Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
File: 8JLOTWiFNFSE6Zp312Fm_HICIDM.mft (raw, json)
Hash identifier: dZfaXoDnx07DFgiQ7ARk3JAm+wAV1Gf4q8h84YHipKk=
Subject key identifier: 6C:AA:30:34:F4:CC:F4:69:F2:FE:2B:EC:69:A9:90:B0:55:9A:DE:67
Authority key identifier: F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33
Certificate issuer: /CN=f092ce4d6885345484e99a77d76166fc72022033
Certificate serial: 01965801B04B0C1F8F5B1B1FCA5FEFADBFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 11:00:27 +0000
Manifest this update: Mon 21 Apr 2025 11:00:27 +0000
Manifest next update: Tue 22 Apr 2025 11:00:27 +0000
Files and hashes: 1: 8JLOTWiFNFSE6Zp312Fm_HICIDM.crl (hash: tuMCheCyNwalDLzFqItVPHX8t+CNxhvBMpmEovR+HTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:b0:4b:0c:1f:8f:5b:1b:1f:ca:5f:ef:ad:bf:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f092ce4d6885345484e99a77d76166fc72022033
Validity
Not Before: Apr 21 11:00:27 2025 GMT
Not After : Apr 22 11:00:27 2025 GMT
Subject: CN=6caa3034f4ccf469f2fe2bec69a990b0559ade67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:35:6b:f7:93:22:ff:5c:b0:48:a2:8f:1e:
72:92:a7:38:5a:2b:af:39:09:74:5c:d1:d3:07:63:
3f:25:72:78:75:a4:f2:9e:82:06:48:56:fb:5c:77:
37:5c:61:35:ee:e6:e3:79:05:1f:14:84:1d:c1:42:
4c:0a:b6:7c:85:a5:1d:df:1a:89:d9:bb:1c:e6:e1:
51:1f:ad:9d:86:39:b4:ee:a5:53:06:1b:2e:19:7c:
1a:ae:3d:5f:bb:9d:c2:16:8f:51:4d:0c:bd:e2:41:
42:5c:1d:d6:42:ce:55:b6:35:f1:6c:6f:72:59:a8:
4f:1f:cc:7e:79:b7:84:c6:4c:62:00:50:d2:7e:1a:
4d:cd:49:fe:d2:01:e5:12:3b:ad:4c:f6:01:89:9f:
60:17:c5:41:f1:b3:03:fd:f1:d1:10:45:0e:05:6e:
79:81:e4:d7:d0:4f:c9:51:d3:e3:62:62:aa:f4:5f:
89:41:a0:d6:74:14:45:54:a4:43:bc:26:b7:94:8e:
c8:50:90:b2:6f:62:12:5a:35:ee:74:2f:76:0f:94:
69:88:a0:d5:d5:ab:2d:61:6e:36:b3:c4:22:e7:54:
2d:41:1f:8b:31:d5:87:7d:e6:a0:78:7b:c9:f5:96:
05:5e:39:d4:56:b9:14:1b:12:cf:66:05:dc:55:72:
71:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AA:30:34:F4:CC:F4:69:F2:FE:2B:EC:69:A9:90:B0:55:9A:DE:67
X509v3 Authority Key Identifier:
keyid:F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:13:96:cf:06:c0:90:49:4d:24:2f:ca:27:88:b4:a1:c3:ef:
41:f4:3a:9b:c9:9d:34:c3:18:1b:35:0b:e6:38:f9:f7:0f:31:
0a:79:fc:38:f4:f7:c6:d7:e6:84:67:41:80:6e:98:ab:61:e3:
