Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
File: 8UPRPHu9KqFfVnfBOawzyGeHnyw.mft (raw, json)
Hash identifier: r1pDHks6mC5Y9HchAsbC+FxWo9HzKKhFhk7tguLPDf4=
Subject key identifier: FF:97:F9:82:F5:0B:EE:35:AF:03:C4:61:A6:42:75:BC:EB:55:40:A3
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Certificate issuer: /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial: 019652DB1B999FDF79531B9F96B61DD46C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
Manifest number: 054D
Signing time: Sun 20 Apr 2025 11:00:13 +0000
Manifest this update: Sun 20 Apr 2025 11:00:13 +0000
Manifest next update: Mon 21 Apr 2025 11:00:13 +0000
Files and hashes: 1: 8UPRPHu9KqFfVnfBOawzyGeHnyw.crl (hash: U1r0lDUFXl9rGNXcnyw5fmQgQqllPTNq/47AjsqtnZc=)
2: UMmv-WY7B5qYJViInJvlNV476mE.roa (hash: jHHOgpNZRXbrpDROEuRDFCxUXMl5uaCZV9NM+NW4eXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:1b:99:9f:df:79:53:1b:9f:96:b6:1d:d4:6c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Validity
Not Before: Apr 20 11:00:13 2025 GMT
Not After : Apr 21 11:00:13 2025 GMT
Subject: CN=ff97f982f50bee35af03c461a64275bceb5540a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:f2:ea:80:57:31:e5:97:4e:09:a8:5d:3b:
c8:9d:94:11:ee:85:8d:84:f1:44:f9:46:03:8a:20:
31:4d:1e:7c:95:53:1e:7b:6f:ff:06:2e:8a:05:d4:
35:87:02:5e:bf:d5:16:c2:4c:7a:7c:93:60:aa:93:
11:33:cd:01:cc:cb:39:48:f7:33:9c:b6:ab:bc:80:
b8:b5:d5:3a:0c:8e:f3:80:f7:f6:4c:e8:f0:18:da:
c1:38:49:cf:5f:34:aa:40:2c:0f:05:1d:d8:75:c1:
10:1c:a5:19:04:57:9d:db:e4:cb:23:49:c1:7e:cf:
0c:08:40:d0:b6:51:0b:d8:52:88:fb:99:bc:2e:84:
c3:85:c1:28:c1:ab:b8:26:97:e3:b6:78:49:44:fc:
e2:1c:ad:c1:fd:0e:fe:09:7b:64:89:30:2e:85:df:
ba:eb:8b:8d:63:3d:ea:58:5c:77:46:31:fb:32:9e:
b6:bf:69:f4:48:75:2f:ff:5a:f3:eb:78:94:df:da:
c8:93:6b:1f:36:f3:81:c8:d5:69:88:4b:b5:9b:16:
cc:54:14:f9:be:04:1c:13:e1:78:69:35:15:76:54:
46:1d:f6:b9:67:9c:c9:60:77:ef:7a:c5:4a:8b:3f:
7c:d2:cc:c8:68:ff:dd:2f:9a:21:f7:a3:98:a8:2b:
01:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:97:F9:82:F5:0B:EE:35:AF:03:C4:61:A6:42:75:BC:EB:55:40:A3
X509v3 Authority Key Identifier:
keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3d:65:db:5c:43:c6:2d:f0:25:d6:d3:bf:1b:b5:be:80:d1:
b3:9b:1f:2a:3a:21:ea:11:97:08:1d:67:1e:71:74:21:ce:0d:
bf:55:6c:8c:69:0c:f5:a4:fa:eb:54:3b:32:9a:f7:00:b1:3e:
f8:f8:cc:2b:7e:b8:fc:31:ec:60:0d:da:6a:5b:a5:45:8a:19:
3f:f5:ec:61:b8:54:95:4e:c3:ef:a0:28:ac:9e:6b:51:d8:e9:
fb:f6:07:91:1a:11:64:0e:17:51:df:63:86:14:62:51:a3:76:
ed:02:31:fa:2f:13:34:e9:7c:e8:cc:c7:b2:fe:5e:8c:82:b3:
b0:98:4e:12:65:b1:13:eb:53:3d:88:49:17:4a:dd:67:05:a0:
c1:a6:94:61:5a:18:50:a1:0e:82:a5:f3:f3:4a:0d:dc:bf:9e:
c1:d4:e2:bb:9f:74:d1:33:73:57:6b:6e:5f:3a:54:87:07:4c:
d9:69:51:83:17:53:5f:6e:1f:d5:13:b0:90:a5:d2:ad:91:59:
a8:d2:de:3a:25:19:db:17:92:dd:85:55:78:41:6e:60:c5:41:
9c:a6:3f:80:bb:85:fc:2e:d0:ba:b4:71:bf:ee:57:3c:64:02:
ec:cf:cf:8c:39:31:53:2c:9d:41:8f:da:49:cd:27:86:e4:49:
73:9e:0f:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZS2xuZn995UxuflrYd1GyIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDNkMTNjN2JiZDJhYTE1ZjU2NzdjMTM5YWMzM2M4Njc4
NzlmMmMwHhcNMjUwNDIwMTEwMDEzWhcNMjUwNDIxMTEwMDEzWjAzMTEwLwYDVQQD
EyhmZjk3Zjk4MmY1MGJlZTM1YWYwM2M0NjFhNjQyNzViY2ViNTU0MGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss3y6oBXMeWXTgmoXTvInZQR7oWN
hPFE+UYDiiAxTR58lVMee2//Bi6KBdQ1hwJev9UWwkx6fJNgqpMRM80BzMs5SPcz
nLarvIC4tdU6DI7zgPf2TOjwGNrBOEnPXzSqQCwPBR3YdcEQHKUZBFed2+TLI0nB
fs8MCEDQtlEL2FKI+5m8LoTDhcEowau4JpfjtnhJRPziHK3B/Q7+CXtkiTAuhd+6
64uNYz3qWFx3RjH7Mp62v2n0SHUv/1rz63iU39rIk2sfNvOByNVpiEu1mxbMVBT5
vgQcE+F4aTUVdlRGHfa5Z5zJYHfvesVKiz980szIaP/dL5oh96OYqCsB+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+X+YL1C+41rwPEYaZCdbzrVUCjMB8GA1UdIwQY
MBaAFPFD0Tx7vSqhX1Z3wTmsM8hnh58sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVQUlBIdTlLcUZmVm5mQk9hd3p5R2VIbnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84MzU5Y2UtYmJkNC00MjUzLTk0NjQt
YTE0NmExYjAxZjhmLzEvOFVQUlBIdTlLcUZmVm5mQk9hd3p5R2VIbnl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84MzU5Y2UtYmJkNC00MjUzLTk0NjQtYTE0NmExYjAxZjhm
LzEvOFVQUlBIdTlLcUZmVm5mQk9hd3p5R2VIbnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASD1l21xD
xi3wJdbTvxu1voDRs5sfKjoh6hGXCB1nHnF0Ic4Nv1VsjGkM9aT661Q7Mpr3ALE+
+PjMK364/DHsYA3aalulRYoZP/XsYbhUlU7D76AorJ5rUdjp+/YHkRoRZA4XUd9j
hhRiUaN27QIx+i8TNOl86MzHsv5ejIKzsJhOEmWxE+tTPYhJF0rdZwWgwaaUYVoY
UKEOgqXz80oN3L+ewdTiu5900TNzV2tuXzpUhwdM2WlRgxdTX24f1ROwkKXSrZFZ
qNLeOiUZ2xeS3YVVeEFuYMVBnKY/gLuF/C7QurRxv+5XPGQC7M/PjDkxUyydQY/a
Sc0nhuRJc54P1g==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:55:27 2025 by rpki-client