Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
File: jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json)
Hash identifier: DQM1dmFPj2Tgj2lbvSFrGIAhrX8AszZjrL7bS7jF4iM=
Subject key identifier: 0B:B4:33:2C:2A:E3:DA:37:8B:ED:91:0E:D1:E0:2D:C3:D5:ED:72:FD
Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
Certificate issuer: /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Certificate serial: 01958FCF4713D2E0B996A6CD6AF7C98FD2E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
Manifest number: 11D7
Signing time: Thu 13 Mar 2025 14:01:20 +0000
Manifest this update: Thu 13 Mar 2025 14:01:20 +0000
Manifest next update: Fri 14 Mar 2025 14:01:20 +0000
Files and hashes: 1: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: eMRDCey+YY0P3BO+wLAIiFi7ImFZr6g7ZTgoKsayFa4=)
2: mW-GeUTpPcmN505mq7SBylbmL1k.roa (hash: EwfFRwG/wTzHhkN3Xr0yb1fHBsnFoko8PwS4OTwxOW8=)
3: uEHKHGYpS2KvUkesU8pcDof-YA8.roa (hash: 0K5xoA85UHkcMnN3W22ATj/hyZFWzrQ7V/CmhuM4D7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:cf:47:13:d2:e0:b9:96:a6:cd:6a:f7:c9:8f:d2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Validity
Not Before: Mar 13 14:01:20 2025 GMT
Not After : Mar 14 14:01:20 2025 GMT
Subject: CN=0bb4332c2ae3da378bed910ed1e02dc3d5ed72fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0d:34:63:bb:27:d0:5a:10:ee:80:09:8f:ea:
17:30:0a:5f:30:45:f1:93:a5:30:b1:f1:f2:82:85:
c7:24:6e:50:90:74:a7:d5:de:b7:18:d9:19:a3:af:
92:b2:ae:db:b2:16:0f:74:66:52:fc:62:a6:92:c3:
eb:af:4f:86:a4:1f:0e:0c:a9:6c:60:84:27:51:ec:
9b:77:0a:4f:9c:95:fd:02:aa:ad:28:6b:28:7a:02:
87:51:1f:cd:31:08:82:24:9a:eb:ed:fd:67:70:56:
4a:45:c7:4a:1f:bc:1b:a0:76:19:61:51:fb:db:30:
8d:47:b2:42:c9:25:51:de:17:89:a9:d9:10:e8:5e:
d4:ad:ec:93:4a:6a:b1:80:8f:4c:7d:99:aa:20:8e:
b9:4d:dd:49:75:40:8b:68:f4:98:ed:d3:70:a4:35:
56:33:5a:81:6d:16:9d:78:5e:7e:fe:18:40:42:d2:
60:5c:41:83:5f:44:d9:3c:bc:d1:a1:07:a0:85:a6:
5b:e5:5d:9a:b7:98:48:b0:ba:92:e6:62:f2:04:4f:
0a:68:45:02:43:a4:7c:5f:72:fa:5a:5e:6e:4e:ac:
d3:d9:78:ca:02:fd:e0:3e:5b:c9:ce:f7:45:d3:b1:
3f:7b:4c:19:ff:bd:e0:74:da:b3:2f:2c:29:21:f8:
e2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B4:33:2C:2A:E3:DA:37:8B:ED:91:0E:D1:E0:2D:C3:D5:ED:72:FD
X509v3 Authority Key Identifier:
keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:de:f1:6d:2b:22:3c:a3:5b:33:bd:ec:df:30:ba:ae:2e:cc:
11:28:83:cd:f0:37:46:a1:19:11:13:20:f3:c8:7c:86:63:c1:
2e:ed:9f:03:7d:8f:36:68:10:46:23:6b:24:97:5d:b6:35:7b:
4e:54:07:47:76:49:84:a5:cb:2f:05:7a:be:71:01:b1:49:01:
14:95:3a:4c:5e:a0:a3:6d:89:ac:7c:fe:e4:90:22:5a:bd:15:
45:91:c0:26:6b:b6:16:18:24:b7:ad:e5:ff:83:ca:08:4f:71:
73:05:1f:16:6d:a1:e8:45:78:58:ed:df:8c:5f:44:52:ba:28:
3c:9d:80:c7:0c:3a:31:42:bc:b4:98:3a:8d:fb:a2:b1:18:88:
9a:91:85:de:0b:5e:67:76:be:4e:74:d4:fb:69:c5:b3:39:7b:
c6:ff:1a:b5:be:20:8d:9a:22:f3:2f:17:00:40:b8:5e:f5:d8:
c5:17:1d:a6:57:af:b4:7d:f3:54:5f:54:28:18:1e:68:ab:e8:
97:2c:0f:23:37:b0:e2:43:91:af:1d:75:3f:cd:0a:01:5d:ed:
ae:b0:d2:45:57:8a:ff:94:6f:e3:65:01:98:c1:bd:93:e8:fe:
7d:50:54:7d:95:1e:61:82:44:98:5a:3a:b7:2f:39:1d:49:9f:
9a:3d:37:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPz0cT0uC5lqbNavfJj9LoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNGYzZjhiYTdkY2Y1ODk0ZjJmNjExZDdkZmFiNTNkNGE2
M2MwYTkwHhcNMjUwMzEzMTQwMTIwWhcNMjUwMzE0MTQwMTIwWjAzMTEwLwYDVQQD
EygwYmI0MzMyYzJhZTNkYTM3OGJlZDkxMGVkMWUwMmRjM2Q1ZWQ3MmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA00Y7sn0FoQ7oAJj+oXMApfMEXx
k6UwsfHygoXHJG5QkHSn1d63GNkZo6+Ssq7bshYPdGZS/GKmksPrr0+GpB8ODKls
YIQnUeybdwpPnJX9AqqtKGsoegKHUR/NMQiCJJrr7f1ncFZKRcdKH7wboHYZYVH7
2zCNR7JCySVR3heJqdkQ6F7UreyTSmqxgI9MfZmqII65Td1JdUCLaPSY7dNwpDVW
M1qBbRadeF5+/hhAQtJgXEGDX0TZPLzRoQeghaZb5V2at5hIsLqS5mLyBE8KaEUC
Q6R8X3L6Wl5uTqzT2XjKAv3gPlvJzvdF07E/e0wZ/73gdNqzLywpIfjinQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAu0Mywq49o3i+2RDtHgLcPV7XL9MB8GA1UdIwQY
MBaAFI1PP4un3PWJTy9hHX36tT1KY8CpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81NTIyOWMtZTI4Mi00YTg1LWI3YTQt
OGFjYmZlYTJlY2ZhLzEvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy81NTIyOWMtZTI4Mi00YTg1LWI3YTQtOGFjYmZlYTJlY2Zh
LzEvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsd7xbSsi
PKNbM73s3zC6ri7MESiDzfA3RqEZERMg88h8hmPBLu2fA32PNmgQRiNrJJddtjV7
TlQHR3ZJhKXLLwV6vnEBsUkBFJU6TF6go22JrHz+5JAiWr0VRZHAJmu2Fhgkt63l
/4PKCE9xcwUfFm2h6EV4WO3fjF9EUrooPJ2Axww6MUK8tJg6jfuisRiImpGF3gte
Z3a+TnTU+2nFszl7xv8atb4gjZoi8y8XAEC4XvXYxRcdplevtH3zVF9UKBgeaKvo
lywPIzew4kORrx11P80KAV3trrDSRVeK/5Rv42UBmMG9k+j+fVBUfZUeYYJEmFo6
ty85HUmfmj03Nw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:41:57 2025 by rpki-client