Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier: f8d92+ympewwhYli0P2jieYnwf6ibbrpHQPA9fnjbe4=
Subject key identifier: 7E:DF:55:DA:F5:D3:6A:8E:73:AE:FB:6B:73:E9:28:FF:76:8D:73:FE
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial: 01974D0E0926D14DCD2A24B30475F0BCCE4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 01:00:54 +0000
Manifest this update: Sun 08 Jun 2025 01:00:54 +0000
Manifest next update: Mon 09 Jun 2025 01:00:54 +0000
Files and hashes: 1: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: sj6GcpiJN6yAcjYFeQams1xOanLXsamtt0txBvlhQo8=)
2: Uq0vloXHdFb2aIE_oUN66H2BMxU.roa (hash: 8OMhbaYnopF2Asv1tjCQ758nxv0+wParcC98envOi54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:09:26:d1:4d:cd:2a:24:b3:04:75:f0:bc:ce:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Validity
Not Before: Jun 8 01:00:54 2025 GMT
Not After : Jun 9 01:00:54 2025 GMT
Subject: CN=7edf55daf5d36a8e73aefb6b73e928ff768d73fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:f8:8f:2e:36:2f:db:3d:16:a1:0d:2d:07:
bf:cb:5d:52:37:4a:ae:85:b1:9b:c8:c6:a3:e7:ee:
a2:15:7d:2e:5d:27:4e:89:3e:34:32:57:e7:2e:30:
b5:ec:ed:ce:49:aa:15:a3:65:98:7f:d9:80:0d:67:
c2:28:26:dd:85:02:14:35:02:16:ab:f3:fa:80:e6:
ec:11:c9:80:f2:17:ed:2e:41:fb:ff:fe:00:7f:aa:
69:03:dd:93:4a:64:92:bc:f2:01:60:f5:b3:bb:b1:
65:a3:7a:07:61:f7:2d:76:39:7e:98:ea:ad:58:f8:
43:05:be:e4:f2:d5:77:58:37:d7:1f:24:fc:5d:32:
47:e2:9c:1b:bf:0a:0e:1f:76:2f:6a:60:17:b2:8c:
ab:9f:aa:67:53:d6:24:fa:89:ac:e4:a9:54:78:65:
2c:de:18:fa:37:7b:d9:2a:cb:1e:86:e5:aa:2d:91:
65:57:2e:e3:5a:4b:91:d3:50:1a:41:4c:af:7d:e5:
4f:d8:c3:4f:eb:44:0b:60:82:9e:4d:28:3c:57:15:
da:11:12:66:86:07:92:05:d7:9b:a6:c5:a8:3c:b8:
d0:33:60:65:2e:08:55:4f:91:d6:b4:de:ef:c3:30:
8b:ef:8d:c7:42:bf:24:31:13:59:fa:e3:9f:9a:af:
c6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DF:55:DA:F5:D3:6A:8E:73:AE:FB:6B:73:E9:28:FF:76:8D:73:FE
X509v3 Authority Key Identifier:
keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b7:7a:ae:1e:9b:a2:14:18:40:20:0e:92:5a:e3:0e:16:cb:
6c:35:f1:c1:80:29:4a:a9:d0:af:1c:b1:9b:da:b2:ea:f7:74:
5f:5e:37:6f:ff:c7:79:11:77:21:3b:ab:55:f1:5c:b7:54:44:
c9:65:4c:7b:63:79:b2:a4:e4:2f:96:fe:26:a6:68:41:cf:1b:
09:7a:9d:e9:7d:bc:33:61:ce:46:eb:8a:01:29:e1:fc:2a:ec:
7e:0c:e3:f6:97:69:28:8b:28:d4:d2:fa:53:52:fc:4f:ba:dd:
44:a6:72:7b:58:97:27:f9:a0:54:ec:e5:c5:0b:50:dd:e7:35:
98:e5:55:b1:49:ac:ea:50:01:0a:1f:e1:7d:33:f7:88:00:2e:
3e:e4:28:b3:92:5b:4e:71:04:b1:d9:49:81:22:b5:54:7d:7a:
e6:dd:de:42:8d:9f:bb:c7:ea:ac:23:23:7c:1b:d0:5a:c1:3e:
41:ef:18:48:1f:7a:bd:4e:34:9d:60:37:68:75:fa:b0:1e:47:
9c:98:44:56:d8:0d:1a:00:71:60:56:78:db:f2:d5:fe:5d:df:
8e:22:8a:5c:a6:36:ad:34:8c:e4:ad:f9:0c:89:40:e7:11:ef:
b4:67:3c:5c:49:af:fe:10:db:87:db:c8:a2:a7:24:3a:8e:6e:
50:87:81:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDgkm0U3NKiSzBHXwvM5PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmUyOGU4YWM3YWIxOGM3MzA3OWRlODRjODA5N2Q3ODJh
YWI2OWEwHhcNMjUwNjA4MDEwMDU0WhcNMjUwNjA5MDEwMDU0WjAzMTEwLwYDVQQD
Eyg3ZWRmNTVkYWY1ZDM2YThlNzNhZWZiNmI3M2U5MjhmZjc2OGQ3M2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/n4jy42L9s9FqENLQe/y11SN0qu
hbGbyMaj5+6iFX0uXSdOiT40MlfnLjC17O3OSaoVo2WYf9mADWfCKCbdhQIUNQIW
q/P6gObsEcmA8hftLkH7//4Af6ppA92TSmSSvPIBYPWzu7Flo3oHYfctdjl+mOqt
WPhDBb7k8tV3WDfXHyT8XTJH4pwbvwoOH3YvamAXsoyrn6pnU9Yk+oms5KlUeGUs
3hj6N3vZKssehuWqLZFlVy7jWkuR01AaQUyvfeVP2MNP60QLYIKeTSg8VxXaERJm
hgeSBdebpsWoPLjQM2BlLghVT5HWtN7vwzCL743HQr8kMRNZ+uOfmq/GPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7fVdr102qOc677a3PpKP92jXP+MB8GA1UdIwQY
MBaAFPAuKOiserGMcwed6EyAl9eCqraaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODkt
OWZmYjBlNDFjNGVmLzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jYTY4NmQtZjM1Zi00M2YzLWI4ODktOWZmYjBlNDFjNGVm
LzEvOEM0bzZLeDZzWXh6QjUzb1RJQ1gxNEtxdHBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7d6rh6b
ohQYQCAOklrjDhbLbDXxwYApSqnQrxyxm9qy6vd0X143b//HeRF3ITurVfFct1RE
yWVMe2N5sqTkL5b+JqZoQc8bCXqd6X28M2HORuuKASnh/Crsfgzj9pdpKIso1NL6
U1L8T7rdRKZye1iXJ/mgVOzlxQtQ3ec1mOVVsUms6lABCh/hfTP3iAAuPuQos5Jb
TnEEsdlJgSK1VH165t3eQo2fu8fqrCMjfBvQWsE+Qe8YSB96vU40nWA3aHX6sB5H
nJhEVtgNGgBxYFZ42/LV/l3fjiKKXKY2rTSM5K35DIlA5xHvtGc8XEmv/hDbh9vI
oqckOo5uUIeBtg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:18:03 2025 by rpki-client