Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
File: 8spAIO_uYcMQasn-znnHpo9xqcs.mft (raw, json)
Hash identifier: 1J/SjUEGWuUXjPEfnBfTbl9tjPgj6W1lJKCm/Zn/U80=
Subject key identifier: 92:A7:3C:8D:DF:B7:90:87:41:F3:1C:6C:DA:8C:38:2D:8C:41:85:55
Authority key identifier: F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
Certificate issuer: /CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Certificate serial: 019752D94A9045F375FA5F39170B5D91743B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
Manifest number: 095C
Signing time: Mon 09 Jun 2025 04:01:01 +0000
Manifest this update: Mon 09 Jun 2025 04:01:01 +0000
Manifest next update: Tue 10 Jun 2025 04:01:01 +0000
Files and hashes: 1: 8spAIO_uYcMQasn-znnHpo9xqcs.crl (hash: 1F6Hgy3nAnn2x4mDdtLX2h/R9XnzeRMtVwBr47V02zo=)
2: mKP-r2WNz-DcN8jHguqt0IynJdI.roa (hash: 64sCq3JbYFHT/xnTN/Iz1j1wV1/No8n++lWEXivZPic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d9:4a:90:45:f3:75:fa:5f:39:17:0b:5d:91:74:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ca4020efee61c3106ac9fece79c7a68f71a9cb
Validity
Not Before: Jun 9 04:01:01 2025 GMT
Not After : Jun 10 04:01:01 2025 GMT
Subject: CN=92a73c8ddfb7908741f31c6cda8c382d8c418555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:26:02:ba:b8:d7:bd:cc:56:38:64:f6:11:b9:
46:a1:60:3b:2d:65:8e:0d:02:ca:d2:c4:c1:0d:72:
4b:8b:21:ef:c7:1a:95:ac:51:c6:5f:72:37:55:2d:
1d:56:33:f0:65:50:1c:7f:7b:53:82:87:fc:07:44:
25:25:d4:d7:4b:b1:e5:ff:6d:14:2d:fb:95:ef:f9:
82:8d:19:7c:ea:50:a7:f3:85:b3:0f:d2:7b:29:13:
73:12:e7:ef:f4:6c:c9:03:7f:de:78:b0:24:44:46:
0f:33:61:3a:d6:fb:7f:31:7a:e0:02:be:24:d7:1b:
f2:86:30:f1:b4:48:0f:74:cc:5b:a5:20:ba:eb:d3:
fc:ea:1f:ec:ba:de:78:f6:b6:ed:43:2a:13:ad:c7:
da:e8:3a:92:3e:a4:1b:d5:db:5f:7b:39:8c:e6:2b:
f7:4f:e0:8e:da:bd:bc:6f:2b:09:e3:85:3b:c5:22:
9a:7a:9b:2b:52:b0:5b:6f:c2:a4:51:7e:62:7f:c6:
69:d0:3a:94:3b:81:88:94:ce:dc:11:bf:1f:10:2d:
87:2f:95:24:68:4d:fd:d1:63:87:3a:8b:0c:dc:e4:
1d:e5:66:95:b6:eb:9f:69:6f:4b:34:98:b0:32:00:
6b:d3:92:8a:13:e9:a4:fa:68:c8:1c:15:ca:dd:0d:
37:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A7:3C:8D:DF:B7:90:87:41:F3:1C:6C:DA:8C:38:2D:8C:41:85:55
X509v3 Authority Key Identifier:
keyid:F2:CA:40:20:EF:EE:61:C3:10:6A:C9:FE:CE:79:C7:A6:8F:71:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8spAIO_uYcMQasn-znnHpo9xqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/68d348-ab65-415f-9751-ca1fbf7bb8c8/1/8spAIO_uYcMQasn-znnHpo9xqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:20:c4:2d:22:ab:43:54:18:1d:50:de:9b:f8:0a:d0:ba:d0:
e4:7b:3a:dc:ce:30:b2:29:c0:bc:ba:39:9d:09:8e:77:2e:d7:
a8:87:04:0e:64:a9:f2:cc:91:ae:9a:f8:5e:ce:8d:d7:3d:08:
f6:0f:59:08:03:10:80:8a:f3:97:6b:5a:50:01:3c:4f:e8:aa:
83:1c:a5:41:29:dc:6b:ae:c4:16:c4:26:37:ec:d5:0d:de:61:
40:98:30:05:5e:94:3d:34:fa:75:6e:d0:51:c2:26:52:f1:c0:
48:82:d2:57:37:22:47:34:6e:f7:59:96:1a:fb:0b:ed:7d:2b:
34:a4:06:ad:11:10:d5:c6:37:37:5a:e4:8e:e6:bc:f5:7b:d6:
b8:d0:4b:37:02:0c:71:6c:6d:e6:b2:4b:59:77:12:d9:a0:e7:
e5:1d:08:76:58:54:11:55:1b:af:3c:00:87:37:cb:f3:be:f4:
e1:ff:95:40:27:e6:f0:12:b6:8f:e8:2f:98:14:1f:33:56:50:
1e:af:85:e3:2c:06:3d:b4:a5:9a:eb:37:e5:1f:5f:08:76:ee:
73:dd:45:fa:77:11:02:fb:6a:24:a5:68:72:96:a1:f1:94:1c:
4f:96:92:44:07:53:d3:63:a9:cc:e1:0d:da:d0:dd:a8:8e:28:
9b:bb:df:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdS2UqQRfN1+l85FwtdkXQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyY2E0MDIwZWZlZTYxYzMxMDZhYzlmZWNlNzljN2E2OGY3
MWE5Y2IwHhcNMjUwNjA5MDQwMTAxWhcNMjUwNjEwMDQwMTAxWjAzMTEwLwYDVQQD
Eyg5MmE3M2M4ZGRmYjc5MDg3NDFmMzFjNmNkYThjMzgyZDhjNDE4NTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CYCurjXvcxWOGT2EblGoWA7LWWO
DQLK0sTBDXJLiyHvxxqVrFHGX3I3VS0dVjPwZVAcf3tTgof8B0QlJdTXS7Hl/20U
LfuV7/mCjRl86lCn84WzD9J7KRNzEufv9GzJA3/eeLAkREYPM2E61vt/MXrgAr4k
1xvyhjDxtEgPdMxbpSC669P86h/sut549rbtQyoTrcfa6DqSPqQb1dtfezmM5iv3
T+CO2r28bysJ44U7xSKaepsrUrBbb8KkUX5if8Zp0DqUO4GIlM7cEb8fEC2HL5Uk
aE390WOHOosM3OQd5WaVtuufaW9LNJiwMgBr05KKE+mk+mjIHBXK3Q03rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKnPI3ft5CHQfMcbNqMOC2MQYVVMB8GA1UdIwQY
MBaAFPLKQCDv7mHDEGrJ/s55x6aPcanLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82OGQzNDgtYWI2NS00MTVmLTk3NTEt
Y2ExZmJmN2JiOGM4LzEvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS82OGQzNDgtYWI2NS00MTVmLTk3NTEtY2ExZmJmN2JiOGM4
LzEvOHNwQUlPX3VZY01RYXNuLXpubkhwbzl4cWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCDELSKr
Q1QYHVDem/gK0LrQ5Hs63M4wsinAvLo5nQmOdy7XqIcEDmSp8syRrpr4Xs6N1z0I
9g9ZCAMQgIrzl2taUAE8T+iqgxylQSnca67EFsQmN+zVDd5hQJgwBV6UPTT6dW7Q
UcImUvHASILSVzciRzRu91mWGvsL7X0rNKQGrREQ1cY3N1rkjua89XvWuNBLNwIM
cWxt5rJLWXcS2aDn5R0IdlhUEVUbrzwAhzfL87704f+VQCfm8BK2j+gvmBQfM1ZQ
Hq+F4ywGPbSlmus35R9fCHbuc91F+ncRAvtqJKVocpah8ZQcT5aSRAdT02OpzOEN
2tDdqI4om7vfWg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 08:24:42 2025 by rpki-client