Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
File: P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft (raw, json)
Hash identifier: tYFNc5t+BSRO0vGbN+LxZGsM0R4Ch4UUgDxnr4uqWSA=
Subject key identifier: C8:03:63:AE:04:75:69:09:1D:3D:38:7C:79:2F:F9:98:F8:4C:0C:31
Authority key identifier: 3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A
Certificate issuer: /CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a
Certificate serial: 019761A70082ED6FBBCF8313C019E74C7AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
Manifest number: 02A1
Signing time: Thu 12 Jun 2025 01:00:23 +0000
Manifest this update: Thu 12 Jun 2025 01:00:23 +0000
Manifest next update: Fri 13 Jun 2025 01:00:23 +0000
Files and hashes: 1: P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl (hash: BAaFyGTPUC/pCpMecpDi/fZL0EVyBw4P4RDU8mmAIfs=)
2: PQ28rfbk5yXRYjcz-QOCkZ4ENM0.roa (hash: YSotQz0qiTv7LM37y7e6zhLaYImvG6ufZU+Z40/a72I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:a7:00:82:ed:6f:bb:cf:83:13:c0:19:e7:4c:7a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a
Validity
Not Before: Jun 12 01:00:23 2025 GMT
Not After : Jun 13 01:00:23 2025 GMT
Subject: CN=c80363ae047569091d3d387c792ff998f84c0c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:0e:8c:ab:a1:4d:29:47:d4:9f:67:91:95:
39:d6:8d:ca:96:ac:89:ad:67:53:3a:f6:68:39:50:
9e:04:37:d1:7b:e9:98:27:3e:8e:75:32:8d:dc:af:
cc:57:6a:e7:16:97:c3:19:82:26:fd:c2:77:2f:01:
57:88:b2:41:ca:6b:f8:fd:70:30:d6:d0:16:99:28:
35:c2:c3:74:8e:90:ec:cd:9f:eb:8f:02:62:1e:9c:
2e:f3:b4:1a:19:eb:3d:8f:00:aa:fb:27:ca:0f:0e:
5a:2c:0d:fa:f8:04:46:13:5f:ef:c4:5b:c1:62:02:
18:94:32:d7:c1:55:7f:f6:5d:f1:2d:0b:da:89:ea:
c0:52:d2:1d:6c:3f:85:6b:33:99:cc:47:1a:ba:d4:
3e:67:55:8b:da:07:58:69:0e:ce:24:51:5a:05:40:
e7:9c:79:16:5f:bd:56:66:47:ca:d9:58:4c:57:1d:
38:0b:f5:f3:b8:d3:e0:dd:3d:2c:84:72:37:51:8a:
12:11:a1:b7:39:8b:05:8e:f0:ea:20:fb:64:d5:ca:
2a:a9:bb:8a:11:a0:7a:93:58:3c:03:c0:1c:98:af:
14:51:9b:d7:9d:92:d4:46:6b:3e:64:76:e8:b6:03:
e7:63:a3:9c:5c:3b:62:b0:76:c8:16:36:03:49:92:
29:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:03:63:AE:04:75:69:09:1D:3D:38:7C:79:2F:F9:98:F8:4C:0C:31
X509v3 Authority Key Identifier:
keyid:3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ba:51:fa:56:be:de:84:8f:0f:b5:27:41:4e:50:cf:61:6c:
19:b0:bb:33:8d:3f:93:5c:22:9d:b3:f8:fe:20:87:31:71:f6:
