Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
File: 8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json)
Hash identifier: k+vFDomIMhFxtwjDILfoCYvmOoq3Gj6H58l34y6ZIbY=
Subject key identifier: 0C:29:F0:85:32:18:F5:C5:A0:0A:36:68:3D:6C:F0:EB:9E:4F:29:37
Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Certificate serial: 01964AEB004A951AC94574C5578B9E61E50D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
Manifest number: 045B
Signing time: Fri 18 Apr 2025 22:00:36 +0000
Manifest this update: Fri 18 Apr 2025 22:00:36 +0000
Manifest next update: Sat 19 Apr 2025 22:00:36 +0000
Files and hashes: 1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: ydwxEYPvx+q5kqqqH3Gw93cYU+KPTPsZpeU7fIhjnAM=)
2: gxY3cqQ9AtbDjrB_-otpHb6Irb0.roa (hash: LD3l5OVkY9IZSD+ZJZMYqJis4oBCr+KMHwZEJzzuk0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:eb:00:4a:95:1a:c9:45:74:c5:57:8b:9e:61:e5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Validity
Not Before: Apr 18 22:00:36 2025 GMT
Not After : Apr 19 22:00:36 2025 GMT
Subject: CN=0c29f0853218f5c5a00a36683d6cf0eb9e4f2937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:da:dc:e7:c4:5e:1c:a2:a4:32:49:d6:18:e4:
a1:f7:21:7c:e1:70:41:e9:1f:30:f3:f6:79:17:4d:
d5:cf:76:ff:7d:8c:f3:63:ea:8b:98:3a:92:9a:8f:
68:0a:c4:93:df:61:57:b4:8e:10:ad:28:a6:51:81:
aa:1e:48:7d:70:83:a9:2a:0b:6a:df:98:16:e0:b6:
1c:59:ce:fe:1d:4d:50:01:94:ab:9e:71:b6:b6:61:
83:1f:3f:b0:de:d0:31:fa:d1:2e:4f:50:00:ac:cd:
39:39:fe:93:23:92:25:3a:ff:65:f9:28:56:c0:5f:
e6:75:ab:56:dc:b9:21:6e:ac:21:e9:3d:37:e9:1a:
6e:50:ee:7e:4b:71:6d:98:a4:56:40:c4:43:cf:c9:
dd:86:3f:6a:c7:72:c9:8c:44:26:a7:a1:a8:ad:01:
27:85:42:29:90:61:05:57:21:71:2c:5f:93:b0:7c:
16:9a:f2:91:67:7b:ba:3e:7e:fa:24:f1:5b:07:6e:
f8:60:bc:e9:77:70:9e:92:47:70:73:0d:f6:ae:b9:
d0:33:b0:b8:28:a6:c3:24:9d:e9:b4:bd:e3:3c:2f:
b9:c7:b0:9b:54:a8:e4:bd:8f:04:70:59:46:fd:69:
8f:be:dd:d8:59:fa:8f:1c:db:9d:ac:19:bc:5c:7a:
ee:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:29:F0:85:32:18:F5:C5:A0:0A:36:68:3D:6C:F0:EB:9E:4F:29:37
X509v3 Authority Key Identifier:
keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6a:04:e9:ce:13:5b:4f:9f:ad:16:2f:9d:76:be:ce:55:42:
4f:26:14:bc:d6:ca:d6:eb:78:ed:e1:6f:98:6c:c4:ed:68:4b:
16:dd:ac:1e:76:ec:33:c3:bf:89:44:eb:ef:4f:f0:32:f6:97:
33:76:35:8f:7e:e6:aa:b7:9b:37:18:7a:ab:f1:fb:ab:0b:36:
91:10:22:26:49:8d:6a:ec:ff:85:78:d8:25:6e:b3:6d:1b:61:
2c:e7:7e:f2:60:d6:9e:a2:07:36:66:30:75:45:80:aa:58:8a:
98:f4:bc:4d:65:6b:38:54:49:2c:a8:33:6d:65:e7:e4:36:3c:
ed:d3:5a:03:86:dd:3d:87:db:05:c0:da:8d:3b:61:0a:09:84:
32:69:9c:a2:e3:d6:83:2e:9b:46:3b:27:bd:34:58:66:ba:27:
ef:f2:81:74:2b:7d:ca:0f:06:98:90:2a:c1:ec:3d:c1:01:68:
af:2a:eb:7f:c8:7f:21:85:2c:c4:43:47:38:91:3b:32:58:48:
a1:b2:b2:1b:9c:8b:c4:24:46:2b:7c:99:ee:74:f5:47:50:96:
01:fb:f0:ba:80:76:bf:7a:d4:48:9e:23:fc:fc:b6:6e:33:63:
07:4a:a0:be:01:cd:f4:87:7a:07:7a:85:71:ef:cf:f7:93:51:
2e:a1:f5:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZK6wBKlRrJRXTFV4ueYeUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMDJmMGFhODljMDY3ZDY2MzM4YjRkNTlkMjA1MmJhMzlh
OTk0NGIwHhcNMjUwNDE4MjIwMDM2WhcNMjUwNDE5MjIwMDM2WjAzMTEwLwYDVQQD
EygwYzI5ZjA4NTMyMThmNWM1YTAwYTM2NjgzZDZjZjBlYjllNGYyOTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9rc58ReHKKkMknWGOSh9yF84XBB
6R8w8/Z5F03Vz3b/fYzzY+qLmDqSmo9oCsST32FXtI4QrSimUYGqHkh9cIOpKgtq
35gW4LYcWc7+HU1QAZSrnnG2tmGDHz+w3tAx+tEuT1AArM05Of6TI5IlOv9l+ShW
wF/mdatW3Lkhbqwh6T036RpuUO5+S3FtmKRWQMRDz8ndhj9qx3LJjEQmp6GorQEn
hUIpkGEFVyFxLF+TsHwWmvKRZ3u6Pn76JPFbB274YLzpd3Cekkdwcw32rrnQM7C4
KKbDJJ3ptL3jPC+5x7CbVKjkvY8EcFlG/WmPvt3YWfqPHNudrBm8XHruVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwp8IUyGPXFoAo2aD1s8OueTyk3MB8GA1UdIwQY
MBaAFPIC8KqJwGfWYzi01Z0gUro5qZRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGIt
ZjYyNTcwMGU4YTkwLzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NzY5ZjEtYjgwYi00ODg2LWJiMGItZjYyNTcwMGU4YTkw
LzEvOGdMd3FvbkFaOVpqT0xUVm5TQlN1am1wbEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGoE6c4T
W0+frRYvnXa+zlVCTyYUvNbK1ut47eFvmGzE7WhLFt2sHnbsM8O/iUTr70/wMvaX
M3Y1j37mqrebNxh6q/H7qws2kRAiJkmNauz/hXjYJW6zbRthLOd+8mDWnqIHNmYw
dUWAqliKmPS8TWVrOFRJLKgzbWXn5DY87dNaA4bdPYfbBcDajTthCgmEMmmcouPW
gy6bRjsnvTRYZron7/KBdCt9yg8GmJAqwew9wQForyrrf8h/IYUsxENHOJE7MlhI
obKyG5yLxCRGK3yZ7nT1R1CWAfvwuoB2v3rUSJ4j/Py2bjNjB0qgvgHN9Id6B3qF
ce/P95NRLqH1fA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:13:31 2025 by rpki-client