Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json)
Hash identifier: +nhbuZmB/0qkB/JMezR4yg6j7nZVBYO3rDWcCI+pSXs=
Subject key identifier: 09:E3:03:34:D2:7A:6C:C3:CF:36:84:66:64:51:A0:3D:9D:D5:31:82
Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae
Certificate serial: 01974D7BBF10F8BC199426B433AD35EC4B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
Manifest number: 04FD
Signing time: Sun 08 Jun 2025 03:00:44 +0000
Manifest this update: Sun 08 Jun 2025 03:00:44 +0000
Manifest next update: Mon 09 Jun 2025 03:00:44 +0000
Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: 3P8SS38S932yrAiFg7CgrfLCnxSdRrVHBFjYp9XGWKI=)
2: yze2rcJ637RL8GZo48PGt4d8nY8.roa (hash: H8OFKVxMCjsZaNXr8DPY/I8jq0ZMaggP4bkjrXxk6OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:bf:10:f8:bc:19:94:26:b4:33:ad:35:ec:4b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae
Validity
Not Before: Jun 8 03:00:44 2025 GMT
Not After : Jun 9 03:00:44 2025 GMT
Subject: CN=09e30334d27a6cc3cf3684666451a03d9dd53182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:f2:e3:5e:3b:a6:01:49:3b:fa:66:b1:79:
97:3a:ac:49:13:90:f1:93:2a:44:8d:18:33:65:ff:
d9:1d:b4:68:a2:21:7f:79:a0:68:b8:96:c7:0b:9e:
84:b4:83:9a:9d:ef:01:07:a7:4d:e8:35:4e:28:d5:
c1:cf:f0:94:1f:a1:9c:66:cb:b7:95:5a:6d:93:58:
a4:ca:9f:8d:e1:28:60:89:5f:ba:c1:d3:3b:ba:26:
ea:dd:07:c6:4b:96:cb:5b:a3:85:11:85:29:7a:4a:
dd:32:fd:fb:70:5f:76:b8:5a:5b:6f:7a:77:1a:25:
1e:6c:84:b3:08:00:66:b2:cb:40:d1:0d:58:11:17:
39:cd:cb:d2:75:1f:3d:ca:b4:29:c5:f3:f8:ec:bd:
49:57:3c:2b:f9:f5:83:e2:a5:3e:8d:57:2f:d7:ce:
8b:db:53:8e:03:d4:b0:d9:fb:35:d5:62:17:81:8d:
b3:66:35:33:c6:7c:32:fe:31:b2:da:34:08:e0:96:
47:31:a5:67:20:98:02:03:d2:62:42:02:a4:54:2a:
4d:b1:8d:28:a8:88:6f:c1:0a:dc:bc:ca:6c:b1:bc:
a1:27:00:0b:3a:b8:2b:03:6d:7f:54:09:98:a4:4e:
bc:3f:7d:ac:71:a3:ae:fd:be:b0:07:dd:d9:ae:b6:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E3:03:34:D2:7A:6C:C3:CF:36:84:66:64:51:A0:3D:9D:D5:31:82
X509v3 Authority Key Identifier:
keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6e:0b:b1:7e:10:7d:88:34:84:e0:58:c0:2b:70:87:9b:24:
6b:20:05:15:9b:37:15:12:79:09:78:4b:6d:c5:83:0d:eb:b5:
49:07:43:90:77:c9:b7:d9:de:14:a2:2c:56:a3:69:0d:06:3b:
b2:a3:fe:6e:42:ee:28:9b:2c:cb:1e:13:76:fb:b9:0c:98:1e:
1e:78:7e:32:d1:c4:7b:8d:d7:35:65:5f:c6:73:7f:43:02:24:
5d:05:8c:a8:39:c3:2b:c2:70:3a:fb:00:0f:04:d1:1d:be:e8:
78:bc:f4:c6:06:4b:36:0d:72:22:e0:6d:3e:0f:47:67:45:99:
4a:15:7b:3b:fe:ec:d7:7c:39:ba:70:cb:38:db:37:8d:e6:91:
34:d5:d7:db:19:19:c4:91:7b:53:5d:e6:77:55:87:47:57:63:
bb:da:47:05:4f:ca:8b:1a:1d:75:a7:99:30:7f:ea:cc:49:6c:
c4:20:33:87:8d:48:ab:c8:44:7f:fe:7a:6a:b9:c3:3a:0b:9c:
9c:8f:bf:80:d0:13:87:51:26:5f:82:6b:2a:dd:84:00:c4:4f:
40:ff:77:bd:e1:d1:ac:ba:09:8f:50:a1:6c:a5:ff:68:75:3e:
ca:00:a6:ac:ec:a3:16:c7:2c:24:51:8f:d2:da:9f:42:91:03:
b4:a0:a2:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNe78Q+LwZlCa0M6017EthMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxODUyNzBlODMxOTNkMzI2OWY3Y2RlOWRhMDgwOGIxZWZm
NTUyYWUwHhcNMjUwNjA4MDMwMDQ0WhcNMjUwNjA5MDMwMDQ0WjAzMTEwLwYDVQQD
EygwOWUzMDMzNGQyN2E2Y2MzY2YzNjg0NjY2NDUxYTAzZDlkZDUzMTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYTy4147pgFJO/pmsXmXOqxJE5Dx
kypEjRgzZf/ZHbRooiF/eaBouJbHC56EtIOane8BB6dN6DVOKNXBz/CUH6GcZsu3
lVptk1ikyp+N4ShgiV+6wdM7uibq3QfGS5bLW6OFEYUpekrdMv37cF92uFpbb3p3
GiUebISzCABmsstA0Q1YERc5zcvSdR89yrQpxfP47L1JVzwr+fWD4qU+jVcv186L
21OOA9Sw2fs11WIXgY2zZjUzxnwy/jGy2jQI4JZHMaVnIJgCA9JiQgKkVCpNsY0o
qIhvwQrcvMpssbyhJwALOrgrA21/VAmYpE68P32scaOu/b6wB93ZrrZOowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnjAzTSemzDzzaEZmRRoD2d1TGCMB8GA1UdIwQY
MBaAFPGFJw6DGT0yaffN6doICLHv9VKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgt
ZmVmOTZlOTVhYmEwLzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgtZmVmOTZlOTVhYmEw
LzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ24LsX4Q
fYg0hOBYwCtwh5skayAFFZs3FRJ5CXhLbcWDDeu1SQdDkHfJt9neFKIsVqNpDQY7
sqP+bkLuKJssyx4Tdvu5DJgeHnh+MtHEe43XNWVfxnN/QwIkXQWMqDnDK8JwOvsA
DwTRHb7oeLz0xgZLNg1yIuBtPg9HZ0WZShV7O/7s13w5unDLONs3jeaRNNXX2xkZ
xJF7U13md1WHR1dju9pHBU/KixoddaeZMH/qzElsxCAzh41Iq8hEf/56arnDOguc
nI+/gNATh1EmX4JrKt2EAMRPQP93veHRrLoJj1ChbKX/aHU+ygCmrOyjFscsJFGP
0tqfQpEDtKCitA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:14:00 2025 by rpki-client