Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
File: 8vZyvbewdlkUflh9RDGqYE92o4Q.mft (raw, json)
Hash identifier: BFRstgZMYFWimozrY/0WBwSoMYfs7uVB4Qe8gbeiQhM=
Subject key identifier: D7:FF:7C:EB:00:31:04:00:C5:1A:0A:BD:3A:6A:21:8B:A9:A3:54:7C
Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
Certificate issuer: /CN=f2f672bdb7b07659147e587d4431aa604f76a384
Certificate serial: 019753B4A5F285239C0A074492D6CEB13E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
Manifest number: 1514
Signing time: Mon 09 Jun 2025 08:00:37 +0000
Manifest this update: Mon 09 Jun 2025 08:00:37 +0000
Manifest next update: Tue 10 Jun 2025 08:00:37 +0000
Files and hashes: 1: 8vZyvbewdlkUflh9RDGqYE92o4Q.crl (hash: Q6Kj8ObtF9BbPUVcJZB7boEdj1ajOUsdGv55QCbQtjM=)
2: MZX1sQ-Npgh0Pud-IcGKNSLyo0k.roa (hash: U9/To+oLXeceO29CXxgG6V0U8rAZo8+5KCoNTba0dLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:a5:f2:85:23:9c:0a:07:44:92:d6:ce:b1:3e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384
Validity
Not Before: Jun 9 08:00:37 2025 GMT
Not After : Jun 10 08:00:37 2025 GMT
Subject: CN=d7ff7ceb00310400c51a0abd3a6a218ba9a3547c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0b:43:d0:8e:3a:41:05:29:3a:46:9b:bc:69:
52:3d:4c:59:55:f3:09:4f:55:bc:35:54:72:de:d9:
a1:f0:e0:48:a5:76:b3:d3:ad:cf:39:1a:1a:1d:c5:
5b:46:82:a9:7a:22:eb:b2:bf:18:5c:07:34:bd:26:
ac:e0:a8:89:e9:ed:e7:17:60:58:0a:91:15:de:2d:
a4:ab:d3:e9:bf:5d:e9:c8:4a:ed:3c:3f:ce:83:d3:
84:3a:94:81:90:c4:83:c1:88:ce:4c:9c:48:3b:0a:
50:aa:c6:86:7a:cc:36:e5:18:18:74:6d:4f:0e:62:
0f:c3:9b:4c:39:34:5f:91:97:ae:42:03:6b:ed:fc:
0b:8b:40:c1:a0:3a:ac:2c:d5:5d:6f:07:e3:15:3e:
83:51:ee:03:46:c9:a0:e9:dd:32:ff:43:7f:ff:ed:
2f:c0:7a:a6:26:fb:9f:fd:f0:d8:71:9c:aa:ca:b4:
4a:34:fb:ec:1d:d0:9d:98:35:04:4f:1a:a7:5b:aa:
ba:1f:3c:2a:b2:4f:dc:1a:67:9c:65:cd:db:7b:03:
3d:ac:fa:dc:12:07:92:5a:7e:e3:2b:f8:b9:e9:6b:
97:db:3d:36:e4:99:a5:6f:f1:52:d8:61:85:d1:bf:
8b:8e:3e:b3:9b:02:25:41:15:90:e3:99:ef:9a:f8:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FF:7C:EB:00:31:04:00:C5:1A:0A:BD:3A:6A:21:8B:A9:A3:54:7C
X509v3 Authority Key Identifier:
keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b6:08:65:90:b6:d9:3e:4d:63:f9:ce:14:ec:63:5f:27:12:
eb:f9:b9:8f:e6:75:e6:ba:a8:30:3e:68:62:2b:de:b7:2b:71:
c2:44:9e:f9:50:46:20:bf:3b:22:68:31:aa:2f:f0:1f:75:ec:
79:df:df:2b:c7:3a:dc:d7:bd:c1:ef:1c:79:a1:44:78:74:55:
fa:9a:2a:11:0b:d6:82:d3:69:9d:44:1c:ed:3a:7d:04:33:2f:
bd:55:fd:56:56:32:80:4e:50:dc:04:76:ae:9a:27:59:0c:5a:
13:e9:0c:dc:ec:1c:72:ef:1c:78:fd:59:bc:69:4d:e4:b4:73:
95:83:41:49:75:58:d6:40:06:46:e2:d3:53:f2:e2:4f:3d:54:
6d:12:30:e8:20:e6:11:25:f2:1a:b8:3b:b0:3e:3d:36:2c:f9:
f6:14:2e:cf:d5:e4:18:e7:2e:d7:86:57:6f:65:9c:c8:c0:53:
fe:9f:2a:ef:30:4f:69:db:02:65:d0:2d:f7:21:b5:c7:04:a0:
ef:cb:da:6d:ee:b3:57:97:b4:a9:2e:42:88:af:dd:8a:4c:cc:
91:07:df:34:11:aa:a3:12:6b:a8:6b:c8:aa:f5:d3:04:98:2a:
40:6e:c8:3e:e6:b5:1b:71:07:ef:bd:72:47:22:17:10:be:14:
3d:f3:86:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTtKXyhSOcCgdEktbOsT4EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZjY3MmJkYjdiMDc2NTkxNDdlNTg3ZDQ0MzFhYTYwNGY3
NmEzODQwHhcNMjUwNjA5MDgwMDM3WhcNMjUwNjEwMDgwMDM3WjAzMTEwLwYDVQQD
EyhkN2ZmN2NlYjAwMzEwNDAwYzUxYTBhYmQzYTZhMjE4YmE5YTM1NDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQtD0I46QQUpOkabvGlSPUxZVfMJ
T1W8NVRy3tmh8OBIpXaz063PORoaHcVbRoKpeiLrsr8YXAc0vSas4KiJ6e3nF2BY
CpEV3i2kq9Ppv13pyErtPD/Og9OEOpSBkMSDwYjOTJxIOwpQqsaGesw25RgYdG1P
DmIPw5tMOTRfkZeuQgNr7fwLi0DBoDqsLNVdbwfjFT6DUe4DRsmg6d0y/0N//+0v
wHqmJvuf/fDYcZyqyrRKNPvsHdCdmDUETxqnW6q6Hzwqsk/cGmecZc3bewM9rPrc
EgeSWn7jK/i56WuX2z025Jmlb/FS2GGF0b+Ljj6zmwIlQRWQ45nvmvjygwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNf/fOsAMQQAxRoKvTpqIYupo1R8MB8GA1UdIwQY
MBaAFPL2cr23sHZZFH5YfUQxqmBPdqOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8zYjFmNTYtODcwNy00NzJjLTg5NzEt
NjI2ZWY4OGYyMWE5LzEvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8zYjFmNTYtODcwNy00NzJjLTg5NzEtNjI2ZWY4OGYyMWE5
LzEvOHZaeXZiZXdkbGtVZmxoOVJER3FZRTkybzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7YIZZC2
2T5NY/nOFOxjXycS6/m5j+Z15rqoMD5oYivetytxwkSe+VBGIL87Imgxqi/wH3Xs
ed/fK8c63Ne9we8ceaFEeHRV+poqEQvWgtNpnUQc7Tp9BDMvvVX9VlYygE5Q3AR2
rponWQxaE+kM3Owccu8ceP1ZvGlN5LRzlYNBSXVY1kAGRuLTU/LiTz1UbRIw6CDm
ESXyGrg7sD49Niz59hQuz9XkGOcu14ZXb2WcyMBT/p8q7zBPadsCZdAt9yG1xwSg
78vabe6zV5e0qS5CiK/dikzMkQffNBGqoxJrqGvIqvXTBJgqQG7IPua1G3EH771y
RyIXEL4UPfOGDA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 11:58:13 2025 by rpki-client