Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
File: 8_su-07B6bb2xtC6JgdHqcPgrco.mft (raw, json)
Hash identifier: zX5GsIQcXC+keBi5/NSan/LA7kv0iB2ZghA78Vka9hI=
Subject key identifier: 9E:85:85:64:52:81:B8:E1:CB:DD:D2:30:18:03:B2:29:03:85:35:C9
Authority key identifier: F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
Certificate issuer: /CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Certificate serial: 019638773C2534E6F829529C251525E4816D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
Manifest number: 02CA
Signing time: Tue 15 Apr 2025 08:01:00 +0000
Manifest this update: Tue 15 Apr 2025 08:01:00 +0000
Manifest next update: Wed 16 Apr 2025 08:01:00 +0000
Files and hashes: 1: 8_su-07B6bb2xtC6JgdHqcPgrco.crl (hash: SeRemBe0fr7Nl4XbVZd2JcMDEUQYbe+AO586GVcxt6I=)
2: ZEIkHOpAjx_99PsiN5R21UlMSKc.roa (hash: vTffovFaT4NCjWWk8Fwv+MgUP11pdffCPeTnPWoxFwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:77:3c:25:34:e6:f8:29:52:9c:25:15:25:e4:81:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fb2efb4ec1e9b6f6c6d0ba260747a9c3e0adca
Validity
Not Before: Apr 15 08:01:00 2025 GMT
Not After : Apr 16 08:01:00 2025 GMT
Subject: CN=9e8585645281b8e1cbddd2301803b229038535c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:97:89:94:48:fb:cf:14:99:2a:45:e5:f9:b0:
67:61:7b:6a:8e:04:2e:c3:29:af:d0:5c:fb:ac:68:
fd:92:c4:a1:08:ce:09:b1:e0:fe:7d:19:23:ba:77:
54:6b:30:b6:b8:6a:0b:21:cc:56:1e:d1:30:dc:22:
90:59:b8:9b:5d:6e:74:4a:fb:bc:28:da:db:9f:bd:
25:b0:3a:94:81:20:5f:f5:ff:76:a9:56:b1:8e:0b:
b0:09:f0:c1:f9:c9:f0:8f:c4:12:26:c3:5f:dd:bf:
b8:bd:7e:fa:d9:75:6d:5a:0c:88:69:ff:d0:22:94:
9d:17:aa:55:77:64:8e:81:38:7a:f6:94:6b:72:71:
67:47:a9:cc:c9:06:e6:7e:d4:02:c5:9f:39:47:f5:
c3:27:00:c0:3c:2e:c7:ee:fb:18:38:3c:db:8d:fb:
6a:aa:e4:ac:7a:69:21:d7:b8:b6:cd:1f:22:ca:84:
2c:4f:b4:d1:2b:ec:3d:44:87:91:9d:83:ad:81:84:
0f:60:42:d7:fb:c3:d2:23:76:c8:a8:37:5e:0e:b1:
ec:4f:59:fb:da:3f:f4:81:b2:41:9b:ff:38:ad:71:
1e:1d:9f:60:36:60:8d:3d:d8:d1:21:79:5c:f5:51:
8a:bd:76:90:7d:61:1f:e4:49:e0:d7:79:8a:7c:69:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:85:85:64:52:81:B8:E1:CB:DD:D2:30:18:03:B2:29:03:85:35:C9
X509v3 Authority Key Identifier:
keyid:F3:FB:2E:FB:4E:C1:E9:B6:F6:C6:D0:BA:26:07:47:A9:C3:E0:AD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_su-07B6bb2xtC6JgdHqcPgrco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a8f742-ab9b-4b29-8ad4-6e912db02f5d/1/8_su-07B6bb2xtC6JgdHqcPgrco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:13:3f:4a:45:44:91:69:8e:3c:f1:12:ba:c3:e2:31:14:b3:
34:9a:67:b6:9d:df:3d:3d:84:d1:16:b8:55:76:f2:6d:93:55:
5e:13:c6:5e:79:c6:d0:cd:4c:c6:6f:ac:c8:32:98:1d:bc:a3:
1e:6a:08:4a:38:28:ed:22:fd:45:67:a6:73:d1:02:c3:00:46:
ce:62:e6:84:3b:6f:67:c4:f2:7b:f2:95:8a:9e:ff:1e:55:3a:
08:42:71:78:4a:ba:57:f1:7a:ec:20:8d:7d:79:ee:c8:d1:9e:
68:cf:d7:79:89:b4:d5:03:a2:32:e0:8e:2b:3f:6a:e4:cb:1c:
ce:a3:c7:7c:68:7a:cf:2f:9f:45:3e:48:54:f9:c1:88:e0:45:
d0:3b:2d:44:33:63:f1:ed:a3:13:83:85:ab:a7:db:15:ea:ec:
56:ac:76:1c:ef:b0:26:47:a2:8d:0e:57:af:a5:4a:89:16:ba:
12:b9:40:07:26:94:db:60:9c:0d:2b:41:14:e6:41:14:9d:ba:
9e:b0:77:13:67:b4:43:ee:cb:f0:21:e8:aa:2a:87:4c:d5:38:
67:2e:5b:94:9a:a4:73:6d:0b:0e:3d:1f:5b:3b:76:6a:c0:73:
1e:97:13:37:96:b7:76:20:7f:af:bc:dc:02:c3:6b:1c:01:fb:
46:a0:cc:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY4dzwlNOb4KVKcJRUl5IFtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZmIyZWZiNGVjMWU5YjZmNmM2ZDBiYTI2MDc0N2E5YzNl
MGFkY2EwHhcNMjUwNDE1MDgwMTAwWhcNMjUwNDE2MDgwMTAwWjAzMTEwLwYDVQQD
Eyg5ZTg1ODU2NDUyODFiOGUxY2JkZGQyMzAxODAzYjIyOTAzODUzNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25eJlEj7zxSZKkXl+bBnYXtqjgQu
wymv0Fz7rGj9ksShCM4JseD+fRkjundUazC2uGoLIcxWHtEw3CKQWbibXW50Svu8
KNrbn70lsDqUgSBf9f92qVaxjguwCfDB+cnwj8QSJsNf3b+4vX762XVtWgyIaf/Q
IpSdF6pVd2SOgTh69pRrcnFnR6nMyQbmftQCxZ85R/XDJwDAPC7H7vsYODzbjftq
quSsemkh17i2zR8iyoQsT7TRK+w9RIeRnYOtgYQPYELX+8PSI3bIqDdeDrHsT1n7
2j/0gbJBm/84rXEeHZ9gNmCNPdjRIXlc9VGKvXaQfWEf5Eng13mKfGkL0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6FhWRSgbjhy93SMBgDsikDhTXJMB8GA1UdIwQY
MBaAFPP7LvtOwem29sbQuiYHR6nD4K3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOF9zdS0wN0I2YmIyeHRDNkpnZEhxY1BncmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9hOGY3NDItYWI5Yi00YjI5LThhZDQt
NmU5MTJkYjAyZjVkLzEvOF9zdS0wN0I2YmIyeHRDNkpnZEhxY1BncmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9hOGY3NDItYWI5Yi00YjI5LThhZDQtNmU5MTJkYjAyZjVk
LzEvOF9zdS0wN0I2YmIyeHRDNkpnZEhxY1BncmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhM/SkVE
kWmOPPESusPiMRSzNJpntp3fPT2E0Ra4VXbybZNVXhPGXnnG0M1Mxm+syDKYHbyj
HmoISjgo7SL9RWemc9ECwwBGzmLmhDtvZ8Tye/KVip7/HlU6CEJxeEq6V/F67CCN
fXnuyNGeaM/XeYm01QOiMuCOKz9q5MsczqPHfGh6zy+fRT5IVPnBiOBF0DstRDNj
8e2jE4OFq6fbFersVqx2HO+wJkeijQ5Xr6VKiRa6ErlAByaU22CcDStBFOZBFJ26
nrB3E2e0Q+7L8CHoqiqHTNU4Zy5blJqkc20LDj0fWzt2asBzHpcTN5a3diB/r7zc
AsNrHAH7RqDMoA==
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:38:44 2025 by rpki-client