Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
File: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft (raw, json)
Hash identifier: VmH7OuUUIni+jjZcTLAR5PTf27QSxSfAxEvnyWN5GpQ=
Subject key identifier: 7C:E1:3F:9B:AF:DE:79:6E:21:93:D8:56:38:6B:14:C6:BE:77:91:1B
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Certificate issuer: /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial: 0197639694AB7035BB3C4C528EDB5E53D373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
Manifest number: 0B8F
Signing time: Thu 12 Jun 2025 10:01:42 +0000
Manifest this update: Thu 12 Jun 2025 10:01:42 +0000
Manifest next update: Fri 13 Jun 2025 10:01:42 +0000
Files and hashes: 1: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl (hash: SJECw3Ca9YkDdPOUcHpu2wZJFQ9LduiBKk1t3dG8y8A=)
2: ViytvvvqRpbhZ8khzk-URy1_cok.roa (hash: GO9E5IMUAfx38THMM6EhNHK1/Vpo8T9/VGp4F+NJQF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:96:94:ab:70:35:bb:3c:4c:52:8e:db:5e:53:d3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324d0f47297680535eb2799189db888b4066782
Validity
Not Before: Jun 12 10:01:42 2025 GMT
Not After : Jun 13 10:01:42 2025 GMT
Subject: CN=7ce13f9bafde796e2193d856386b14c6be77911b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:5e:92:47:25:01:a5:66:b8:e0:63:3a:7a:
80:60:dc:7f:8a:53:1e:4d:e6:1f:93:c9:62:bc:67:
32:6a:8d:9c:e4:b3:67:1d:ea:30:a7:27:a6:f7:d1:
a2:98:42:66:9f:53:e7:d0:fe:de:6f:1f:e6:9c:76:
b2:22:01:a4:d4:91:14:fa:f2:61:40:cd:2c:2d:6f:
4f:b1:f6:15:37:62:c7:44:77:1c:56:e5:35:34:21:
83:f7:d3:9b:1f:9f:42:bd:af:c2:5d:d5:ca:c1:63:
88:c3:fa:ee:73:1a:b4:9e:9a:28:2b:8a:4e:89:38:
88:4a:60:43:c1:01:7f:b3:6e:36:c7:4a:8a:a6:36:
ab:1a:10:b6:77:e9:fb:6c:09:0a:33:5d:51:a3:7b:
ca:ee:82:db:d1:5c:e3:f6:a2:e4:99:5c:3c:a4:06:
a6:57:36:7f:48:dd:f7:97:b9:9c:4f:32:52:30:a1:
a9:fb:06:17:8e:a0:ca:f7:a8:98:75:fe:9a:a2:92:
e9:65:dd:75:08:34:7d:97:fa:33:a7:eb:14:cb:71:
da:ea:07:b9:5c:2d:ea:ea:7a:67:0b:9d:9a:b0:a6:
9f:3e:86:90:9a:06:b9:6d:82:6e:90:54:e5:3f:8e:
00:d0:89:93:e9:6d:ea:23:cd:0d:3c:90:46:c0:a7:
54:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E1:3F:9B:AF:DE:79:6E:21:93:D8:56:38:6B:14:C6:BE:77:91:1B
X509v3 Authority Key Identifier:
keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c3:f0:e2:67:b1:47:dd:8f:0b:99:ac:9e:67:f4:50:82:f8:
75:3d:3d:57:4f:62:16:84:5a:91:19:17:f7:32:81:c5:b0:ce:
