Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
File: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft (raw, json)
Hash identifier: ++5A4XTTlSQPf8n0UMeP/Qp0kQh0BlKzpyPdSg3d9Zw=
Subject key identifier: CD:8C:82:89:50:EB:17:98:E8:E0:6F:B4:73:3C:04:40:CE:BF:F0:ED
Authority key identifier: F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
Certificate issuer: /CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Certificate serial: 019758366993559E6BAE594EEE320895DD1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
Manifest number: 1176
Signing time: Tue 10 Jun 2025 05:00:50 +0000
Manifest this update: Tue 10 Jun 2025 05:00:50 +0000
Manifest next update: Wed 11 Jun 2025 05:00:50 +0000
Files and hashes: 1: 8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl (hash: PxJmX1lvbLL0MjBThP7Ld4gpXdIlbOnzbh/pRLr4N28=)
2: F0L-7P2Vilk9HCqFohJsqZcHd3Q.roa (hash: fTuIh58gxrXX3Bba7KkC9bw1yhp77tWXLVMb0qHV7oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:36:69:93:55:9e:6b:ae:59:4e:ee:32:08:95:dd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2246346ddb3e6ba6e890005b88148d2d6ce9971
Validity
Not Before: Jun 10 05:00:50 2025 GMT
Not After : Jun 11 05:00:50 2025 GMT
Subject: CN=cd8c828950eb1798e8e06fb4733c0440cebff0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b7:6f:3e:bb:db:38:5a:a2:a7:b7:d1:0b:86:
36:bd:31:72:6b:82:a4:8e:b0:e1:5b:22:67:3c:9c:
2c:d1:44:00:34:de:3b:41:02:10:aa:9b:2e:e9:79:
74:36:68:26:90:70:35:bb:37:2a:07:86:cd:f8:3d:
28:da:57:7e:32:ce:ae:40:8d:c1:55:f0:c9:90:58:
b1:40:a9:5d:5a:bd:aa:ff:cc:af:bb:0d:41:68:d2:
50:8a:ec:fb:9d:d9:c3:c3:f3:19:90:d9:a1:68:97:
7d:ad:fd:b6:e9:80:15:4a:3e:b6:b1:cd:62:b5:77:
43:37:f8:de:f7:f6:3e:9f:61:9c:c9:f6:61:ba:91:
ce:b8:f8:da:7b:83:0f:7f:98:79:d1:1a:32:3e:b8:
4b:ee:f3:42:eb:fd:0d:80:d5:02:ce:7d:69:2f:4a:
22:ae:a1:dd:47:3e:d7:7e:60:12:b4:bf:44:99:08:
76:22:19:f1:38:3d:3c:9b:cb:e8:7c:d2:a9:f5:d4:
d0:4c:be:f2:2f:28:3b:60:24:07:c5:11:9e:79:f9:
4d:f1:6c:70:11:76:8f:01:d7:5f:44:fd:c0:a5:29:
30:56:0a:27:e8:98:75:64:d4:05:d9:cd:f2:71:44:
37:17:7e:a2:a3:a8:95:30:6e:2f:ee:c3:2c:92:fc:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8C:82:89:50:EB:17:98:E8:E0:6F:B4:73:3C:04:40:CE:BF:F0:ED
X509v3 Authority Key Identifier:
keyid:F2:24:63:46:DD:B3:E6:BA:6E:89:00:05:B8:81:48:D2:D6:CE:99:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iRjRt2z5rpuiQAFuIFI0tbOmXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/eea9d1-239b-4349-8b45-b5bacdd0779d/1/8iRjRt2z5rpuiQAFuIFI0tbOmXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b2:12:2a:f9:da:dc:a0:98:ae:17:f6:26:c0:d1:c3:9f:3c:
72:25:06:0c:55:75:63:40:07:89:ee:57:f1:2f:40:a7:ae:f8:
52:66:32:89:4d:7c:f7:fc:84:31:fe:1a:63:ad:57:da:3e:fd:
5a:64:ae:a1:9d:00:3f:61:94:94:f3:e0:a6:b4:d5:21:60:36:
77:19:1f:c5:dd:90:63:9c:7d:7d:dc:42:91:30:b0:8b:08:17:
a9:39:76:c3:f8:28:59:b7:a0:95:ff:2f:3a:dd:32:8b:59:ab:
5f:5c:48:d8:1e:5c:cf:d1:df:22:c1:71:d1:de:6a:63:c9:7e:
21:03:20:29:47:df:1e:b9:1b:28:83:db:a7:4d:90:39:43:06:
fd:b6:03:9a:13:73:29:64:f9:77:37:27:ac:4b:43:1e:67:74:
ba:31:af:eb:bc:d6:95:f2:3f:82:a6:48:64:2f:1f:65:b4:a7:
21:7a:0c:4f:f5:78:8f:f3:8b:95:02:48:33:f4:82:c7:38:06:
b8:1e:36:d5:b7:cf:96:b0:09:bc:2a:43:41:6c:e9:99:2e:cb:
a8:e3:49:b3:c3:3e:70:3f:b9:54:19:d5:4f:e6:72:b5:82:17:
2a:a4:c6:d1:26:25:69:fc:96:79:2c:be:21:4f:5b:b1:18:2b:
a1:5d:e1:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdYNmmTVZ5rrllO7jIIld0bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMjQ2MzQ2ZGRiM2U2YmE2ZTg5MDAwNWI4ODE0OGQyZDZj
ZTk5NzEwHhcNMjUwNjEwMDUwMDUwWhcNMjUwNjExMDUwMDUwWjAzMTEwLwYDVQQD
EyhjZDhjODI4OTUwZWIxNzk4ZThlMDZmYjQ3MzNjMDQ0MGNlYmZmMGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bdvPrvbOFqip7fRC4Y2vTFya4Kk
jrDhWyJnPJws0UQANN47QQIQqpsu6Xl0NmgmkHA1uzcqB4bN+D0o2ld+Ms6uQI3B
VfDJkFixQKldWr2q/8yvuw1BaNJQiuz7ndnDw/MZkNmhaJd9rf226YAVSj62sc1i
tXdDN/je9/Y+n2GcyfZhupHOuPjae4MPf5h50RoyPrhL7vNC6/0NgNUCzn1pL0oi
rqHdRz7XfmAStL9EmQh2IhnxOD08m8vofNKp9dTQTL7yLyg7YCQHxRGeeflN8Wxw
EXaPAddfRP3ApSkwVgon6Jh1ZNQF2c3ycUQ3F36io6iVMG4v7sMskvyCHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2MgolQ6xeY6OBvtHM8BEDOv/DtMB8GA1UdIwQY
MBaAFPIkY0bds+a6bokABbiBSNLWzplxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGlSalJ0Mno1cnB1aVFBRnVJRkkwdGJPbVhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lZWE5ZDEtMjM5Yi00MzQ5LThiNDUt
YjViYWNkZDA3NzlkLzEvOGlSalJ0Mno1cnB1aVFBRnVJRkkwdGJPbVhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9lZWE5ZDEtMjM5Yi00MzQ5LThiNDUtYjViYWNkZDA3Nzlk
LzEvOGlSalJ0Mno1cnB1aVFBRnVJRkkwdGJPbVhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArISKvna
3KCYrhf2JsDRw588ciUGDFV1Y0AHie5X8S9Ap674UmYyiU189/yEMf4aY61X2j79
WmSuoZ0AP2GUlPPgprTVIWA2dxkfxd2QY5x9fdxCkTCwiwgXqTl2w/goWbeglf8v
Ot0yi1mrX1xI2B5cz9HfIsFx0d5qY8l+IQMgKUffHrkbKIPbp02QOUMG/bYDmhNz
KWT5dzcnrEtDHmd0ujGv67zWlfI/gqZIZC8fZbSnIXoMT/V4j/OLlQJIM/SCxzgG
uB421bfPlrAJvCpDQWzpmS7LqONJs8M+cD+5VBnVT+ZytYIXKqTG0SYlafyWeSy+
IU9bsRgroV3hgw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 07:45:47 2025 by rpki-client