Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
File: 8NSBnmY6qUh7aggqd9IjfhuIAqE.mft (raw, json)
Hash identifier: NStfsN704Af6IlmAm8gPTlLZT8PM2c+4oy1v7E0GwLY=
Subject key identifier: BE:15:2B:50:BB:70:01:08:53:75:0C:12:6C:08:B8:C0:38:20:3F:7C
Authority key identifier: F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
Certificate issuer: /CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Certificate serial: 019753B4BA6575C7BDCC71FC38D7272F3D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
Manifest number: 0BE1
Signing time: Mon 09 Jun 2025 08:00:42 +0000
Manifest this update: Mon 09 Jun 2025 08:00:42 +0000
Manifest next update: Tue 10 Jun 2025 08:00:42 +0000
Files and hashes: 1: 8NSBnmY6qUh7aggqd9IjfhuIAqE.crl (hash: 3s1n/PhlUP5D4AwC6YnoZgCKVPpW063jTweclf7pb4s=)
2: Sy3V_IgTk4ktGswgBw55mEgUx3E.roa (hash: b8dOVW1U1sP2mqNqvtuzgrz8hyIMvAWuWDCj7ROCZgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:ba:65:75:c7:bd:cc:71:fc:38:d7:27:2f:3d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Validity
Not Before: Jun 9 08:00:42 2025 GMT
Not After : Jun 10 08:00:42 2025 GMT
Subject: CN=be152b50bb70010853750c126c08b8c038203f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:25:21:17:be:0a:93:51:12:27:8a:4a:d6:89:
94:1a:bb:02:1e:99:8d:68:55:8f:32:a5:2a:2f:10:
0d:a4:8e:8c:41:ed:60:d9:fc:8f:ef:cd:59:f6:87:
ee:d8:03:df:17:ed:75:29:ca:0a:7c:17:5a:01:fb:
7a:30:1f:b1:7d:ca:62:b8:c9:7f:5d:6b:a7:bd:74:
76:29:3c:58:92:95:ac:c4:18:85:ac:94:b4:9c:2b:
1e:c4:1e:7b:16:50:ef:30:fb:0d:26:f0:95:94:28:
48:ad:14:d2:52:bb:39:43:9e:bd:d6:ae:f6:60:2b:
ff:42:84:0b:2f:fa:4f:92:2a:8c:05:61:5c:39:33:
b1:b4:0b:2e:9d:1b:77:f6:59:5a:37:df:af:6c:b3:
c0:60:ba:5c:d3:f4:50:b5:5a:7c:08:58:6d:a6:0a:
d8:db:08:87:8d:e4:99:49:6c:5a:72:64:a8:e6:58:
ed:24:8e:3d:fc:32:2e:af:11:24:b4:c1:53:0b:6e:
70:70:f0:d5:bd:71:56:a2:d5:84:1a:74:9d:8e:87:
60:d4:bf:68:13:59:2e:d6:ab:1a:8c:82:32:54:7f:
ec:72:cd:89:6e:09:e6:e3:e4:2b:c5:86:5f:b4:eb:
b2:d8:f0:d7:d3:f2:67:88:dc:ca:6e:17:48:67:8a:
e9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:15:2B:50:BB:70:01:08:53:75:0C:12:6C:08:B8:C0:38:20:3F:7C
X509v3 Authority Key Identifier:
keyid:F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:fb:0e:87:2f:61:62:28:fd:60:80:3c:0d:69:bd:ad:6b:24:
a1:81:07:31:2d:35:62:61:bf:ca:93:d9:a2:bc:11:3e:e4:88:
c8:45:9d:2f:db:a2:53:f8:51:03:9e:d8:61:f8:db:78:05:f3:
7f:9f:7a:05:86:2b:e8:8b:eb:a7:60:65:e4:9c:59:32:38:ad:
21:70:dd:ff:ab:58:43:e1:8d:c1:21:0e:7d:fe:4b:70:65:6a:
83:55:8d:74:36:57:f4:d7:1b:79:ca:a6:76:9d:e1:6f:86:2e:
4a:f1:7d:76:ca:08:d3:c5:8d:a2:cf:75:2b:c9:8f:1f:2c:21:
22:1e:aa:7f:a2:72:1f:b9:e4:57:24:70:2a:e7:59:90:e5:d3:
82:1c:14:77:9e:d0:ee:17:e1:36:44:30:e6:85:e9:84:22:0d:
dd:06:a8:ef:84:e2:03:c4:fb:f3:15:fc:6d:16:4d:50:c1:b4:
dd:cc:17:5a:e7:62:53:f4:5e:4f:0a:b6:2d:b3:65:18:2d:bd:
19:f4:d7:a3:d4:f2:d6:d0:9d:5d:67:23:59:42:fe:9d:62:08:
c7:4e:f3:79:a2:66:b0:2a:fa:be:ea:d2:e4:dc:1d:62:65:47:
0b:f3:77:5c:4a:9f:3f:ab:03:1b:5e:03:0e:34:e0:47:29:9d:
b0:09:44:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTtLpldce9zHH8ONcnLz1PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDQ4MTllNjYzYWE5NDg3YjZhMDgyYTc3ZDIyMzdlMWI4
ODAyYTEwHhcNMjUwNjA5MDgwMDQyWhcNMjUwNjEwMDgwMDQyWjAzMTEwLwYDVQQD
EyhiZTE1MmI1MGJiNzAwMTA4NTM3NTBjMTI2YzA4YjhjMDM4MjAzZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SUhF74Kk1ESJ4pK1omUGrsCHpmN
aFWPMqUqLxANpI6MQe1g2fyP781Z9ofu2APfF+11KcoKfBdaAft6MB+xfcpiuMl/
XWunvXR2KTxYkpWsxBiFrJS0nCsexB57FlDvMPsNJvCVlChIrRTSUrs5Q5691q72
YCv/QoQLL/pPkiqMBWFcOTOxtAsunRt39llaN9+vbLPAYLpc0/RQtVp8CFhtpgrY
2wiHjeSZSWxacmSo5ljtJI49/DIurxEktMFTC25wcPDVvXFWotWEGnSdjodg1L9o
E1ku1qsajIIyVH/scs2Jbgnm4+QrxYZftOuy2PDX0/JniNzKbhdIZ4rp7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4VK1C7cAEIU3UMEmwIuMA4ID98MB8GA1UdIwQY
MBaAFPDUgZ5mOqlIe2oIKnfSI34biAKhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5TQm5tWTZxVWg3YWdncWQ5SWpmaHVJQXFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zNGQzOWEtNjJkMi00MGYyLTg0YWEt
OTcyNGNhZDZiYWVlLzEvOE5TQm5tWTZxVWg3YWdncWQ5SWpmaHVJQXFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8zNGQzOWEtNjJkMi00MGYyLTg0YWEtOTcyNGNhZDZiYWVl
LzEvOE5TQm5tWTZxVWg3YWdncWQ5SWpmaHVJQXFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqPsOhy9h
Yij9YIA8DWm9rWskoYEHMS01YmG/ypPZorwRPuSIyEWdL9uiU/hRA57YYfjbeAXz
f596BYYr6Ivrp2Bl5JxZMjitIXDd/6tYQ+GNwSEOff5LcGVqg1WNdDZX9Ncbecqm
dp3hb4YuSvF9dsoI08WNos91K8mPHywhIh6qf6JyH7nkVyRwKudZkOXTghwUd57Q
7hfhNkQw5oXphCIN3Qao74TiA8T78xX8bRZNUMG03cwXWudiU/ReTwq2LbNlGC29
GfTXo9Ty1tCdXWcjWUL+nWIIx07zeaJmsCr6vurS5NwdYmVHC/N3XEqfP6sDG14D
DjTgRymdsAlEuw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 09:30:45 2025 by rpki-client