Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
File: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft (raw, json)
Hash identifier: ezKVS+U8LrEuB9YtD6ASeLzk4PhDs34FM5BpaDNsmWc=
Subject key identifier: A1:48:F4:A2:54:F2:44:B4:32:74:1B:60:C3:1D:CB:28:FA:06:E3:C7
Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
Certificate issuer: /CN=f296fa79967e1aea042602f93242880a9543938b
Certificate serial: 01963E7965DE6C0702D407B99F4445B4B537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
Manifest number: 14F1
Signing time: Wed 16 Apr 2025 12:01:05 +0000
Manifest this update: Wed 16 Apr 2025 12:01:05 +0000
Manifest next update: Thu 17 Apr 2025 12:01:05 +0000
Files and hashes: 1: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl (hash: gLRdU6vOegXXcVvFGDmPjbWSwEdkzhiKjkyQtPiZfDo=)
2: H-eIyUNZ0W3PQRk326R5srYUXMQ.roa (hash: sIobqQC6E12Xk9efcNzqh0/xjMLIgWaEqWZ87SibDYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:79:65:de:6c:07:02:d4:07:b9:9f:44:45:b4:b5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f296fa79967e1aea042602f93242880a9543938b
Validity
Not Before: Apr 16 12:01:05 2025 GMT
Not After : Apr 17 12:01:05 2025 GMT
Subject: CN=a148f4a254f244b432741b60c31dcb28fa06e3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:04:9a:01:f1:7a:3c:b9:a2:c2:1f:da:b7:
24:95:ef:47:0e:68:f7:c0:12:2e:b1:d6:f6:93:0f:
47:72:30:5b:13:b7:4d:99:8d:0b:54:e3:6d:7b:0a:
b3:4d:6d:4f:df:e3:94:f0:76:b3:1c:49:37:09:ec:
3e:9d:c8:99:d9:2e:d0:0b:03:58:72:a3:d4:f0:45:
b7:37:46:47:d2:e8:57:65:46:1b:fb:fb:18:45:d7:
ad:40:bf:84:17:3e:6c:30:5f:31:c7:af:45:19:2b:
dc:cd:1b:e4:79:7e:a3:2a:36:0e:83:47:af:39:ab:
ad:5d:9d:2b:69:20:8b:57:a7:f4:93:c9:5a:c7:7d:
4c:28:85:08:3b:8c:96:68:42:51:9a:3c:f6:28:da:
cb:e9:9a:3f:d1:2d:8a:e7:c2:c0:10:00:9d:4b:5d:
cc:bd:b7:27:36:03:f9:44:99:17:67:2e:9a:2c:9f:
d5:ba:d6:0d:27:04:ca:23:df:74:fb:3b:44:2c:89:
81:dc:24:84:55:78:49:8b:8b:5c:83:f4:90:3e:bd:
1c:5e:75:6b:5a:c2:41:d8:96:ba:d0:c9:56:37:93:
e3:ba:03:ef:78:3e:3f:59:56:83:65:2a:1e:3f:06:
1e:a4:ab:01:ad:62:12:20:3d:20:9e:2c:47:37:7f:
a0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:48:F4:A2:54:F2:44:B4:32:74:1B:60:C3:1D:CB:28:FA:06:E3:C7
X509v3 Authority Key Identifier:
keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8c:24:9c:89:27:6b:9d:ce:1e:62:f0:bc:7e:56:e0:ed:bf:
3c:ae:56:6f:76:ef:74:42:50:76:82:c6:c9:41:19:6b:f1:86:
ac:79:44:b8:19:44:5e:bb:b4:d2:80:0a:72:b3:c1:df:d5:f3:
03:37:68:81:25:4a:7f:c1:60:57:83:dd:78:51:a7:4e:5a:27:
19:35:3a:e9:72:b2:e1:62:d0:d6:75:b7:b6:5a:65:f0:c3:48:
93:a6:ba:92:f9:fb:ad:11:f6:45:67:63:59:9d:ef:4c:01:83:
e7:89:08:ec:1c:64:ef:6f:8d:36:38:38:fd:09:45:6b:17:9e:
24:d1:02:e9:80:ee:46:06:c3:8f:fe:69:a4:55:30:5e:d8:6b:
5c:76:20:71:13:4d:a8:0c:50:ba:55:74:80:79:37:ff:8f:70:
01:27:f3:ff:4d:fd:44:6f:9d:1d:da:b0:b8:1d:f0:c1:93:c4:
96:09:ad:7e:7d:c6:c1:bc:f5:2d:56:8e:cf:ad:b4:ff:b9:35:
d0:94:dd:a0:3f:04:62:4d:03:b0:b2:00:4d:3f:a1:42:47:f3:
67:8b:11:bd:6d:65:52:ef:b5:04:0e:93:8d:7f:ef:b2:2b:76:
23:40:1e:e5:aa:54:e0:9e:70:32:90:75:70:0f:5d:a6:2a:82:
54:8b:69:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+eWXebAcC1Ae5n0RFtLU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyOTZmYTc5OTY3ZTFhZWEwNDI2MDJmOTMyNDI4ODBhOTU0
MzkzOGIwHhcNMjUwNDE2MTIwMTA1WhcNMjUwNDE3MTIwMTA1WjAzMTEwLwYDVQQD
EyhhMTQ4ZjRhMjU0ZjI0NGI0MzI3NDFiNjBjMzFkY2IyOGZhMDZlM2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXsEmgHxejy5osIf2rckle9HDmj3
wBIusdb2kw9HcjBbE7dNmY0LVONtewqzTW1P3+OU8HazHEk3Cew+nciZ2S7QCwNY
cqPU8EW3N0ZH0uhXZUYb+/sYRdetQL+EFz5sMF8xx69FGSvczRvkeX6jKjYOg0ev
OautXZ0raSCLV6f0k8lax31MKIUIO4yWaEJRmjz2KNrL6Zo/0S2K58LAEACdS13M
vbcnNgP5RJkXZy6aLJ/VutYNJwTKI990+ztELImB3CSEVXhJi4tcg/SQPr0cXnVr
WsJB2Ja60MlWN5PjugPveD4/WVaDZSoePwYepKsBrWISID0gnixHN3+gTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFI9KJU8kS0MnQbYMMdyyj6BuPHMB8GA1UdIwQY
MBaAFPKW+nmWfhrqBCYC+TJCiAqVQ5OLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHBiNmVaWi1HdW9FSmdMNU1rS0lDcFZEazRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi82ZDJhMjgtYmM4My00MmQ1LTg1NTYt
OTQwOWQ5MTA5MGZhLzEvOHBiNmVaWi1HdW9FSmdMNU1rS0lDcFZEazRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi82ZDJhMjgtYmM4My00MmQ1LTg1NTYtOTQwOWQ5MTA5MGZh
LzEvOHBiNmVaWi1HdW9FSmdMNU1rS0lDcFZEazRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYowknIkn
a53OHmLwvH5W4O2/PK5Wb3bvdEJQdoLGyUEZa/GGrHlEuBlEXru00oAKcrPB39Xz
AzdogSVKf8FgV4PdeFGnTlonGTU66XKy4WLQ1nW3tlpl8MNIk6a6kvn7rRH2RWdj
WZ3vTAGD54kI7Bxk72+NNjg4/QlFaxeeJNEC6YDuRgbDj/5ppFUwXthrXHYgcRNN
qAxQulV0gHk3/49wASfz/039RG+dHdqwuB3wwZPElgmtfn3Gwbz1LVaOz620/7k1
0JTdoD8EYk0DsLIATT+hQkfzZ4sRvW1lUu+1BA6TjX/vsit2I0Ae5apU4J5wMpB1
cA9dpiqCVItpDQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 22:14:10 2025 by rpki-client