Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
File: 8nmj6FTwEBXp0OA-idgHDMnrz4k.mft (raw, json)
Hash identifier: U97+iUWua81gj87rzfqom65XhoHAKdKOP15+zHbk0/g=
Subject key identifier: 4F:48:75:D2:80:94:CB:D2:41:49:15:22:FF:C9:E6:F0:FB:28:AA:23
Authority key identifier: F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
Certificate issuer: /CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Certificate serial: 019652A4C570E84C31891689AB189F79A7B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 10:00:52 +0000
Manifest this update: Sun 20 Apr 2025 10:00:52 +0000
Manifest next update: Mon 21 Apr 2025 10:00:52 +0000
Files and hashes: 1: 8nmj6FTwEBXp0OA-idgHDMnrz4k.crl (hash: NOaGPjdRqG/ypDmy2EbT1o5s6aeZbRrz/fuXgZMzhMM=)
2: jfUqkf_BnbSeyvKiFitEY3b5cmY.roa (hash: MkQ1kYsqlZvezBQ/uBC4v1whC4HDYOAxUmlDZ4BgXWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:c5:70:e8:4c:31:89:16:89:ab:18:9f:79:a7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f279a3e854f01015e9d0e03e89d8070cc9ebcf89
Validity
Not Before: Apr 20 10:00:52 2025 GMT
Not After : Apr 21 10:00:52 2025 GMT
Subject: CN=4f4875d28094cbd241491522ffc9e6f0fb28aa23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:46:7e:ef:82:2e:12:66:8b:28:98:0f:57:
29:69:42:8c:85:09:ca:b6:80:cd:e8:1e:a0:43:d0:
12:5c:ba:a8:b6:de:a4:62:9c:dc:23:ff:72:0e:7e:
85:07:c2:ee:7d:02:41:34:35:8c:8a:ea:8e:9f:b3:
9b:8f:49:b3:57:1e:ab:02:b4:27:22:a7:13:bd:98:
a1:1d:3a:54:14:a8:fa:58:82:a5:cb:24:7f:b8:8d:
97:5d:19:50:89:2e:92:7d:92:ee:2c:a8:1c:af:b5:
99:1e:18:d0:5e:39:96:24:32:d1:ca:a8:54:3b:97:
8c:a0:64:25:41:37:18:18:33:10:1b:41:8d:a4:ad:
27:52:58:3f:04:6f:42:ed:17:49:aa:28:81:44:75:
bc:61:3a:04:08:71:27:54:f0:a3:f5:7a:7e:00:c0:
38:27:8f:47:2b:8b:92:52:17:ed:5b:0a:19:c8:f4:
ff:6d:f5:3f:32:bc:6f:71:c2:3f:af:d8:a2:41:0d:
2a:32:e6:76:f0:61:c2:73:ca:b0:eb:5a:d2:5f:cf:
b2:ae:df:cd:81:c8:64:1a:ef:8f:e4:30:4b:e2:2d:
32:49:80:f6:c2:6a:21:94:00:ec:aa:cb:17:0f:0e:
55:0f:b4:e1:a2:99:a9:92:f1:42:4f:62:73:20:54:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:48:75:D2:80:94:CB:D2:41:49:15:22:FF:C9:E6:F0:FB:28:AA:23
X509v3 Authority Key Identifier:
keyid:F2:79:A3:E8:54:F0:10:15:E9:D0:E0:3E:89:D8:07:0C:C9:EB:CF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nmj6FTwEBXp0OA-idgHDMnrz4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/838db2-0c88-4ff4-b9bc-8bae7e9fd75c/1/8nmj6FTwEBXp0OA-idgHDMnrz4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bb:2a:70:f6:55:ff:ad:73:92:b0:a7:b1:ea:42:1e:d0:eb:
