Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
File: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft (raw, json)
Hash identifier: n9xz7mTlum5YfPFhGlHyauawv7KFDmA3BoNVMhthDac=
Subject key identifier: 58:D4:77:E4:F4:FB:0C:68:D9:86:52:74:C9:95:DD:49:9E:9C:4F:42
Authority key identifier: F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
Certificate issuer: /CN=f09760cf11ef2b862187b05e5d751c734c634b45
Certificate serial: 019768178BE4C5C25866F828932B3B8B2F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
Manifest number: 0BF9
Signing time: Fri 13 Jun 2025 07:01:02 +0000
Manifest this update: Fri 13 Jun 2025 07:01:02 +0000
Manifest next update: Sat 14 Jun 2025 07:01:02 +0000
Files and hashes: 1: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl (hash: yHskXnFXh6NkjcTYomXaVcWgU/snLQy9wL5cjahulWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:17:8b:e4:c5:c2:58:66:f8:28:93:2b:3b:8b:2f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09760cf11ef2b862187b05e5d751c734c634b45
Validity
Not Before: Jun 13 07:01:02 2025 GMT
Not After : Jun 14 07:01:02 2025 GMT
Subject: CN=58d477e4f4fb0c68d9865274c995dd499e9c4f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:49:f4:0d:e0:ad:b4:d6:c4:59:15:a9:ba:
0f:11:c1:0b:d0:a6:95:9c:72:94:32:cb:a0:b7:91:
f3:71:40:da:f1:10:94:41:02:7c:58:b9:98:a1:93:
92:39:c6:67:d0:5d:5f:fe:ca:71:17:54:f2:23:ef:
7a:20:13:50:c2:b9:0b:98:2c:39:e0:70:64:c6:9a:
13:56:f1:3a:d2:24:63:77:79:4a:90:ef:ed:2c:b8:
23:bd:78:a7:2d:f8:ed:99:7d:96:fb:2b:3a:8b:bf:
3f:e8:ec:ca:e8:47:29:ce:61:6e:09:e6:08:d7:77:
b2:a1:db:09:b3:cf:c5:42:bf:df:ef:05:02:40:5e:
4d:99:25:37:6c:7a:b2:77:60:7b:4c:d1:1a:93:b4:
47:f1:a2:38:27:96:e2:76:52:d2:f1:df:79:e2:9a:
6c:21:20:17:51:4e:00:28:31:ac:17:e2:71:30:00:
8e:7b:ea:9d:9d:88:91:66:f3:43:50:fa:ba:72:63:
9a:6b:e4:7e:69:74:b3:97:0b:d0:c4:d5:8e:ef:0f:
4b:9d:98:2a:8b:dd:d8:e3:e3:19:3e:4f:15:db:10:
a2:60:fd:36:1a:26:10:ad:f8:25:c6:14:37:8e:49:
6e:fd:70:1b:ae:68:85:85:cd:fd:2d:da:1c:17:ce:
fb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D4:77:E4:F4:FB:0C:68:D9:86:52:74:C9:95:DD:49:9E:9C:4F:42
X509v3 Authority Key Identifier:
keyid:F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:68:a1:e8:71:64:8c:65:b3:f9:68:78:1e:b9:79:4f:9a:3c:
4a:d8:9a:7a:57:04:73:54:a8:44:cf:69:82:b5:f2:0b:6d:82:
a8:1c:c1:1c:22:6a:c8:ef:66:8d:7e:f1:c6:af:07:c0:47:f1:
55:dd:cf:8f:5e:08:f2:b2:1b:60:7e:ca:43:b8:19:50:f2:aa:
80:9b:79:2a:8a:64:5a:a5:45:e3:9d:d5:82:cc:c9:b1:bb:ba:
7e:90:f5:6f:27:02:1e:ed:56:e3:6d:65:ae:a3:af:99:ea:c1:
f2:e3:9c:fa:13:38:89:28:58:84:90:ee:df:84:94:2f:d4:37:
2c:47:65:c4:dc:99:59:86:47:de:4a:12:3b:99:2a:c7:0e:46:
ac:9a:60:de:fa:c6:45:ad:d4:62:33:93:c6:2f:85:73:f8:26:
4f:4a:90:78:4a:21:2b:96:56:7f:d5:f2:eb:41:fe:97:78:97:
c6:61:46:19:a3:47:a9:ea:3e:3c:96:e4:9a:c8:89:f3:53:bc:
ea:03:29:0d:31:50:fa:49:c2:c0:ca:2d:b3:47:e6:17:6d:1c:
75:34:a0:59:53:02:0c:69:2e:24:77:25:22:44:78:d1:c1:08:
11:aa:ec:b7:da:4c:b0:b3:28:8b:3d:70:e0:9d:0a:7f:1b:6b:
1d:b9:ce:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoF4vkxcJYZvgokys7iy+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOTc2MGNmMTFlZjJiODYyMTg3YjA1ZTVkNzUxYzczNGM2
MzRiNDUwHhcNMjUwNjEzMDcwMTAyWhcNMjUwNjE0MDcwMTAyWjAzMTEwLwYDVQQD
Eyg1OGQ0NzdlNGY0ZmIwYzY4ZDk4NjUyNzRjOTk1ZGQ0OTllOWM0ZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/NJ9A3grbTWxFkVqboPEcEL0KaV
nHKUMsugt5HzcUDa8RCUQQJ8WLmYoZOSOcZn0F1f/spxF1TyI+96IBNQwrkLmCw5
4HBkxpoTVvE60iRjd3lKkO/tLLgjvXinLfjtmX2W+ys6i78/6OzK6EcpzmFuCeYI
13eyodsJs8/FQr/f7wUCQF5NmSU3bHqyd2B7TNEak7RH8aI4J5bidlLS8d954pps
ISAXUU4AKDGsF+JxMACOe+qdnYiRZvNDUPq6cmOaa+R+aXSzlwvQxNWO7w9LnZgq
i93Y4+MZPk8V2xCiYP02GiYQrfglxhQ3jklu/XAbrmiFhc39LdocF8771wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjUd+T0+wxo2YZSdMmV3UmenE9CMB8GA1UdIwQY
MBaAFPCXYM8R7yuGIYewXl11HHNMY0tFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEpkZ3p4SHZLNFloaDdCZVhYVWNjMHhqUzBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xMDg0OWItZjFhYS00OTE3LWI4Y2It
MzYwMjI0NDZmMDIzLzEvOEpkZ3p4SHZLNFloaDdCZVhYVWNjMHhqUzBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8xMDg0OWItZjFhYS00OTE3LWI4Y2ItMzYwMjI0NDZmMDIz
LzEvOEpkZ3p4SHZLNFloaDdCZVhYVWNjMHhqUzBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2ih6HFk
jGWz+Wh4Hrl5T5o8StiaelcEc1SoRM9pgrXyC22CqBzBHCJqyO9mjX7xxq8HwEfx
Vd3Pj14I8rIbYH7KQ7gZUPKqgJt5KopkWqVF453VgszJsbu6fpD1bycCHu1W421l
rqOvmerB8uOc+hM4iShYhJDu34SUL9Q3LEdlxNyZWYZH3koSO5kqxw5GrJpg3vrG
Ra3UYjOTxi+Fc/gmT0qQeEohK5ZWf9Xy60H+l3iXxmFGGaNHqeo+PJbkmsiJ81O8
6gMpDTFQ+knCwMots0fmF20cdTSgWVMCDGkuJHclIkR40cEIEarst9pMsLMoiz1w
4J0KfxtrHbnOUg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 10:35:36 2025 by rpki-client