e:18:08:49:39:a8:8c:45:09:d4:49:ea:2f:d3:cc:14:
1e:62:25:d1:8d:71:30:1b:9f:6b:a4:0d:c4:3a:db:2d:6b:31:
c6:9e:16:30:1c:96:c2:cf:ac:5d:94:9b:3a:a0:da:1b:d7:db:
a4:d1:0d:14:2b:1e:88:c2:14:92:78:57:09:ac:89:86:85:a9:
7d:a5:03:4c:36:52:c1:72:3f:73:03:39:e8:ee:ee:76:55:06:
54:3b:db:36:63:cc:11:43:3f:77:1f:be:b4:59:e8:14:57:b4:
9c:c6:6a:fe:d5:9e:a5:36:76:70:c2:84:d0:60:b5:2c:af:36:
4f:4c:7c:51:cc:9b:7d:72:2c:bc:33:f9:b1:df:4b:70:21:f7:
b2:27:7f:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFVravmwDa0CrP4a9WluiFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNWM2YWYzZDAyMjYyMGY3MmM1M2I3NzBlODJlNWM3M2Fl
NTUwNmQwHhcNMjUwNDE3MjAwMDMyWhcNMjUwNDE4MjAwMDMyWjAzMTEwLwYDVQQD
EyhjMzU2YmUzMjM4YzFjMWZlYmNmNjViYjgwYTIwZGQ1OGY4MWY4OTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8IU8914O3rXV73UeJN1uYpS+exz
JDh0x/iNz55ygNR2tfEUyvpte2KM3QvRGfFvck3RkjH7zraEL40pZHnI3+iF7eTj
dj9sonOC/Ex8uxDGhpO94ZGuAzMvlBMJzYA/qj4bNSDqlsE44eremnFM1u+EqdOD
VuvOpsdGFAHrcphcJr7DdqPE6SZ+C5aoTbhHupVSiG36FI/YdeQVsWMG66wAEssr
WRvKNw/eyLVsZTe3qwJFTv4iqWLAcGMpqmyzQ4NYkhRRui54V/l/LRjtbveRbUW6
Osl8r0mrBU4cYLFsOuEZJhPR6GHO1owHf7yBF7Cj2rMKDc0wweB77rrbuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNWvjI4wcH+vPZbuAog3Vj4H4kEMB8GA1UdIwQY
MBaAFPBcavPQImIPcsU7dw6C5cc65VBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9mN2I3YzItNWQ4ZC00ZTg4LTg0NTQt
MGE1MzIxNTZiMmE2LzEvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9mN2I3YzItNWQ4ZC00ZTg4LTg0NTQtMGE1MzIxNTZiMmE2
LzEvOEZ4cTg5QWlZZzl5eFR0M0RvTGx4enJsVUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4pGq3iT
Ic+xtpWNcCSJMv2wuzTqNcaomP9wWVoPGulbGg9mHSRx//wYTJim1SmbfogA1ynK
KnzPQQZQtJE67eQhVgUIYmxr7pjdgDUtYOtKWZJl4zmItQW8UCU7MyuM1Q751AQq
RAlaJ2RgwuVeGAhJOaiMRQnUSeov08wUHmIl0Y1xMBufa6QNxDrbLWsxxp4WMByW
ws+sXZSbOqDaG9fbpNENFCseiMIUknhXCayJhoWpfaUDTDZSwXI/cwM56O7udlUG
VDvbNmPMEUM/dx++tFnoFFe0nMZq/tWepTZ2cMKE0GC1LK82T0x8UcybfXIsvDP5
sd9LcCH3sid/zA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:25 2025 by rpki-client