Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: 8CqbHm6Qo7f520yRCze1j0aQS50ky5xl8baA9j2D/JU=
Subject key identifier: D5:91:9F:16:F2:85:D0:E9:C1:7A:34:21:89:C8:67:B7:15:51:74:46
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 019762BA063E99E370009B0140CB04627E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 0FEF
Signing time: Thu 12 Jun 2025 06:00:47 +0000
Manifest this update: Thu 12 Jun 2025 06:00:47 +0000
Manifest next update: Fri 13 Jun 2025 06:00:47 +0000
Files and hashes: 1: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: o7ZoVdq+Soo2yXgwqzNA+GlCw553xn5XSLXKJrdP4xQ=)
2: dPscEX-Zy8evMbxWuU7vJ2Ixhv8.roa (hash: D+72QcpH+TK76A0ijjgkoRMMQ5NsFbRIC95DTaeOIrc=)
3: eKaWRxU48jVjME70Pg-sKw71ysM.roa (hash: Fvcwn/TmHPQrbKfRxQXdczBfOElJLonqigBoxqw+IFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:ba:06:3e:99:e3:70:00:9b:01:40:cb:04:62:7e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Jun 12 06:00:47 2025 GMT
Not After : Jun 13 06:00:47 2025 GMT
Subject: CN=d5919f16f285d0e9c17a342189c867b715517446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:35:bb:c2:5a:14:9d:fd:47:96:d1:40:97:
78:ee:ae:cc:6e:14:67:f4:aa:89:3b:5e:4f:e9:91:
76:fc:b5:17:da:fb:b9:05:ff:8c:93:30:3f:a9:9b:
9c:90:b4:60:c9:cb:b6:90:4a:08:b7:f9:55:17:f0:
4f:8a:cf:a6:c1:e7:a3:27:d5:bd:c5:bb:82:aa:a0:
0e:0f:77:1a:f8:08:b3:7b:c5:53:61:f4:15:2f:58:
7e:bd:3d:54:58:70:b7:54:1c:82:68:3d:f8:e9:ea:
99:8f:38:1e:a8:af:ba:41:e3:dc:1d:60:cd:1d:77:
11:b2:cb:20:07:93:08:92:6a:c9:61:f9:43:6e:85:
4a:07:64:11:24:9c:2a:c0:41:42:7b:b5:c9:5d:15:
f9:2b:a3:72:fc:e2:b5:83:33:b6:13:c0:57:6d:54:
1e:37:33:8e:85:2c:a3:81:66:31:7c:9f:2a:72:42:
ae:3a:cb:50:aa:5e:16:b8:ed:8f:c5:3c:20:18:1b:
d6:20:0b:bd:cc:80:8c:c2:73:37:f4:10:45:8f:38:
8d:6e:10:d8:70:75:4e:8a:18:95:ad:00:51:1d:3f:
5f:4f:89:00:fb:4c:60:df:e5:2c:0b:67:e2:d6:7e:
7c:cf:fe:68:66:8c:7d:84:a8:97:c5:88:01:cd:13:
ed:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:91:9F:16:F2:85:D0:E9:C1:7A:34:21:89:C8:67:B7:15:51:74:46
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7f:99:74:00:5b:01:98:44:e7:46:6e:57:76:57:16:c3:21:
e3:2d:b1:dd:b3:81:93:60:cc:a7:2f:6d:b1:13:35:14:f9:36:
ab:a5:60:d2:63:fe:33:08:18:65:3f:e7:13:1f:e7:ef:87:38:
30:c5:b3:1b:85:bd:ac:0c:39:dc:71:d2:c8:43:87:30:cc:c0:
ac:dd:e6:ee:62:56:bb:5a:66:5c:18:44:fa:28:fd:8f:86:0b:
b2:a3:0d:a9:03:14:64:a6:45:7a:af:f7:77:26:36:31:99:70:
4f:74:af:0e:97:16:05:01:f0:5d:0c:9f:4d:a0:42:3f:34:2a:
40:c1:4a:24:28:5b:7a:a9:35:19:30:7b:ca:c0:e2:f0:13:35:
fe:c2:58:63:a9:34:f1:f7:bf:b9:2d:ae:51:5a:f9:d6:6f:1f:
07:9f:94:2a:13:4f:ac:b5:2d:89:e7:20:c9:1e:56:1f:e2:8f:
c2:54:cb:b9:2b:45:f8:89:05:3a:8b:14:cb:4f:86:9b:73:1a:
f5:3e:d2:63:62:5a:69:7d:00:25:6f:3f:80:2b:f5:b5:de:ef:
92:0a:ec:11:ef:ff:39:31:ad:4b:73:41:0e:56:45:89:3a:10:
a8:88:af:a1:cc:c2:97:2f:89:0b:90:31:71:d2:00:69:39:e9:
90:8d:2d:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdiugY+meNwAJsBQMsEYn40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjFkZjQ0YjM0NjgyM2NjZThjNjY0M2I1ZmE2OTE5YWZi
MjMxOTUwHhcNMjUwNjEyMDYwMDQ3WhcNMjUwNjEzMDYwMDQ3WjAzMTEwLwYDVQQD
EyhkNTkxOWYxNmYyODVkMGU5YzE3YTM0MjE4OWM4NjdiNzE1NTE3NDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/A1u8JaFJ39R5bRQJd47q7MbhRn
9KqJO15P6ZF2/LUX2vu5Bf+MkzA/qZuckLRgycu2kEoIt/lVF/BPis+mweejJ9W9
xbuCqqAOD3ca+Aize8VTYfQVL1h+vT1UWHC3VByCaD346eqZjzgeqK+6QePcHWDN
HXcRsssgB5MIkmrJYflDboVKB2QRJJwqwEFCe7XJXRX5K6Ny/OK1gzO2E8BXbVQe
NzOOhSyjgWYxfJ8qckKuOstQql4WuO2PxTwgGBvWIAu9zICMwnM39BBFjziNbhDY
cHVOihiVrQBRHT9fT4kA+0xg3+UsC2fi1n58z/5oZox9hKiXxYgBzRPtswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWRnxbyhdDpwXo0IYnIZ7cVUXRGMB8GA1UdIwQY
MBaAFPJh30SzRoI8zoxmQ7X6aRmvsjGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMt
NTc1ODYxNTYzNTRlLzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMtNTc1ODYxNTYzNTRl
LzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoX+ZdABb
AZhE50ZuV3ZXFsMh4y2x3bOBk2DMpy9tsRM1FPk2q6Vg0mP+MwgYZT/nEx/n74c4
MMWzG4W9rAw53HHSyEOHMMzArN3m7mJWu1pmXBhE+ij9j4YLsqMNqQMUZKZFeq/3
dyY2MZlwT3SvDpcWBQHwXQyfTaBCPzQqQMFKJChbeqk1GTB7ysDi8BM1/sJYY6k0
8fe/uS2uUVr51m8fB5+UKhNPrLUtiecgyR5WH+KPwlTLuStF+IkFOosUy0+Gm3Ma
9T7SY2JaaX0AJW8/gCv1td7vkgrsEe//OTGtS3NBDlZFiToQqIivoczCly+JC5Ax
cdIAaTnpkI0ttA==
-----END CERTIFICATE-----
Generated at Thu Jun 12 16:04:35 2025 by rpki-client