Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
File: 8PsNC-KW3BtxnSRA-2rZx10I4uI.mft (raw, json)
Hash identifier: HhuSmJ/DCrRm1QGCX6g1RoONvUUcUTjqHiP2jpVdPN0=
Subject key identifier: 50:C7:04:65:1D:8F:99:E3:E1:18:6F:4D:46:13:5E:83:35:AB:5C:1F
Authority key identifier: F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
Certificate issuer: /CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Certificate serial: 019643D7369312AA62C428877A39CAC85B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
Manifest number: 1486
Signing time: Thu 17 Apr 2025 13:01:39 +0000
Manifest this update: Thu 17 Apr 2025 13:01:39 +0000
Manifest next update: Fri 18 Apr 2025 13:01:39 +0000
Files and hashes: 1: 0TX6bG3AW3Ort-Rt8qCc1TR12hM.roa (hash: XGv/DCUiOeegPa2KE+7yV2/GQEE1zmTFiu2PMDuWufY=)
2: 8PsNC-KW3BtxnSRA-2rZx10I4uI.crl (hash: X2Yn4hUUwZbg1kYdeB1u3QCjKOZLp4HOfiWGYrV+WjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d7:36:93:12:aa:62:c4:28:87:7a:39:ca:c8:5b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb0d0be296dc1b719d2440fb6ad9c75d08e2e2
Validity
Not Before: Apr 17 13:01:39 2025 GMT
Not After : Apr 18 13:01:39 2025 GMT
Subject: CN=50c704651d8f99e3e1186f4d46135e8335ab5c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:56:6b:1e:87:96:8c:dd:57:91:f4:66:2c:1e:
42:ae:bc:ae:2c:55:b4:de:6a:16:11:4d:3d:dc:0d:
f3:e6:76:6d:4f:1e:82:4e:f2:7b:ee:c0:63:e2:1b:
a5:99:ca:4f:84:f4:8c:f4:b1:30:23:34:ee:c0:f3:
19:2e:d9:90:2c:0e:dd:11:21:2b:cc:82:0d:f9:ac:
ed:5e:13:c4:e3:7c:13:08:af:c1:68:95:d2:7d:2b:
9d:3c:2a:11:ae:46:71:cb:7c:1c:4e:db:47:93:9a:
6f:0c:1b:e7:cb:36:f9:37:cf:29:3f:21:23:c6:16:
91:57:9b:5d:8b:dd:9f:db:8b:93:d3:5b:47:b8:a1:
41:ab:84:e9:0e:15:8c:f6:c6:30:e7:8d:d9:c8:3b:
f4:46:51:49:85:7b:1c:7a:d4:bc:33:4c:ff:28:20:
b4:85:8e:eb:61:41:de:4f:30:df:17:de:65:2c:cd:
19:16:a2:a1:a2:f1:71:73:f7:35:8e:39:71:54:db:
25:6d:5a:5a:0b:92:2c:95:61:bd:58:10:7d:a1:08:
03:e2:8c:74:a8:80:c5:14:4e:c9:de:09:38:e7:76:
da:ac:e0:99:e2:11:52:cd:b2:2b:ea:10:7e:41:ee:
bb:e0:b9:cc:ce:32:e1:c0:d2:2c:a4:88:15:98:19:
de:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C7:04:65:1D:8F:99:E3:E1:18:6F:4D:46:13:5E:83:35:AB:5C:1F
X509v3 Authority Key Identifier:
keyid:F0:FB:0D:0B:E2:96:DC:1B:71:9D:24:40:FB:6A:D9:C7:5D:08:E2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsNC-KW3BtxnSRA-2rZx10I4uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3dedf6-3ec7-4b40-adaa-c0e278736c88/1/8PsNC-KW3BtxnSRA-2rZx10I4uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c0:d8:a1:27:52:32:0a:b0:d0:e5:8c:cd:60:74:cd:66:d0:
62:0c:59:78:b5:07:95:50:4b:8c:d7:cd:db:92:14:bc:f8:d4:
85:aa:58:63:20:64:d3:72:34:dc:24:ba:cd:38:dd:40:fb:e8:
68:3e:6a:1d:cd:be:16:61:4d:db:4f:32:03:a0:ab:a0:48:7e:
2f:d6:ba:88:89:55:22:08:2b:33:25:8b:00:74:e8:35:7e:97:
ce:a6:e5:de:18:5c:8e:7f:c4:e8:58:86:70:e9:2e:75:6c:30:
12:ec:a0:60:24:25:fa:62:f9:ca:61:d8:b6:99:e1:23:c2:32:
51:5d:ec:8f:7c:14:4d:94:ae:0e:3b:f2:ca:1e:41:71:19:ee:
d2:9c:d5:c7:46:24:97:6c:b9:73:85:4a:58:04:ec:7d:74:6d:
cf:c6:38:39:48:f7:4d:24:76:69:f3:d3:2f:60:51:be:92:1a:
08:77:a2:ce:fc:ed:1c:47:bd:3c:83:08:03:07:e8:af:73:19:
b3:3a:70:6d:5a:1e:e5:d0:13:db:58:b1:e6:17:1a:4d:8a:ed:
8a:77:08:f2:5a:07:d2:79:c8:20:90:5c:ba:ff:eb:c2:5e:89:
00:ff:dd:68:a7:3d:fc:bc:6d:ca:32:b1:ba:45:13:c4:fa:17:
fa:5c:0b:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZD1zaTEqpixCiHejnKyFsaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZmIwZDBiZTI5NmRjMWI3MTlkMjQ0MGZiNmFkOWM3NWQw
OGUyZTIwHhcNMjUwNDE3MTMwMTM5WhcNMjUwNDE4MTMwMTM5WjAzMTEwLwYDVQQD
Eyg1MGM3MDQ2NTFkOGY5OWUzZTExODZmNGQ0NjEzNWU4MzM1YWI1YzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFZrHoeWjN1XkfRmLB5CrryuLFW0
3moWEU093A3z5nZtTx6CTvJ77sBj4hulmcpPhPSM9LEwIzTuwPMZLtmQLA7dESEr
zIIN+aztXhPE43wTCK/BaJXSfSudPCoRrkZxy3wcTttHk5pvDBvnyzb5N88pPyEj
xhaRV5tdi92f24uT01tHuKFBq4TpDhWM9sYw543ZyDv0RlFJhXscetS8M0z/KCC0
hY7rYUHeTzDfF95lLM0ZFqKhovFxc/c1jjlxVNslbVpaC5IslWG9WBB9oQgD4ox0
qIDFFE7J3gk453barOCZ4hFSzbIr6hB+Qe674LnMzjLhwNIspIgVmBneTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDHBGUdj5nj4RhvTUYTXoM1q1wfMB8GA1UdIwQY
MBaAFPD7DQviltwbcZ0kQPtq2cddCOLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEt
YzBlMjc4NzM2Yzg4LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8zZGVkZjYtM2VjNy00YjQwLWFkYWEtYzBlMjc4NzM2Yzg4
LzEvOFBzTkMtS1czQnR4blNSQS0yclp4MTBJNHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcDYoSdS
Mgqw0OWMzWB0zWbQYgxZeLUHlVBLjNfN25IUvPjUhapYYyBk03I03CS6zTjdQPvo
aD5qHc2+FmFN208yA6CroEh+L9a6iIlVIggrMyWLAHToNX6Xzqbl3hhcjn/E6FiG
cOkudWwwEuygYCQl+mL5ymHYtpnhI8IyUV3sj3wUTZSuDjvyyh5BcRnu0pzVx0Yk
l2y5c4VKWATsfXRtz8Y4OUj3TSR2afPTL2BRvpIaCHeizvztHEe9PIMIAwfor3MZ
szpwbVoe5dAT21ix5hcaTYrtincI8loH0nnIIJBcuv/rwl6JAP/daKc9/LxtyjKx
ukUTxPoX+lwLkQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:46:55 2025 by rpki-client