Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
File: 8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json)
Hash identifier: 1JkHJhx3gxl5fZQuFm4iG7hxF0PjFE9raSXz4mL4ciM=
Subject key identifier: 4E:CE:2E:F0:C7:FD:B8:CB:B7:BE:94:11:A3:F0:92:0D:DB:06:6E:E1
Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Certificate serial: 01958B84741C815DA6F6E3CFC38A54FDAFAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
Manifest number: 1017
Signing time: Wed 12 Mar 2025 18:01:08 +0000
Manifest this update: Wed 12 Mar 2025 18:01:08 +0000
Manifest next update: Thu 13 Mar 2025 18:01:08 +0000
Files and hashes: 1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: vNZZBBjQQpS8vl0sRSoj5w2cagVOvKz1KmORG3r20CU=)
2: q-Co2Fge0yCMSGAUZ61yCAp-agg.roa (hash: Kkd9tz/x2Ysb/9fgNXffDi1aqzj4oQgrCbFcbQdhMNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:74:1c:81:5d:a6:f6:e3:cf:c3:8a:54:fd:af:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Validity
Not Before: Mar 12 18:01:08 2025 GMT
Not After : Mar 13 18:01:08 2025 GMT
Subject: CN=4ece2ef0c7fdb8cbb7be9411a3f0920ddb066ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e5:4d:71:02:ac:b2:eb:d8:35:fd:c8:43:d7:
ba:da:bd:c3:a5:fc:c2:81:7b:a3:28:34:1b:74:da:
4f:70:b7:4c:3a:4a:ec:b2:c2:87:4c:d7:2c:38:ac:
95:49:02:11:f2:06:a5:96:5a:e7:7e:f1:72:c0:ae:
f3:d2:70:3d:f9:e4:95:3e:92:81:37:78:78:89:06:
35:a8:cb:52:94:80:42:4e:1f:61:39:58:30:5a:f7:
68:95:64:19:54:18:b2:0c:85:46:21:8a:c5:38:af:
c0:90:bc:17:0b:e4:26:84:a6:cf:e6:dc:5c:be:a2:
27:b7:08:e4:0b:c6:5c:da:df:96:51:84:2d:15:1e:
fb:78:73:92:b0:69:66:fa:88:71:df:f8:73:0b:2c:
35:29:89:91:05:7f:b1:74:88:ab:d1:da:9c:07:3c:
23:2e:c3:d1:8f:21:d5:09:de:16:af:b5:3d:91:dd:
f8:2c:2f:6f:3e:b8:25:50:2a:6a:3f:48:7d:d2:78:
45:94:53:d2:6e:a8:ba:f2:99:0b:31:d9:70:2e:26:
3f:9f:37:a9:c3:ad:63:55:b1:80:46:f0:7c:a7:ba:
8a:44:2d:a2:5b:65:cd:1d:9d:c4:75:dd:0e:bb:99:
b5:83:79:04:9d:ed:8f:b9:64:23:1c:71:7a:d7:37:
6d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CE:2E:F0:C7:FD:B8:CB:B7:BE:94:11:A3:F0:92:0D:DB:06:6E:E1
X509v3 Authority Key Identifier:
keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e3:0f:24:d8:d0:c6:4c:65:5b:ed:50:c7:d0:d9:29:70:7e:
27:98:0b:9f:a3:23:dd:51:ec:90:c0:d1:d5:88:38:8c:2c:cb:
f0:ea:47:04:5c:a7:57:15:6d:d8:3d:73:3a:bf:fc:85:d7:d6:
11:7d:ac:07:ca:dc:65:fe:7b:0a:b0:3d:80:5e:b3:3f:3a:23:
49:85:19:ce:9d:cd:9c:3b:45:5f:81:c0:78:cc:8c:f5:79:07:
f7:98:1f:f9:dc:43:05:2a:7c:7a:59:34:f9:b6:ba:8f:a9:42:
e4:db:a2:83:7b:ab:1c:8e:70:b5:57:ec:c6:96:50:1a:46:6d:
6f:50:2a:59:20:a6:c5:66:25:7b:01:cd:0b:93:eb:97:fb:6e:
2a:7e:29:81:a9:a1:b8:3d:db:7b:34:08:92:79:ee:d3:07:68:
bf:63:66:cb:bf:50:fe:40:9c:9e:5e:db:bb:c3:83:62:3f:2e:
9d:65:0a:43:d3:5d:87:cd:34:ae:5e:07:0a:d2:2c:e3:b8:c4:
99:1f:f4:71:99:91:f5:36:02:6a:aa:62:67:ad:78:4d:13:ac:
ca:d3:b8:bb:12:a3:a4:8a:65:55:04:16:ff:2a:2c:45:87:e9:
ae:59:df:ba:02:46:ef:2f:b3:a0:20:ce:fa:ac:fb:59:78:e2:
74:ab:a4:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLhHQcgV2m9uPPw4pU/a+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZjNmMDQ5ZjNmMjg0NTFlM2UxYmY2OGI5NzRmZmRiYzhj
NDE0YzcwHhcNMjUwMzEyMTgwMTA4WhcNMjUwMzEzMTgwMTA4WjAzMTEwLwYDVQQD
Eyg0ZWNlMmVmMGM3ZmRiOGNiYjdiZTk0MTFhM2YwOTIwZGRiMDY2ZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOVNcQKssuvYNf3IQ9e62r3DpfzC
gXujKDQbdNpPcLdMOkrsssKHTNcsOKyVSQIR8galllrnfvFywK7z0nA9+eSVPpKB
N3h4iQY1qMtSlIBCTh9hOVgwWvdolWQZVBiyDIVGIYrFOK/AkLwXC+QmhKbP5txc
vqIntwjkC8Zc2t+WUYQtFR77eHOSsGlm+ohx3/hzCyw1KYmRBX+xdIir0dqcBzwj
LsPRjyHVCd4Wr7U9kd34LC9vPrglUCpqP0h90nhFlFPSbqi68pkLMdlwLiY/nzep
w61jVbGARvB8p7qKRC2iW2XNHZ3Edd0Ou5m1g3kEne2PuWQjHHF61zdtcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7OLvDH/bjLt76UEaPwkg3bBm7hMB8GA1UdIwQY
MBaAFPDz8Enz8oRR4+G/aLl0/9vIxBTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgt
NWU1MjNiYThjOWQ3LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgtNWU1MjNiYThjOWQ3
LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOMPJNjQ
xkxlW+1Qx9DZKXB+J5gLn6Mj3VHskMDR1Yg4jCzL8OpHBFynVxVt2D1zOr/8hdfW
EX2sB8rcZf57CrA9gF6zPzojSYUZzp3NnDtFX4HAeMyM9XkH95gf+dxDBSp8elk0
+ba6j6lC5Nuig3urHI5wtVfsxpZQGkZtb1AqWSCmxWYlewHNC5Prl/tuKn4pgamh
uD3bezQIknnu0wdov2Nmy79Q/kCcnl7bu8ODYj8unWUKQ9Ndh800rl4HCtIs47jE
mR/0cZmR9TYCaqpiZ614TROsytO4uxKjpIplVQQW/yosRYfprlnfugJG7y+zoCDO
+qz7WXjidKukoQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:37 2025 by rpki-client