2e:b4:56:fc:ae:23:cd:bb:8c:6b:59:5f:e5:0f:1a:a1:a9:a5:
f0:aa:84:d7:31:7c:47:38:52:b4:21:eb:e1:91:9b:d6:6c:a0:
6d:63:82:b4:8c:81:11:c5:65:6b:22:da:3f:7f:20:e5:14:5c:
9f:e2:b8:ee:8d:b2:c1:c0:0f:ca:9d:20:6b:9c:3c:16:2e:1f:
c5:c7:bd:c8:08:0d:ae:a2:62:de:24:92:89:7c:bc:32:89:90:
20:88:ca:f6:4b:d0:4b:27:a9:63:7d:55:a5:05:5b:dd:8d:a9:
b3:aa:7c:aa:12:f4:ed:4e:ad:c4:46:80:50:8c:b5:79:f1:92:
d2:7f:eb:72:38:e0:9e:aa:29:a9:6e:e0:90:e9:56:d7:50:4b:
3d:90:54:ec:07:51:e9:47:f5:b4:a1:40:a0:ad:1d:22:0b:35:
2d:a5:c6:94:b2:c1:8c:54:2f:61:d5:5b:90:ce:9d:32:ff:6f:
56:a4:a6:6b:23:79:99:a2:10:eb:30:14:8d:00:7e:a1:4a:d8:
e0:85:68:b8:62:61:1f:c3:33:46:25:12:69:7a:8b:ae:7d:51:
d4:17:27:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdhpwCC7W+7z4MTwBnnTHrxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmY2ZmOThhYWE1YjQ4ZGM2MTU4ZDJmYzY1ZjI1YzUwOTdi
NWUyNmEwHhcNMjUwNjEyMDEwMDIzWhcNMjUwNjEzMDEwMDIzWjAzMTEwLwYDVQQD
EyhjODAzNjNhZTA0NzU2OTA5MWQzZDM4N2M3OTJmZjk5OGY4NGMwYzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT0OjKuhTSlH1J9nkZU51o3KlqyJ
rWdTOvZoOVCeBDfRe+mYJz6OdTKN3K/MV2rnFpfDGYIm/cJ3LwFXiLJBymv4/XAw
1tAWmSg1wsN0jpDszZ/rjwJiHpwu87QaGes9jwCq+yfKDw5aLA36+ARGE1/vxFvB
YgIYlDLXwVV/9l3xLQvaierAUtIdbD+FazOZzEcautQ+Z1WL2gdYaQ7OJFFaBUDn
nHkWX71WZkfK2VhMVx04C/XzuNPg3T0shHI3UYoSEaG3OYsFjvDqIPtk1coqqbuK
EaB6k1g8A8AcmK8UUZvXnZLURms+ZHbotgPnY6OcXDtisHbIFjYDSZIphwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgDY64EdWkJHT04fHkv+Zj4TAwxMB8GA1UdIwQY
MBaAFD/P+YqqW0jcYVjS/GXyXFCXteJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDhfNWlxcGJTTnhoV05MOFpmSmNVSmUxNG1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zYzUwMjYtNTAxMS00Njg5LTgzNjct
N2I0ZTVlMTg0NzM1LzEvUDhfNWlxcGJTTnhoV05MOFpmSmNVSmUxNG1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zYzUwMjYtNTAxMS00Njg5LTgzNjctN2I0ZTVlMTg0NzM1
LzEvUDhfNWlxcGJTTnhoV05MOFpmSmNVSmUxNG1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbpR+la+
3oSPD7UnQU5Qz2FsGbC7M40/k1winbP4/iCHMXH2LrRW/K4jzbuMa1lf5Q8aoaml
8KqE1zF8RzhStCHr4ZGb1mygbWOCtIyBEcVlayLaP38g5RRcn+K47o2ywcAPyp0g
a5w8Fi4fxce9yAgNrqJi3iSSiXy8MomQIIjK9kvQSyepY31VpQVb3Y2ps6p8qhL0
7U6txEaAUIy1efGS0n/rcjjgnqopqW7gkOlW11BLPZBU7AdR6Uf1tKFAoK0dIgs1
LaXGlLLBjFQvYdVbkM6dMv9vVqSmayN5maIQ6zAUjQB+oUrY4IVouGJhH8MzRiUS
aXqLrn1R1Bcn5g==
-----END CERTIFICATE-----
Generated at Thu Jun 12 11:08:52 2025 by rpki-client