Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
File: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft (raw, json)
Hash identifier: 1kwGR9vnyFgp+HezuICb3vGgSgMt5VmIIwqt9iN/phI=
Subject key identifier: 6F:9B:1F:36:DD:0E:72:24:E0:CA:AA:6F:07:6D:07:00:14:71:D8:7B
Authority key identifier: F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
Certificate issuer: /CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Certificate serial: 01974C31BE859DB4C3EE9A24A347D106B1FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
Manifest number: 0267
Signing time: Sat 07 Jun 2025 21:00:17 +0000
Manifest this update: Sat 07 Jun 2025 21:00:17 +0000
Manifest next update: Sun 08 Jun 2025 21:00:17 +0000
Files and hashes: 1: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl (hash: lfSNKXPjugV4h5ZqetYIoDEWj+FtvawrWy6GH2Lqyv0=)
2: xvoTABjzfOJqRlktELqO5-hThXE.roa (hash: x+oF0WQqCiPxjdbp2WUuqGjKnL/p9KwR8r/xmYFnEcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:31:be:85:9d:b4:c3:ee:9a:24:a3:47:d1:06:b1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Validity
Not Before: Jun 7 21:00:17 2025 GMT
Not After : Jun 8 21:00:17 2025 GMT
Subject: CN=6f9b1f36dd0e7224e0caaa6f076d07001471d87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:3b:bd:9a:8f:a1:09:3b:b3:3c:8f:92:25:
98:19:6c:83:ad:90:17:ce:b2:fb:a7:8a:04:6a:67:
a9:ae:a8:7e:2f:b7:ca:09:a6:6d:55:a7:0c:7c:33:
ab:0e:9a:06:e9:c5:8d:d5:1d:a1:c8:68:63:e5:3d:
52:15:78:c7:b2:9f:9a:bc:8d:a1:08:2b:af:85:cd:
17:72:e5:6c:8a:09:e5:4d:b6:4d:92:ae:1c:18:3d:
a6:68:b6:37:45:98:e6:d2:99:da:81:68:38:32:b0:
a7:13:a7:1d:cf:1d:98:d1:88:38:39:37:b1:0f:00:
18:79:e5:66:76:1b:f3:c6:aa:d4:b3:89:de:ff:51:
f1:e4:14:ea:7f:78:90:ff:11:1c:69:49:17:83:1e:
09:55:df:38:6b:86:f4:ae:70:4e:ca:32:04:6f:ac:
bc:65:3f:b2:19:9c:e3:b5:af:92:ed:4d:74:24:f8:
82:c8:d0:86:f5:d5:0e:fd:51:8d:6d:be:40:4e:1e:
42:86:45:d1:14:66:5b:94:28:f4:67:99:52:64:fe:
00:72:d9:ac:1f:44:66:4e:1a:62:86:6c:8d:07:68:
61:02:2d:7c:ba:e1:c0:75:67:1b:ae:3b:e5:ae:d0:
b2:05:a0:57:95:b1:44:fa:82:e8:f2:bf:0f:38:e4:
e2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9B:1F:36:DD:0E:72:24:E0:CA:AA:6F:07:6D:07:00:14:71:D8:7B
X509v3 Authority Key Identifier:
keyid:F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d1:ce:71:09:db:62:cd:8a:08:6e:58:16:f8:09:75:ae:ca:
43:69:47:52:11:f1:5b:74:80:79:08:fb:52:b2:18:a0:72:55:
6b:f5:5b:28:37:c1:00:90:07:fa:44:db:c6:49:b3:a7:d5:5b:
ad:7a:cd:48:dc:4d:61:c3:ea:f6:f3:ef:eb:75:6e:29:30:09:
9b:9d:68:c0:bd:17:b1:4a:60:44:9c:0f:a0:28:7a:65:f3:96:
0d:02:d6:e8:95:49:86:33:08:9c:d4:f5:c9:5f:0b:e1:cf:ed:
65:56:b8:80:65:f4:a4:c8:6c:30:7a:39:74:01:e6:73:5e:91:
c8:e4:4d:b9:52:43:85:57:e5:af:64:7e:5b:ee:6e:59:28:5f:
cb:99:c6:95:b1:76:fb:16:4e:12:ad:8c:fe:b3:b9:4a:d6:12:
12:81:d2:51:bb:2c:ed:d1:cf:19:f1:7b:e8:38:f1:01:25:d0:
4c:43:b8:cb:a2:e3:c6:67:31:22:8b:16:77:41:5c:e3:a3:76:
1e:70:62:e1:a4:c4:8c:4a:a5:7e:51:02:a8:0c:e7:e9:98:0c:
30:ad:b7:01:e1:09:93:48:6e:1f:8c:9c:68:65:7f:61:23:eb:
a3:33:7c:56:89:7b:97:8e:36:fe:68:24:45:1d:0e:a0:f5:25:
fb:1d:a4:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMMb6FnbTD7poko0fRBrH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMmQ5NGJiM2RjNTM0YTY0MjdmZTlhNjczMDBkOGY0YzQ5
MTQ2YzQwHhcNMjUwNjA3MjEwMDE3WhcNMjUwNjA4MjEwMDE3WjAzMTEwLwYDVQQD
Eyg2ZjliMWYzNmRkMGU3MjI0ZTBjYWFhNmYwNzZkMDcwMDE0NzFkODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLs7vZqPoQk7szyPkiWYGWyDrZAX
zrL7p4oEameprqh+L7fKCaZtVacMfDOrDpoG6cWN1R2hyGhj5T1SFXjHsp+avI2h
CCuvhc0XcuVsignlTbZNkq4cGD2maLY3RZjm0pnagWg4MrCnE6cdzx2Y0Yg4OTex
DwAYeeVmdhvzxqrUs4ne/1Hx5BTqf3iQ/xEcaUkXgx4JVd84a4b0rnBOyjIEb6y8
ZT+yGZzjta+S7U10JPiCyNCG9dUO/VGNbb5ATh5ChkXRFGZblCj0Z5lSZP4Actms
H0RmThpihmyNB2hhAi18uuHAdWcbrjvlrtCyBaBXlbFE+oLo8r8POOTiowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+bHzbdDnIk4MqqbwdtBwAUcdh7MB8GA1UdIwQY
MBaAFPEtlLs9xTSmQn/ppnMA2PTEkUbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFMyVXV6M0ZOS1pDZi1tbWN3RFk5TVNSUnNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hNjM1YWYtYTQ2ZC00ZDBiLWI5MzEt
YTNhYmRiZDFkYTA2LzEvOFMyVXV6M0ZOS1pDZi1tbWN3RFk5TVNSUnNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9hNjM1YWYtYTQ2ZC00ZDBiLWI5MzEtYTNhYmRiZDFkYTA2
LzEvOFMyVXV6M0ZOS1pDZi1tbWN3RFk5TVNSUnNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadHOcQnb
Ys2KCG5YFvgJda7KQ2lHUhHxW3SAeQj7UrIYoHJVa/VbKDfBAJAH+kTbxkmzp9Vb
rXrNSNxNYcPq9vPv63VuKTAJm51owL0XsUpgRJwPoCh6ZfOWDQLW6JVJhjMInNT1
yV8L4c/tZVa4gGX0pMhsMHo5dAHmc16RyORNuVJDhVflr2R+W+5uWShfy5nGlbF2
+xZOEq2M/rO5StYSEoHSUbss7dHPGfF76DjxASXQTEO4y6LjxmcxIosWd0Fc46N2
HnBi4aTEjEqlflECqAzn6ZgMMK23AeEJk0huH4ycaGV/YSProzN8Vol7l442/mgk
RR0OoPUl+x2kAA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:36:18 2025 by rpki-client