Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
File: 8WaLESRDpJbpZlHVgrbMZBP7XHY.mft (raw, json)
Hash identifier: n6xXQVh60GTD+a452pbWxKhllLNpaI1vdRcR/QAC11E=
Subject key identifier: 3E:E3:06:5C:89:E9:64:E6:BF:3D:76:32:9E:52:60:3A:B0:49:61:3E
Authority key identifier: F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
Certificate issuer: /CN=f1668b112443a496e96651d582b6cc6413fb5c76
Certificate serial: 019655DCFA10F163ADEB7C1B4FC90FB97ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
Manifest number: 04E1
Signing time: Mon 21 Apr 2025 01:01:07 +0000
Manifest this update: Mon 21 Apr 2025 01:01:07 +0000
Manifest next update: Tue 22 Apr 2025 01:01:07 +0000
Files and hashes: 1: 8WaLESRDpJbpZlHVgrbMZBP7XHY.crl (hash: JWZrMSrZtyJE41rsk2q8uqdNecNmU8MQ3QkdlZjmFE0=)
2: zTop8kv04M-CPRutWJMmw5M7s5M.roa (hash: h5ZlzzODOy4Yt5G5OttRKd2ppDnce+EkREvBpaIbOxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:fa:10:f1:63:ad:eb:7c:1b:4f:c9:0f:b9:7e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1668b112443a496e96651d582b6cc6413fb5c76
Validity
Not Before: Apr 21 01:01:07 2025 GMT
Not After : Apr 22 01:01:07 2025 GMT
Subject: CN=3ee3065c89e964e6bf3d76329e52603ab049613e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:71:fc:57:c8:b2:3e:53:13:3d:a2:93:93:
f6:2c:39:27:18:51:74:f4:90:46:1b:14:e8:b5:87:
58:ec:5a:5f:53:ad:9d:11:ac:ce:11:8e:b8:68:a8:
b1:b8:e2:39:f0:d0:d0:70:e5:7a:0c:9e:3a:84:3d:
73:df:76:70:d9:60:5d:29:88:45:40:79:46:2e:c0:
49:0a:60:34:42:89:1e:8e:8a:e9:04:d9:6e:a7:83:
0e:30:17:b1:1b:a5:04:33:4a:91:b7:ab:16:76:3c:
aa:77:5c:e8:35:d2:14:06:b0:78:84:10:92:80:08:
87:fc:dc:45:b7:36:c3:50:24:06:23:7d:bf:fc:1b:
4a:69:b6:bf:21:a8:62:d1:16:58:96:a0:0f:b7:f3:
c8:86:07:0c:ee:69:f3:cf:30:93:93:8e:65:3d:ef:
28:f8:07:97:ac:44:63:ae:8a:01:da:05:37:ab:1a:
0e:b5:98:ce:c2:b8:88:df:0e:ab:34:ef:5a:2e:62:
46:50:01:b5:8f:6a:99:d1:c3:34:11:a4:3d:a3:ce:
c7:e4:fb:9e:6a:0b:cd:7a:15:94:e8:29:03:fa:ae:
37:31:6a:28:9e:ca:cd:ea:54:ae:83:e4:8f:f6:d6:
80:e7:19:3f:17:d5:eb:e4:df:d4:49:ec:59:b6:29:
5b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E3:06:5C:89:E9:64:E6:BF:3D:76:32:9E:52:60:3A:B0:49:61:3E
X509v3 Authority Key Identifier:
keyid:F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:91:dd:fb:f0:7f:4d:4e:ff:d9:d8:2c:31:c0:b0:48:e7:57:
3c:15:2f:13:fc:ce:95:9a:8c:4a:0a:d8:0f:90:58:50:68:3f:
43:7d:fa:89:f2:8e:c6:4d:d6:a9:78:f6:47:c5:dc:54:f8:23:
cb:b9:b6:b7:08:8a:bc:48:51:95:db:5a:f6:e0:de:ea:6f:e5:
0a:05:a8:69:d8:42:ca:45:dd:1d:f6:d8:81:28:3e:cd:6b:96:
d5:11:80:bb:4b:be:23:35:f9:e2:32:bb:3d:55:ae:6a:4d:72:
d4:7b:0f:78:68:60:7c:47:39:42:14:a3:25:5b:e8:ce:07:f9:
c6:c6:34:64:24:44:ab:f6:07:0a:1c:ca:09:10:af:3b:84:11:
a6:8a:fe:8b:c1:6a:6c:31:84:19:1e:7a:dc:fe:d6:d3:7e:74:
f7:93:60:d6:cf:6f:7c:dc:09:f1:b8:cc:a9:40:e8:26:25:d3:
06:fc:68:36:83:79:d1:c5:07:df:46:94:41:bb:0b:c1:fa:32:
f0:35:5f:1a:4d:da:85:5c:7e:5d:78:01:8f:26:0e:ce:7d:11:
cc:37:5f:9b:cc:68:e4:9b:26:20:5d:75:3c:74:d3:b0:a6:0a:
15:85:57:29:2e:77:8d:ac:ce:7d:e9:e2:e9:df:48:ef:10:9c:
66:06:f6:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3PoQ8WOt63wbT8kPuX7OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNjY4YjExMjQ0M2E0OTZlOTY2NTFkNTgyYjZjYzY0MTNm
YjVjNzYwHhcNMjUwNDIxMDEwMTA3WhcNMjUwNDIyMDEwMTA3WjAzMTEwLwYDVQQD
EygzZWUzMDY1Yzg5ZTk2NGU2YmYzZDc2MzI5ZTUyNjAzYWIwNDk2MTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpBx/FfIsj5TEz2ik5P2LDknGFF0
9JBGGxTotYdY7FpfU62dEazOEY64aKixuOI58NDQcOV6DJ46hD1z33Zw2WBdKYhF
QHlGLsBJCmA0QokejorpBNlup4MOMBexG6UEM0qRt6sWdjyqd1zoNdIUBrB4hBCS
gAiH/NxFtzbDUCQGI32//BtKaba/Iahi0RZYlqAPt/PIhgcM7mnzzzCTk45lPe8o
+AeXrERjrooB2gU3qxoOtZjOwriI3w6rNO9aLmJGUAG1j2qZ0cM0EaQ9o87H5Pue
agvNehWU6CkD+q43MWoonsrN6lSug+SP9taA5xk/F9Xr5N/USexZtilbYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7jBlyJ6WTmvz12Mp5SYDqwSWE+MB8GA1UdIwQY
MBaAFPFmixEkQ6SW6WZR1YK2zGQT+1x2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFdhTEVTUkRwSmJwWmxIVmdyYk1aQlA3WEhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8yNWQyZDAtMjAyNi00ZDgxLTg1NDkt
MWZiNjY4NWE4ZDk3LzEvOFdhTEVTUkRwSmJwWmxIVmdyYk1aQlA3WEhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8yNWQyZDAtMjAyNi00ZDgxLTg1NDktMWZiNjY4NWE4ZDk3
LzEvOFdhTEVTUkRwSmJwWmxIVmdyYk1aQlA3WEhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJHd+/B/
TU7/2dgsMcCwSOdXPBUvE/zOlZqMSgrYD5BYUGg/Q336ifKOxk3WqXj2R8XcVPgj
y7m2twiKvEhRldta9uDe6m/lCgWoadhCykXdHfbYgSg+zWuW1RGAu0u+IzX54jK7
PVWuak1y1HsPeGhgfEc5QhSjJVvozgf5xsY0ZCREq/YHChzKCRCvO4QRpor+i8Fq
bDGEGR563P7W035095Ng1s9vfNwJ8bjMqUDoJiXTBvxoNoN50cUH30aUQbsLwfoy
8DVfGk3ahVx+XXgBjyYOzn0RzDdfm8xo5JsmIF11PHTTsKYKFYVXKS53jazOfeni
6d9I7xCcZgb2Sg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:23 2025 by rpki-client