Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
File: 8KEScQQ06Frl_m-_Qedr3fk4GM8.mft (raw, json)
Hash identifier: isS/fyBM4/ZOUyJj1gIt3VgzyWgRtZuA52MWKp4GcJg=
Subject key identifier: 2B:CD:8D:9F:36:6F:DA:DB:7D:1C:5E:46:6D:B5:E7:26:46:73:F8:85
Authority key identifier: F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
Certificate issuer: /CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Certificate serial: 019644B1CF3E9EBA193D5E7A58084E6FDFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
Manifest number: 036E
Signing time: Thu 17 Apr 2025 17:00:25 +0000
Manifest this update: Thu 17 Apr 2025 17:00:25 +0000
Manifest next update: Fri 18 Apr 2025 17:00:25 +0000
Files and hashes: 1: 8KEScQQ06Frl_m-_Qedr3fk4GM8.crl (hash: zHPMBocVNK0MYkMwOTWIrW8/+iuHjaMn5xnlNkbdNzA=)
2: QxzsJBZ0KnjdWggXNkiPE3mxTiE.roa (hash: wp71B9vMq7Np21xWaUokwt4Wn7Ga2Zz2FhWmCQz4Lj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b1:cf:3e:9e:ba:19:3d:5e:7a:58:08:4e:6f:df:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Validity
Not Before: Apr 17 17:00:25 2025 GMT
Not After : Apr 18 17:00:25 2025 GMT
Subject: CN=2bcd8d9f366fdadb7d1c5e466db5e7264673f885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:2f:c2:ae:30:b0:ea:95:36:29:c8:1b:c9:
f8:19:db:ee:49:46:d8:16:91:fb:d7:04:0a:6d:08:
a7:1b:58:0f:a1:21:f1:8d:46:51:4c:d3:0e:55:28:
b0:a1:ed:83:23:7f:c0:4e:6c:27:96:95:f1:f7:0b:
5f:3c:d2:cb:de:6e:0e:9b:d2:d4:ce:81:73:b1:aa:
74:44:47:47:e3:cf:de:39:e0:75:2a:7c:62:55:dd:
38:49:96:f3:3b:55:01:63:96:44:ec:e0:96:9f:26:
5b:3e:82:75:b9:25:4c:96:dc:d3:7b:a5:b3:98:9a:
9e:fa:07:94:95:5f:73:2f:cb:7d:90:19:a2:96:03:
c1:64:64:2b:71:fd:6f:5d:37:61:9d:6c:c5:f1:d8:
70:ba:51:52:5d:37:78:d7:84:2a:a3:bc:71:51:26:
51:7e:fb:15:d2:00:4d:31:b0:2e:fc:54:99:80:38:
06:71:47:30:c7:65:a3:18:a0:f2:ca:46:47:7d:30:
98:62:e8:e7:8d:f6:c2:78:fc:14:7a:ac:06:87:82:
1a:d9:88:e6:90:92:9d:d7:c5:e8:0e:11:8b:99:c7:
6b:f6:31:0d:8c:29:0c:90:7d:f7:91:7f:f0:ad:f4:
12:a9:e3:e6:b5:db:a3:e7:31:55:f5:2d:8a:74:1f:
42:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CD:8D:9F:36:6F:DA:DB:7D:1C:5E:46:6D:B5:E7:26:46:73:F8:85
X509v3 Authority Key Identifier:
keyid:F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:48:a2:3c:d0:71:4e:1d:2b:84:ad:89:7a:66:bf:28:23:1e:
1b:ac:d0:60:3e:a1:a0:6f:d0:55:c3:6a:0f:4c:fe:c6:07:3f:
96:53:9d:d4:3f:2d:71:50:35:0c:88:25:51:90:47:79:2b:ae:
07:4c:d6:d1:a5:59:9f:83:24:5f:82:5f:05:3d:ff:e8:e3:01:
12:10:32:30:c9:53:f8:b5:0e:86:5f:a5:6c:e4:a6:dd:dc:68:
70:f5:53:fc:1e:d1:0e:fa:ec:01:a0:eb:c2:8c:05:b5:c7:ee:
ae:fa:2a:a6:75:d7:99:b1:b2:bf:24:f7:82:9c:f6:a8:44:8f:
75:1f:2d:f0:bb:5b:04:38:18:43:9a:2c:f2:5a:22:90:db:db:
e8:15:d1:e5:92:05:25:3f:5d:6b:c6:41:d5:10:c1:db:75:47:
66:bc:44:c2:8e:ed:f5:96:9d:f9:64:1b:02:6c:72:03:b8:41:
99:8a:58:08:36:c8:65:c0:f5:bb:d4:1a:52:56:2d:40:ab:2b:
0e:f8:02:2e:cf:0c:69:f8:08:f3:a2:8b:29:45:ee:70:17:e4:
66:45:4c:32:76:17:b9:71:f7:dd:3d:3f:b6:fc:da:fe:16:ab:
be:ae:8a:99:72:7f:86:5a:fa:23:46:93:91:73:8c:3b:8a:9c:
eb:47:c2:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEsc8+nroZPV56WAhOb9/gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYTExMjcxMDQzNGU4NWFlNWZlNmZiZjQxZTc2YmRkZjkz
ODE4Y2YwHhcNMjUwNDE3MTcwMDI1WhcNMjUwNDE4MTcwMDI1WjAzMTEwLwYDVQQD
EygyYmNkOGQ5ZjM2NmZkYWRiN2QxYzVlNDY2ZGI1ZTcyNjQ2NzNmODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHovwq4wsOqVNinIG8n4GdvuSUbY
FpH71wQKbQinG1gPoSHxjUZRTNMOVSiwoe2DI3/ATmwnlpXx9wtfPNLL3m4Om9LU
zoFzsap0REdH48/eOeB1KnxiVd04SZbzO1UBY5ZE7OCWnyZbPoJ1uSVMltzTe6Wz
mJqe+geUlV9zL8t9kBmilgPBZGQrcf1vXTdhnWzF8dhwulFSXTd414Qqo7xxUSZR
fvsV0gBNMbAu/FSZgDgGcUcwx2WjGKDyykZHfTCYYujnjfbCePwUeqwGh4Ia2Yjm
kJKd18XoDhGLmcdr9jENjCkMkH33kX/wrfQSqePmtduj5zFV9S2KdB9CVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvNjZ82b9rbfRxeRm215yZGc/iFMB8GA1UdIwQY
MBaAFPChEnEENOha5f5vv0Hna935OBjPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEtFU2NRUTA2RnJsX20tX1FlZHIzZms0R004LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yOTRhODEtNTIzNy00YmYzLWEwNWIt
YTg4YTRkMDk0YWYwLzEvOEtFU2NRUTA2RnJsX20tX1FlZHIzZms0R004Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8yOTRhODEtNTIzNy00YmYzLWEwNWItYTg4YTRkMDk0YWYw
LzEvOEtFU2NRUTA2RnJsX20tX1FlZHIzZms0R004LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkiiPNBx
Th0rhK2Jema/KCMeG6zQYD6hoG/QVcNqD0z+xgc/llOd1D8tcVA1DIglUZBHeSuu
B0zW0aVZn4MkX4JfBT3/6OMBEhAyMMlT+LUOhl+lbOSm3dxocPVT/B7RDvrsAaDr
wowFtcfurvoqpnXXmbGyvyT3gpz2qESPdR8t8LtbBDgYQ5os8loikNvb6BXR5ZIF
JT9da8ZB1RDB23VHZrxEwo7t9Zad+WQbAmxyA7hBmYpYCDbIZcD1u9QaUlYtQKsr
DvgCLs8MafgI86KLKUXucBfkZkVMMnYXuXH33T0/tvza/harvq6KmXJ/hlr6I0aT
kXOMO4qc60fC0w==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:49 2025 by rpki-client