Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: ap85Gld27wbbxhVnJ9QULt6UE7reWvmK9xNzelGmx4U=
Subject key identifier: B8:49:7D:83:CB:B4:79:D3:89:7A:7F:0E:F9:90:65:43:06:7B:9F:AD
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 01974BFBA2BDB403A16E88C7CC4CF2A12875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 09FD
Signing time: Sat 07 Jun 2025 20:01:11 +0000
Manifest this update: Sat 07 Jun 2025 20:01:11 +0000
Manifest next update: Sun 08 Jun 2025 20:01:11 +0000
Files and hashes: 1: 2Utz6EvNmTYHORm-GQMKm69p8WI.roa (hash: j7FVQ06WFgxEJj//G5Co8Dizh+fdctkzSaSmR5/2mVM=)
2: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: hECvSKiGdwZH92EErXRXJsha7d4zvW98UsIQQU/eg1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:a2:bd:b4:03:a1:6e:88:c7:cc:4c:f2:a1:28:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: Jun 7 20:01:11 2025 GMT
Not After : Jun 8 20:01:11 2025 GMT
Subject: CN=b8497d83cbb479d3897a7f0ef9906543067b9fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:87:7f:3e:c9:0e:41:a3:11:04:8b:56:59:6a:
4e:5f:d9:4b:74:52:6b:a3:78:3f:2e:52:78:c8:45:
2b:cf:0b:91:50:8c:5b:27:eb:f0:b4:a3:81:e6:a4:
e8:f5:7a:39:33:00:b3:b8:1f:9f:11:df:30:99:66:
07:1f:12:0e:fa:33:01:7f:00:3a:90:60:2c:bb:98:
e6:8e:35:0d:0d:f9:e6:2e:81:71:70:3c:ad:4a:ec:
9b:8c:0f:22:2f:68:46:17:24:58:73:cf:ab:16:9e:
be:40:d3:dd:74:c3:ef:c6:e1:f8:6f:ee:b8:57:59:
70:97:6e:f4:3b:b1:17:93:b9:f7:91:09:ed:31:dd:
4e:81:60:22:78:bf:d6:31:df:d3:5a:52:16:5e:97:
f5:3b:ef:84:96:39:49:e0:5a:df:5f:6b:3c:3c:dd:
ab:d4:a0:70:ec:bb:ff:9b:db:86:f6:5a:05:98:0d:
5b:ce:f7:48:b1:be:c5:76:22:ff:66:6d:7e:c9:50:
75:4e:c9:c3:4d:e3:49:ae:26:2b:04:ed:77:e6:1e:
66:2c:ec:bf:da:af:be:ae:23:05:73:b1:c7:5e:35:
ce:71:87:7d:fd:f2:26:a5:ff:ed:ed:51:f1:87:8e:
6c:98:d3:a8:9c:4f:17:0a:d1:46:32:28:af:7b:2a:
dd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:49:7D:83:CB:B4:79:D3:89:7A:7F:0E:F9:90:65:43:06:7B:9F:AD
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a1:58:60:2a:04:4c:f8:75:f7:b6:d9:2a:55:33:71:31:b1:
5f:16:df:4b:37:56:4d:ae:e1:9d:53:20:9a:c2:8a:a6:bc:0b:
a1:7b:3d:9c:b8:ce:91:bd:67:84:d1:9d:1a:9d:f0:65:55:53:
76:82:d0:f0:32:98:78:10:e2:4f:ed:49:c2:21:df:a0:92:77:
cb:90:e1:f1:fe:69:48:5c:d3:89:fc:5b:70:1d:41:85:1c:47:
08:1d:59:16:02:0a:63:c8:ab:d9:27:d5:94:62:06:15:c3:ca:
92:cd:e8:6a:cc:21:4e:b3:9a:a5:b8:2a:ad:10:84:bc:69:e5:
ee:f7:0f:37:7b:01:68:2a:a1:bb:0b:f8:cf:f3:19:fa:e4:a7:
b8:a0:1f:a6:d2:62:d6:0a:d1:e6:7d:70:6f:fb:8e:d7:13:eb:
d3:87:3b:dc:24:a0:95:8b:8b:13:56:25:c5:70:a1:76:d2:16:
fb:97:49:84:ee:77:c1:ba:42:f6:88:17:ac:a7:41:ea:aa:dc:
33:fb:3d:81:19:8a:3e:0d:3a:bb:00:a1:19:41:c4:0d:4e:3a:
83:cb:3a:fe:df:24:b9:ad:65:50:fe:3a:64:bd:ed:2f:0a:88:
46:8d:70:01:02:4f:01:1c:6f:28:8c:9b:3c:7c:d4:07:83:42:
90:ae:2c:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+6K9tAOhbojHzEzyoSh1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZGE2NzEzNWI3MzdjYTlkMmRmZDdiOTdmZTU5NzhiOGYz
MDBkNmIwHhcNMjUwNjA3MjAwMTExWhcNMjUwNjA4MjAwMTExWjAzMTEwLwYDVQQD
EyhiODQ5N2Q4M2NiYjQ3OWQzODk3YTdmMGVmOTkwNjU0MzA2N2I5ZmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmod/PskOQaMRBItWWWpOX9lLdFJr
o3g/LlJ4yEUrzwuRUIxbJ+vwtKOB5qTo9Xo5MwCzuB+fEd8wmWYHHxIO+jMBfwA6
kGAsu5jmjjUNDfnmLoFxcDytSuybjA8iL2hGFyRYc8+rFp6+QNPddMPvxuH4b+64
V1lwl270O7EXk7n3kQntMd1OgWAieL/WMd/TWlIWXpf1O++EljlJ4FrfX2s8PN2r
1KBw7Lv/m9uG9loFmA1bzvdIsb7FdiL/Zm1+yVB1TsnDTeNJriYrBO135h5mLOy/
2q++riMFc7HHXjXOcYd9/fImpf/t7VHxh45smNOonE8XCtFGMiiveyrdQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhJfYPLtHnTiXp/DvmQZUMGe5+tMB8GA1UdIwQY
MBaAFPHaZxNbc3yp0t/XuX/ll4uPMA1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hMmNjYjEtYTcyOC00ZjA0LTk2NDEt
ZmMxMTJhZTYzZWE0LzEvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hMmNjYjEtYTcyOC00ZjA0LTk2NDEtZmMxMTJhZTYzZWE0
LzEvOGRwbkUxdHpmS25TMzllNWYtV1hpNDh3RFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaFYYCoE
TPh197bZKlUzcTGxXxbfSzdWTa7hnVMgmsKKprwLoXs9nLjOkb1nhNGdGp3wZVVT
doLQ8DKYeBDiT+1JwiHfoJJ3y5Dh8f5pSFzTifxbcB1BhRxHCB1ZFgIKY8ir2SfV
lGIGFcPKks3oaswhTrOapbgqrRCEvGnl7vcPN3sBaCqhuwv4z/MZ+uSnuKAfptJi
1grR5n1wb/uO1xPr04c73CSglYuLE1YlxXChdtIW+5dJhO53wbpC9ogXrKdB6qrc
M/s9gRmKPg06uwChGUHEDU46g8s6/t8kua1lUP46ZL3tLwqIRo1wAQJPARxvKIyb
PHzUB4NCkK4shw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:46:36 2025 by rpki-client