Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: Dc8PA0ZPnQZJWQZPjnLu1IE+QIfFJzwwBsUTm3zRv2M=
Subject key identifier: 58:FF:32:14:4D:AF:B2:EF:7E:44:31:D4:39:B7:FD:F3:82:C9:E1:B0
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 019611D79A87A7DBAB828B502B274CE87763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 03EB
Signing time: Mon 07 Apr 2025 20:01:04 +0000
Manifest this update: Mon 07 Apr 2025 20:01:04 +0000
Manifest next update: Tue 08 Apr 2025 20:01:04 +0000
Files and hashes: 1: 1-L-JDC3WGOZA5twynjFnC7YtGIo.roa (hash: zVRNbVcQozH8al78fGXQUKnWEO8gs0JQUcFnFpNO9u0=)
2: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: +193wp9pV/lY3Jh2Uds1P+4TF3G2GnJGk4W1l3yCjXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:d7:9a:87:a7:db:ab:82:8b:50:2b:27:4c:e8:77:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: Apr 7 20:01:04 2025 GMT
Not After : Apr 8 20:01:04 2025 GMT
Subject: CN=58ff32144dafb2ef7e4431d439b7fdf382c9e1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:11:8f:89:0d:65:91:1f:a3:78:c7:a5:a9:c3:
c4:28:be:e5:97:48:2e:bd:58:f0:e0:5c:6d:9d:73:
d4:f4:8b:3a:e2:52:d6:c2:45:8b:6a:7c:d1:15:2a:
4c:fe:f9:3d:c9:91:5c:e3:3c:48:1a:74:de:34:72:
86:c9:52:6e:0b:81:5f:18:87:51:e7:44:4f:b2:b9:
c0:53:82:85:23:34:0b:78:c5:98:f8:9f:db:d0:89:
03:64:e6:8c:7e:a5:00:17:f2:01:7e:a1:76:08:77:
23:08:a7:70:ae:6c:f0:d1:4f:a1:6b:2b:4f:13:7d:
43:8d:49:8b:66:0b:99:f4:1b:28:79:39:af:0e:87:
6e:0c:38:6e:67:82:5e:fb:1a:a1:94:c3:b2:ed:ed:
47:40:52:60:0f:17:4b:13:dd:12:3d:64:07:76:b4:
79:94:7d:1d:78:1e:58:75:07:57:06:de:3e:45:da:
96:ed:4f:e9:9a:80:d3:dd:02:6b:43:55:98:f5:7f:
35:40:99:67:ad:4b:22:18:c8:3c:ab:b2:5b:0a:74:
32:96:e2:64:dd:f3:71:d6:ba:77:e9:05:b5:f5:7b:
f9:dd:f3:86:30:ae:7a:a4:67:df:22:89:3b:a9:6c:
f6:78:55:f6:1f:76:35:ed:d3:ef:d8:ca:d1:d4:fc:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FF:32:14:4D:AF:B2:EF:7E:44:31:D4:39:B7:FD:F3:82:C9:E1:B0
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:62:d0:fa:bc:68:7a:98:d1:c5:d2:2b:f3:4b:66:28:f6:60:
db:3e:2a:9a:ac:b9:82:39:a0:4d:4c:c1:d3:f3:94:6a:b2:17:
eb:6b:d1:ce:ca:59:65:0f:c1:b7:f6:9c:d9:3e:6f:07:03:1b:
80:65:9d:17:fd:50:71:63:73:41:a7:28:5b:8b:39:27:f1:36:
79:45:26:e7:0d:3c:89:88:7a:1d:9a:38:61:98:55:f8:a0:af:
58:cb:09:bc:73:7d:bc:c2:d0:16:d8:2a:53:6f:f7:30:53:e1:
18:a4:72:ad:c5:be:23:89:50:4d:80:6e:2a:9f:77:64:09:7c:
c3:fd:c9:7d:63:65:c9:48:0b:92:9c:77:5b:bd:ed:40:fd:2d:
b0:91:e0:3f:f3:e4:cb:6e:23:cc:f8:75:7d:b5:e5:98:9a:81:
e3:df:6d:4d:58:0e:c5:52:bc:8b:fe:64:da:af:20:9e:9a:2d:
3e:00:d7:f9:43:6e:72:6a:b7:ad:ce:f6:ed:1c:b0:43:b3:4b:
12:c2:f6:96:e4:5c:67:bc:df:bf:2c:b4:6d:8a:21:19:76:b3:
cf:f6:92:7e:96:6e:cd:a8:ec:3d:dd:c2:48:63:e0:76:37:3f:
a9:5c:f0:ef:2f:3c:04:2e:88:3a:bd:9c:80:82:7d:37:2c:04:
9e:b7:f3:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYR15qHp9urgotQKydM6HdjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZTE1MTA4M2EyZmYzODBkMTcyNTk0MzRiNjRiNGZjYjA2
YTg1ZWYwHhcNMjUwNDA3MjAwMTA0WhcNMjUwNDA4MjAwMTA0WjAzMTEwLwYDVQQD
Eyg1OGZmMzIxNDRkYWZiMmVmN2U0NDMxZDQzOWI3ZmRmMzgyYzllMWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhGPiQ1lkR+jeMelqcPEKL7ll0gu
vVjw4FxtnXPU9Is64lLWwkWLanzRFSpM/vk9yZFc4zxIGnTeNHKGyVJuC4FfGIdR
50RPsrnAU4KFIzQLeMWY+J/b0IkDZOaMfqUAF/IBfqF2CHcjCKdwrmzw0U+haytP
E31DjUmLZguZ9BsoeTmvDoduDDhuZ4Je+xqhlMOy7e1HQFJgDxdLE90SPWQHdrR5
lH0deB5YdQdXBt4+RdqW7U/pmoDT3QJrQ1WY9X81QJlnrUsiGMg8q7JbCnQyluJk
3fNx1rp36QW19Xv53fOGMK56pGffIok7qWz2eFX2H3Y17dPv2MrR1Pws6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFj/MhRNr7LvfkQx1Dm3/fOCyeGwMB8GA1UdIwQY
MBaAFPDhUQg6L/OA0XJZQ0tktPywaoXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2Qt
YzdlZjg2ODJkNjdkLzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2QtYzdlZjg2ODJkNjdk
LzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmLQ+rxo
epjRxdIr80tmKPZg2z4qmqy5gjmgTUzB0/OUarIX62vRzspZZQ/Bt/ac2T5vBwMb
gGWdF/1QcWNzQacoW4s5J/E2eUUm5w08iYh6HZo4YZhV+KCvWMsJvHN9vMLQFtgq
U2/3MFPhGKRyrcW+I4lQTYBuKp93ZAl8w/3JfWNlyUgLkpx3W73tQP0tsJHgP/Pk
y24jzPh1fbXlmJqB499tTVgOxVK8i/5k2q8gnpotPgDX+UNucmq3rc727RywQ7NL
EsL2luRcZ7zfvyy0bYohGXazz/aSfpZuzajsPd3CSGPgdjc/qVzw7y88BC6IOr2c
gIJ9NywEnrfzFQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:01 2025 by rpki-client