ad:1e:4c:18:fe:dd:1f:05:e1:56:3a:de:2b:e3:34:43:7d:03:
11:4f:4f:76:f0:47:b4:dd:15:c2:9b:0e:89:40:d1:35:d1:1b:
c8:36:59:84:ed:1f:1c:61:71:12:59:7f:d9:56:8d:e9:c3:32:
1b:38:59:93:14:e9:21:28:c2:c0:eb:9d:71:77:6d:fd:61:8b:
3e:b1:1f:fd:08:8a:8e:2a:55:7d:d1:38:d4:5b:f5:a8:d5:02:
d8:78:64:c9:db:ca:f8:5d:1c:fe:f1:6c:ad:08:2a:01:8e:26:
f7:48:db:91:f6:03:0d:21:32:3c:1d:58:73:f5:94:65:8e:1a:
73:7f:71:a5:b9:f1:b3:86:d8:90:45:82:b9:97:82:7d:18:85:
c8:4c:b0:d1:38:15:af:ca:c1:d9:31:3e:ff:c2:b7:0b:11:ad:
53:9b:bd:32:18:79:b6:d1:ca:59:d7:cc:07:59:31:5c:f4:bb:
bd:73:10:d0:4e:61:d3:67:83:eb:ba:80:78:16:fd:d9:61:c8:
bf:c8:c3:f7:da:ef:84:f8:da:79:c8:89:04:2a:85:56:89:20:
e1:d4:7b:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdjlpSrcDW7PExSjtteU9NzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMjRkMGY0NzI5NzY4MDUzNWViMjc5OTE4OWRiODg4YjQw
NjY3ODIwHhcNMjUwNjEyMTAwMTQyWhcNMjUwNjEzMTAwMTQyWjAzMTEwLwYDVQQD
Eyg3Y2UxM2Y5YmFmZGU3OTZlMjE5M2Q4NTYzODZiMTRjNmJlNzc5MTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+5ekkclAaVmuOBjOnqAYNx/ilMe
TeYfk8livGcyao2c5LNnHeowpyem99GimEJmn1Pn0P7ebx/mnHayIgGk1JEU+vJh
QM0sLW9PsfYVN2LHRHccVuU1NCGD99ObH59Cva/CXdXKwWOIw/rucxq0npooK4pO
iTiISmBDwQF/s242x0qKpjarGhC2d+n7bAkKM11Ro3vK7oLb0Vzj9qLkmVw8pAam
VzZ/SN33l7mcTzJSMKGp+wYXjqDK96iYdf6aopLpZd11CDR9l/ozp+sUy3Ha6ge5
XC3q6npnC52asKafPoaQmga5bYJukFTlP44A0ImT6W3qI80NPJBGwKdUfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzhP5uv3nluIZPYVjhrFMa+d5EbMB8GA1UdIwQY
MBaAFPMk0PRyl2gFNesnmRiduIi0BmeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHlUUTlIS1hhQVUxNnllWkdKMjRpTFFHWjRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC85MGQzNjYtMmZhYi00N2U1LTkwYjkt
MDI2NWU1Y2Q2OTY2LzEvOHlUUTlIS1hhQVUxNnllWkdKMjRpTFFHWjRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC85MGQzNjYtMmZhYi00N2U1LTkwYjktMDI2NWU1Y2Q2OTY2
LzEvOHlUUTlIS1hhQVUxNnllWkdKMjRpTFFHWjRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmsPw4mex
R92PC5msnmf0UIL4dT09V09iFoRakRkX9zKBxbDOrR5MGP7dHwXhVjreK+M0Q30D
EU9PdvBHtN0VwpsOiUDRNdEbyDZZhO0fHGFxEll/2VaN6cMyGzhZkxTpISjCwOud
cXdt/WGLPrEf/QiKjipVfdE41Fv1qNUC2HhkydvK+F0c/vFsrQgqAY4m90jbkfYD
DSEyPB1Yc/WUZY4ac39xpbnxs4bYkEWCuZeCfRiFyEyw0TgVr8rB2TE+/8K3CxGt
U5u9Mhh5ttHKWdfMB1kxXPS7vXMQ0E5h02eD67qAeBb92WHIv8jD99rvhPjaeciJ
BCqFVokg4dR7hg==
-----END CERTIFICATE-----
Generated at Thu Jun 12 12:41:23 2025 by rpki-client