Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
File: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft (raw, json)
Hash identifier: 54Srk3fL8CheHZ1msrilogs19CuZcb8CsAFi5v5mvho=
Subject key identifier: 02:91:D0:37:F0:D5:55:04:31:BE:34:A2:24:3B:BF:0E:FC:CE:8B:24
Authority key identifier: 8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
Certificate issuer: /CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Certificate serial: 0197500F3028B255B0174D06A3A4DA0AD413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
Manifest number: 1512
Signing time: Sun 08 Jun 2025 15:01:02 +0000
Manifest this update: Sun 08 Jun 2025 15:01:02 +0000
Manifest next update: Mon 09 Jun 2025 15:01:02 +0000
Files and hashes: 1: di6vtJn17ke553wiZoaxDGK1MLE.roa (hash: HpCMH1Ia0lvZ8f3O26OMSYPbId0TPu+1abwCSdtco9A=)
2: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl (hash: 3QYOYHJCWXbEWtFZpbCxm+/SEpkTG0fbFH+kzRWtmlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0f:30:28:b2:55:b0:17:4d:06:a3:a4:da:0a:d4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Validity
Not Before: Jun 8 15:01:02 2025 GMT
Not After : Jun 9 15:01:02 2025 GMT
Subject: CN=0291d037f0d5550431be34a2243bbf0efcce8b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ca:16:ca:7c:d1:72:15:33:b3:3f:47:97:40:
0a:68:e8:54:06:ca:9d:79:fd:09:55:c6:a8:0f:13:
c1:b5:9b:ee:da:37:ab:c2:12:af:80:01:ff:48:99:
b1:a3:24:bb:e4:06:47:c6:45:a9:38:7d:22:c8:00:
c7:eb:a9:3f:99:05:91:e0:37:e3:5a:19:57:cd:5f:
ef:f8:ca:1e:e6:99:eb:24:ef:c0:16:8b:a8:c2:de:
bd:37:26:b5:39:f9:5b:da:cb:ab:8c:7e:30:db:06:
eb:67:91:39:b5:9b:c6:9a:63:c3:85:29:c3:ce:a0:
f7:42:36:fd:1d:b3:cd:4e:52:8a:78:fa:de:8c:23:
91:f5:e1:60:66:95:7e:5c:15:2b:ed:68:df:11:83:
1e:3a:79:2e:b3:66:12:71:26:17:81:9d:d0:5f:06:
c9:1c:95:b4:92:0a:02:77:33:5f:98:8d:29:6b:ae:
81:57:e4:80:38:0b:ed:a6:16:f4:2b:10:48:4b:21:
99:5f:08:f2:35:6f:9f:2a:3c:1c:c2:d4:67:3f:ce:
11:07:3e:8a:38:86:0a:f9:50:33:b6:73:52:31:c8:
21:73:cd:ac:e4:03:91:14:68:ec:7e:7c:a4:71:40:
95:0c:d0:1a:6a:49:2c:98:15:b9:b1:09:ae:31:dc:
78:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:91:D0:37:F0:D5:55:04:31:BE:34:A2:24:3B:BF:0E:FC:CE:8B:24
X509v3 Authority Key Identifier:
keyid:8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:98:c8:fe:03:78:99:43:1f:c2:62:d9:4d:73:c2:89:f2:8b:
72:8f:25:a3:86:e8:54:03:16:86:ee:cb:16:7c:8f:e6:6b:de:
c4:d9:a6:1c:57:fa:52:11:fe:08:e6:9d:5b:48:4a:3f:cc:90:
69:81:eb:ac:e1:47:a3:ca:5f:c1:78:28:3f:5b:00:a3:45:c1:
e1:5a:91:20:56:e1:db:62:65:b3:b0:e5:d9:95:c9:f7:5d:05:
49:01:8f:bf:af:4f:b0:ad:25:56:40:13:f8:9b:8e:5a:c3:63:
d9:83:71:6b:98:2d:81:4f:45:39:3d:1a:b8:04:de:8e:49:d6:
f7:79:c1:30:00:0a:d3:c3:02:18:5f:af:85:a4:5b:fe:e9:e6:
c5:98:c2:c1:84:47:3e:b9:7a:f2:ec:48:ef:51:c3:78:c7:75:
09:a9:a9:d1:64:f3:e2:e4:01:cb:a9:1b:3d:aa:18:2a:3a:d2:
92:05:b9:10:db:07:8c:14:65:23:f7:2d:8d:c5:b3:8a:ba:ec:
7d:5a:0c:b2:05:15:ea:ad:89:6e:6c:aa:f3:a9:2e:22:86:b4:
6d:e9:d8:d7:8d:52:58:51:bb:7c:08:3b:17:4a:5e:59:c8:c3:
24:2d:36:8f:81:bd:c0:bc:8f:a2:57:f4:f9:cd:4e:a0:24:7d:
6e:17:30:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQDzAoslWwF00Go6TaCtQTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiY2JkYjUxZWI4MDIyNmY0MTQ3N2E3YmM1MGUwZjk2MTQ1
NWVkODMwHhcNMjUwNjA4MTUwMTAyWhcNMjUwNjA5MTUwMTAyWjAzMTEwLwYDVQQD
EygwMjkxZDAzN2YwZDU1NTA0MzFiZTM0YTIyNDNiYmYwZWZjY2U4YjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncoWynzRchUzsz9Hl0AKaOhUBsqd
ef0JVcaoDxPBtZvu2jerwhKvgAH/SJmxoyS75AZHxkWpOH0iyADH66k/mQWR4Dfj
WhlXzV/v+Moe5pnrJO/AFouowt69Nya1Oflb2surjH4w2wbrZ5E5tZvGmmPDhSnD
zqD3Qjb9HbPNTlKKePrejCOR9eFgZpV+XBUr7WjfEYMeOnkus2YScSYXgZ3QXwbJ
HJW0kgoCdzNfmI0pa66BV+SAOAvtphb0KxBISyGZXwjyNW+fKjwcwtRnP84RBz6K
OIYK+VAztnNSMcghc82s5AORFGjsfnykcUCVDNAaakksmBW5sQmuMdx4iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKR0Dfw1VUEMb40oiQ7vw78zoskMB8GA1UdIwQY
MBaAFIvL21HrgCJvQUd6e8UOD5YUVe2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81NjRmM2EtNTJkNi00ZDA5LTgxZTIt
ZWZhOTM5MWY3ZDllLzEvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy81NjRmM2EtNTJkNi00ZDA5LTgxZTItZWZhOTM5MWY3ZDll
LzEvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5jI/gN4
mUMfwmLZTXPCifKLco8lo4boVAMWhu7LFnyP5mvexNmmHFf6UhH+COadW0hKP8yQ
aYHrrOFHo8pfwXgoP1sAo0XB4VqRIFbh22Jls7Dl2ZXJ910FSQGPv69PsK0lVkAT
+JuOWsNj2YNxa5gtgU9FOT0auATejknW93nBMAAK08MCGF+vhaRb/unmxZjCwYRH
Prl68uxI71HDeMd1Camp0WTz4uQBy6kbPaoYKjrSkgW5ENsHjBRlI/ctjcWzirrs
fVoMsgUV6q2Jbmyq86kuIoa0benY141SWFG7fAg7F0peWcjDJC02j4G9wLyPolf0
+c1OoCR9bhcwxw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 22:52:11 2025 by rpki-client