01:30:c9:70:9f:ae:9d:86:97:79:24:34:83:92:36:06:70:17:
f1:ea:c5:d0:a6:64:71:38:6e:25:1a:19:52:8f:f2:d3:cc:ca:
f0:1f:14:06:ff:93:a9:bb:e5:6a:01:c2:b6:30:1b:5f:bc:7c:
64:1e:ce:f7:b2:27:ae:71:40:1d:ad:99:3d:dc:06:ae:88:00:
a1:c6:6a:b1:f8:80:3e:cf:d7:47:8b:f8:c7:e0:78:5a:ef:ca:
b7:37:3d:94:04:a1:7e:f8:3f:b8:af:38:33:b2:6c:6a:c3:04:
43:0f:2a:5e:6f:26:ab:f0:40:14:96:0a:4c:25:af:79:56:9b:
3b:5e:f7:1a:eb:db:66:a8:32:0e:1c:27:37:3e:d6:a2:23:a0:
3b:3f:c4:ab:fb:8d:e9:51:92:ba:aa:99:47:01:4e:0d:2d:56:
98:64:9a:99:ea:a9:5a:b2:08:b2:78:f3:83:5d:50:fd:3f:67:
4a:a0:d5:65:4b:9b:7c:c8:92:9c:ac:90:72:f9:ba:64:84:bf:
47:a2:4a:6a:97:ee:4d:b7:91:ee:7a:77:c2:ca:02:03:3c:30:
85:a5:8a:6a:07:c2:95:b9:53:fa:da:22:73:d6:79:df:31:20:
ce:43:3f:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSpMVw6EwxiRaJqxifeae3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNzlhM2U4NTRmMDEwMTVlOWQwZTAzZTg5ZDgwNzBjYzll
YmNmODkwHhcNMjUwNDIwMTAwMDUyWhcNMjUwNDIxMTAwMDUyWjAzMTEwLwYDVQQD
Eyg0ZjQ4NzVkMjgwOTRjYmQyNDE0OTE1MjJmZmM5ZTZmMGZiMjhhYTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8VGfu+CLhJmiyiYD1cpaUKMhQnK
toDN6B6gQ9ASXLqott6kYpzcI/9yDn6FB8LufQJBNDWMiuqOn7Obj0mzVx6rArQn
IqcTvZihHTpUFKj6WIKlyyR/uI2XXRlQiS6SfZLuLKgcr7WZHhjQXjmWJDLRyqhU
O5eMoGQlQTcYGDMQG0GNpK0nUlg/BG9C7RdJqiiBRHW8YToECHEnVPCj9Xp+AMA4
J49HK4uSUhftWwoZyPT/bfU/MrxvccI/r9iiQQ0qMuZ28GHCc8qw61rSX8+yrt/N
gchkGu+P5DBL4i0ySYD2wmohlADsqssXDw5VD7ThopmpkvFCT2JzIFQNBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9IddKAlMvSQUkVIv/J5vD7KKojMB8GA1UdIwQY
MBaAFPJ5o+hU8BAV6dDgPonYBwzJ68+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5tajZGVHdFQlhwME9BLWlkZ0hETW5yejRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84MzhkYjItMGM4OC00ZmY0LWI5YmMt
OGJhZTdlOWZkNzVjLzEvOG5tajZGVHdFQlhwME9BLWlkZ0hETW5yejRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84MzhkYjItMGM4OC00ZmY0LWI5YmMtOGJhZTdlOWZkNzVj
LzEvOG5tajZGVHdFQlhwME9BLWlkZ0hETW5yejRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbsqcPZV
/61zkrCnsepCHtDrATDJcJ+unYaXeSQ0g5I2BnAX8erF0KZkcThuJRoZUo/y08zK
8B8UBv+TqbvlagHCtjAbX7x8ZB7O97InrnFAHa2ZPdwGrogAocZqsfiAPs/XR4v4
x+B4Wu/Ktzc9lAShfvg/uK84M7JsasMEQw8qXm8mq/BAFJYKTCWveVabO173Guvb
ZqgyDhwnNz7WoiOgOz/Eq/uN6VGSuqqZRwFODS1WmGSameqpWrIIsnjzg11Q/T9n
SqDVZUubfMiSnKyQcvm6ZIS/R6JKapfuTbeR7np3wsoCAzwwhaWKagfClblT+toi
c9Z53zEgzkM/Zg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:02:22 2025 by rpki-client