Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
File: 8fQjYKOXCoCAFv342NujlsWh0DQ.mft (raw, json)
Hash identifier: Ja53wRvkM+IJzBXNpc5B5KO/INQ1FFoptyu5gYHKj0M=
Subject key identifier: 17:A9:E1:E6:84:8E:44:A9:B2:AF:FD:08:30:A2:A5:0B:9B:96:2F:36
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 01974FD7E07523CAAB451882C9EBF159C910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
Manifest number: 1585
Signing time: Sun 08 Jun 2025 14:00:37 +0000
Manifest this update: Sun 08 Jun 2025 14:00:37 +0000
Manifest next update: Mon 09 Jun 2025 14:00:37 +0000
Files and hashes: 1: 8fQjYKOXCoCAFv342NujlsWh0DQ.crl (hash: cg/6m8iXrJXZA37FUMZ9HZDZ1Use7dCGfbGUP8fs6Nk=)
2: XuSi8kXeBm_B8q7AzG1ldyxBl-U.roa (hash: VfVAqS9+xLim6Zr3WY+RPdJPag+yTxoDEH7wLbaR7Ko=)
3: w31LkDj-LMN5WUk5kbozH3jiIBA.roa (hash: y5CKPYN2xY1V73cNd1uJ1GGyUm72KbaIXZc2V61uNZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:e0:75:23:ca:ab:45:18:82:c9:eb:f1:59:c9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: Jun 8 14:00:37 2025 GMT
Not After : Jun 9 14:00:37 2025 GMT
Subject: CN=17a9e1e6848e44a9b2affd0830a2a50b9b962f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:b6:02:b6:03:65:9b:83:b5:a5:82:c5:b2:
66:96:3f:ab:74:45:c6:42:03:6f:0b:80:f8:d6:07:
e7:0c:85:e9:75:fe:6b:ba:4e:39:70:b9:66:39:73:
02:eb:3f:4f:1c:3d:99:dd:c6:ea:5a:36:c7:6a:02:
1d:b5:31:a2:cc:63:14:b7:d2:4d:40:dd:10:9a:cf:
ae:a2:34:dc:36:9b:f7:4b:94:31:3d:0f:a3:1c:0e:
af:db:ab:33:db:8f:1d:97:23:07:62:05:0c:f5:03:
93:5d:ec:25:7e:13:f2:fb:23:66:78:16:5c:93:30:
4c:a0:50:61:53:09:46:52:be:a6:d1:5d:18:9f:c9:
f8:aa:79:ce:42:50:4a:0e:48:46:fd:54:b6:e6:fb:
00:e8:3f:5e:f2:63:03:5c:07:fa:25:7f:e5:8a:54:
2b:65:77:64:c3:e8:51:5d:dc:01:95:52:0f:1d:25:
31:e3:9d:f2:a0:b7:70:63:67:0e:6b:f6:86:8c:c3:
6f:84:8e:b9:35:75:06:1b:cc:a5:cc:11:5e:4e:10:
31:5d:9a:8b:f1:26:1a:a8:4c:18:af:47:32:78:70:
23:a1:93:cc:34:f9:67:fe:28:e8:d8:c0:ac:b6:e1:
94:94:72:4b:3d:68:0e:83:95:ac:37:5f:79:98:61:
a5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A9:E1:E6:84:8E:44:A9:B2:AF:FD:08:30:A2:A5:0B:9B:96:2F:36
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f0:fc:a7:bf:b5:47:73:d1:28:76:5e:a7:2d:c7:de:30:8e:
9d:f0:c4:23:e7:ba:8c:62:c9:fb:60:b3:e8:3c:c0:40:63:8f:
34:8d:12:90:57:3c:63:74:48:5f:68:9f:1f:14:b6:c3:19:40:
d8:38:a4:ae:44:eb:4d:e8:d9:ca:50:c3:46:59:1c:0a:72:39:
5e:1c:63:a2:b8:35:27:47:ed:0c:54:7c:38:be:ee:8f:2f:4d:
e0:e9:e0:88:20:95:e4:b2:52:eb:ae:04:15:cd:8c:86:56:7b:
9b:f8:51:ca:6d:bc:54:7d:60:87:fa:f8:4b:42:45:00:d5:d5:
77:64:d3:9c:0d:7a:42:2e:e0:13:b3:99:d7:12:ba:8c:2f:c8:
cd:7a:89:af:29:e3:3a:e8:e6:7c:72:0e:3e:f9:14:8e:7b:bf:
a3:8d:bf:e5:fa:a9:b1:f7:72:b0:81:a5:12:c2:06:f3:fc:3e:
da:ca:55:2a:61:38:ba:6a:eb:5d:a5:43:ff:76:cc:c4:96:31:
81:6a:6d:1f:6a:2f:7e:9f:53:3d:23:78:bc:a3:9b:65:75:6d:
78:d9:ec:a7:66:9e:8a:f1:64:d3:d0:68:52:44:d8:8f:94:50:
3c:6e:e4:bb:be:28:8b:26:3a:b7:68:3f:f0:60:78:81:71:ff:
7e:c5:2d:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdP1+B1I8qrRRiCyevxWckQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjQyMzYwYTM5NzBhODA4MDE2ZmRmOGQ4ZGJhMzk2YzVh
MWQwMzQwHhcNMjUwNjA4MTQwMDM3WhcNMjUwNjA5MTQwMDM3WjAzMTEwLwYDVQQD
EygxN2E5ZTFlNjg0OGU0NGE5YjJhZmZkMDgzMGEyYTUwYjliOTYyZjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYy2ArYDZZuDtaWCxbJmlj+rdEXG
QgNvC4D41gfnDIXpdf5ruk45cLlmOXMC6z9PHD2Z3cbqWjbHagIdtTGizGMUt9JN
QN0Qms+uojTcNpv3S5QxPQ+jHA6v26sz248dlyMHYgUM9QOTXewlfhPy+yNmeBZc
kzBMoFBhUwlGUr6m0V0Yn8n4qnnOQlBKDkhG/VS25vsA6D9e8mMDXAf6JX/lilQr
ZXdkw+hRXdwBlVIPHSUx453yoLdwY2cOa/aGjMNvhI65NXUGG8ylzBFeThAxXZqL
8SYaqEwYr0cyeHAjoZPMNPln/ijo2MCstuGUlHJLPWgOg5WsN195mGGluQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBep4eaEjkSpsq/9CDCipQubli82MB8GA1UdIwQY
MBaAFPH0I2CjlwqAgBb9+Njbo5bFodA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMt
ZDRmMDhiZTA1MGQ1LzEvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMtZDRmMDhiZTA1MGQ1
LzEvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfD8p7+1
R3PRKHZepy3H3jCOnfDEI+e6jGLJ+2Cz6DzAQGOPNI0SkFc8Y3RIX2ifHxS2wxlA
2DikrkTrTejZylDDRlkcCnI5Xhxjorg1J0ftDFR8OL7ujy9N4OngiCCV5LJS664E
Fc2MhlZ7m/hRym28VH1gh/r4S0JFANXVd2TTnA16Qi7gE7OZ1xK6jC/IzXqJrynj
OujmfHIOPvkUjnu/o42/5fqpsfdysIGlEsIG8/w+2spVKmE4umrrXaVD/3bMxJYx
gWptH2ovfp9TPSN4vKObZXVteNnsp2aeivFk09BoUkTYj5RQPG7ku74oiyY6t2g/
8GB4gXH/fsUtJQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:19:50 2025 by rpki-client