9b:ed:4f:14:9a:36:5d:87:48:3b:30:8a:ae:95:4a:71:83:e6:
76:a7:69:91:c9:31:c9:74:25:ab:0b:53:ae:37:79:a4:6b:4a:
b0:e9:85:6e:1d:cb:a2:28:b0:6d:92:be:a8:89:40:27:5e:45:
e3:a2:f5:00:97:ad:dc:fc:f9:04:96:0d:f3:92:e5:39:92:fa:
77:61:bb:96:3c:f5:df:51:7a:50:ab:a6:f1:69:0f:74:92:76:
82:1f:fb:b7:48:74:02:ac:07:2c:5f:f8:b5:19:5a:cb:59:bf:
15:7c:7b:1a:43:a0:42:83:84:b5:a5:58:8a:a5:d1:1c:77:27:
eb:55:d2:8e:5d:ec:a6:8a:48:c3:1d:af:d9:14:88:ac:62:98:
f4:5a:bc:4a:11:23:7f:73:81:fe:c0:1a:5c:2b:1f:b4:77:c0:
8a:55:a6:7c:a3:c8:09:55:2b:7b:a3:c5:51:e6:20:30:81:64:
d6:8e:5f:ad:88:20:e4:eb:bf:18:58:cf:0c:92:47:8a:1b:9c:
01:71:dc:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYAbBLDB+PWxsfyl/vrb/wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOTJjZTRkNjg4NTM0NTQ4NGU5OWE3N2Q3NjE2NmZjNzIw
MjIwMzMwHhcNMjUwNDIxMTEwMDI3WhcNMjUwNDIyMTEwMDI3WjAzMTEwLwYDVQQD
Eyg2Y2FhMzAzNGY0Y2NmNDY5ZjJmZTJiZWM2OWE5OTBiMDU1OWFkZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDk1a/eTIv9csEiijx5ykqc4Wiuv
OQl0XNHTB2M/JXJ4daTynoIGSFb7XHc3XGE17ubjeQUfFIQdwUJMCrZ8haUd3xqJ
2bsc5uFRH62dhjm07qVTBhsuGXwarj1fu53CFo9RTQy94kFCXB3WQs5VtjXxbG9y
WahPH8x+ebeExkxiAFDSfhpNzUn+0gHlEjutTPYBiZ9gF8VB8bMD/fHREEUOBW55
geTX0E/JUdPjYmKq9F+JQaDWdBRFVKRDvCa3lI7IUJCyb2ISWjXudC92D5RpiKDV
1astYW42s8Qi51QtQR+LMdWHfeageHvJ9ZYFXjnUVrkUGxLPZgXcVXJxowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyqMDT0zPRp8v4r7GmpkLBVmt5nMB8GA1UdIwQY
MBaAFPCSzk1ohTRUhOmad9dhZvxyAiAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEpMT1RXaUZORlNFNlpwMzEyRm1fSElDSURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kMDIyMTgtNWRmOS00M2ZkLWJlZWMt
MDMxNTk2MTEyNDgwLzEvOEpMT1RXaUZORlNFNlpwMzEyRm1fSElDSURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9kMDIyMTgtNWRmOS00M2ZkLWJlZWMtMDMxNTk2MTEyNDgw
LzEvOEpMT1RXaUZORlNFNlpwMzEyRm1fSElDSURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxOWzwbA
kElNJC/KJ4i0ocPvQfQ6m8mdNMMYGzUL5jj59w8xCnn8OPT3xtfmhGdBgG6Yq2Hj
m+1PFJo2XYdIOzCKrpVKcYPmdqdpkckxyXQlqwtTrjd5pGtKsOmFbh3LoiiwbZK+
qIlAJ15F46L1AJet3Pz5BJYN85LlOZL6d2G7ljz131F6UKum8WkPdJJ2gh/7t0h0
AqwHLF/4tRlay1m/FXx7GkOgQoOEtaVYiqXRHHcn61XSjl3spopIwx2v2RSIrGKY
9Fq8ShEjf3OB/sAaXCsftHfAilWmfKPICVUre6PFUeYgMIFk1o5frYgg5Ou/GFjP
DJJHihucAXHcMQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:10:05 2025 by rpki-client