Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
File: c8_hHopwk73JW8AeINtDduIqpRY.mft (raw, json)
Hash identifier: +ajheHtiRbY9Qs01hv/NS9aEEwcrWn6yHL4UKhPLxNc=
Subject key identifier: 47:82:9B:49:27:15:DC:ED:5D:08:83:8F:5D:F7:EC:9E:82:0B:78:4E
Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
Certificate issuer: /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Certificate serial: 0197432F78B2630431CD4BC988543BAE877E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
Manifest number: 028C
Signing time: Fri 06 Jun 2025 03:01:13 +0000
Manifest this update: Fri 06 Jun 2025 03:01:13 +0000
Manifest next update: Sat 07 Jun 2025 03:01:13 +0000
Files and hashes: 1: SVFNCXAgs-J1Ur0M2wuVWaTBzQI.roa (hash: rGZg6LxxY7ku4GUoLGf94rOsH2eH6eg3rUYHF4vWHMk=)
2: c8_hHopwk73JW8AeINtDduIqpRY.crl (hash: 0y6PwZhT4MYaqqi10lv4fat6ACUcl9djI4fWMWZbi/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:2f:78:b2:63:04:31:cd:4b:c9:88:54:3b:ae:87:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Validity
Not Before: Jun 6 03:01:13 2025 GMT
Not After : Jun 7 03:01:13 2025 GMT
Subject: CN=47829b492715dced5d08838f5df7ec9e820b784e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:e6:f0:e2:88:3e:f5:18:65:4b:e7:ba:95:
f1:e8:ef:9c:c3:3b:42:eb:3b:25:f7:f1:c3:b1:ba:
c4:f2:b4:38:b6:8c:15:da:85:eb:ca:f0:80:47:64:
a9:d1:6c:4c:bf:d7:96:a0:4d:5e:19:2d:b4:92:a5:
9a:5b:07:00:42:b6:f3:d7:eb:9e:73:a2:25:01:2b:
4e:4f:9c:24:6f:d6:05:d7:36:4d:a7:1a:b7:7d:54:
50:82:e8:17:34:d4:cf:aa:ed:6b:68:a9:93:26:1b:
a3:76:8e:fa:c0:f1:13:e1:2b:1d:f1:ee:5f:b2:9b:
70:9c:9b:fc:5a:35:98:65:23:e5:cc:ab:fb:11:14:
a9:85:18:23:60:04:b8:14:e7:bc:f3:7a:74:a3:b5:
80:29:19:93:a9:bc:39:56:3b:1c:1d:a3:8a:0e:ed:
75:0e:6f:97:69:c7:c8:4f:3d:d6:51:7d:6b:82:34:
95:45:c7:cb:48:8f:7f:92:d9:c6:54:87:03:43:72:
25:9e:1b:d5:d8:f2:cf:cf:ff:b3:7e:c6:60:d5:c3:
52:aa:e1:42:54:45:29:31:5b:cd:3d:ae:ec:c6:9a:
88:e2:97:6a:08:74:1d:5e:09:3c:81:b5:cc:da:09:
85:4c:fb:d9:4f:0c:8f:ed:17:2d:02:8e:d7:ca:c4:
48:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:82:9B:49:27:15:DC:ED:5D:08:83:8F:5D:F7:EC:9E:82:0B:78:4E
X509v3 Authority Key Identifier:
keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bb:0f:b7:bc:2c:20:1e:7e:4c:63:35:90:32:71:26:89:1a:
d5:92:dd:57:65:18:52:51:ad:6a:f0:36:85:d9:ec:3e:17:68:
62:8e:ce:50:53:91:11:1a:93:d6:7c:d3:b2:74:32:b5:58:30:
fb:50:e7:c6:e2:9d:db:2e:a6:bc:96:f8:86:f5:be:9a:1e:28:
62:5a:cf:d9:83:bb:fc:0a:c4:72:71:1e:42:88:08:a4:7d:96:
60:3d:55:b9:af:bb:e3:d6:2f:63:c1:68:ea:a1:ac:23:bb:5b:
3f:97:1d:79:39:9c:a3:33:da:8a:7d:c6:76:55:a2:b4:d9:c1:
a4:42:69:0c:da:97:cc:32:72:57:49:ce:01:db:cd:c3:b6:1a:
30:ce:94:cd:22:fb:f7:ab:09:8a:d7:96:9c:74:af:f7:0f:1e:
96:b6:d4:a6:57:4a:3c:8a:d5:41:a0:ce:74:bc:8b:4a:6e:83:
85:d4:1e:89:32:53:63:66:8f:e7:99:30:e7:a7:01:5d:38:05:
27:85:12:d0:a3:ac:4b:e0:52:eb:d8:2e:8e:f8:08:44:3c:5d:
09:db:cb:82:88:79:da:b8:f2:13:24:9f:c6:83:f5:73:be:eb:
41:4b:d5:61:0a:83:21:67:80:b0:4a:ec:cb:64:6e:0a:dd:a2:
be:1b:08:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdDL3iyYwQxzUvJiFQ7rod+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczY2ZlMTFlOGE3MDkzYmRjOTViYzAxZTIwZGI0Mzc2ZTIy
YWE1MTYwHhcNMjUwNjA2MDMwMTEzWhcNMjUwNjA3MDMwMTEzWjAzMTEwLwYDVQQD
Eyg0NzgyOWI0OTI3MTVkY2VkNWQwODgzOGY1ZGY3ZWM5ZTgyMGI3ODRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1czm8OKIPvUYZUvnupXx6O+cwztC
6zsl9/HDsbrE8rQ4towV2oXryvCAR2Sp0WxMv9eWoE1eGS20kqWaWwcAQrbz1+ue
c6IlAStOT5wkb9YF1zZNpxq3fVRQgugXNNTPqu1raKmTJhujdo76wPET4Ssd8e5f
sptwnJv8WjWYZSPlzKv7ERSphRgjYAS4FOe883p0o7WAKRmTqbw5VjscHaOKDu11
Dm+XacfITz3WUX1rgjSVRcfLSI9/ktnGVIcDQ3IlnhvV2PLPz/+zfsZg1cNSquFC
VEUpMVvNPa7sxpqI4pdqCHQdXgk8gbXM2gmFTPvZTwyP7RctAo7XysRImwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeCm0knFdztXQiDj1337J6CC3hOMB8GA1UdIwQY
MBaAFHPP4R6KcJO9yVvAHiDbQ3biKqUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iYWY5ZjMtMGU0OC00YzQ3LWJjMjYt
MWIxMTAwNzMxNDQ4LzEvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9iYWY5ZjMtMGU0OC00YzQ3LWJjMjYtMWIxMTAwNzMxNDQ4
LzEvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErsPt7ws
IB5+TGM1kDJxJoka1ZLdV2UYUlGtavA2hdnsPhdoYo7OUFORERqT1nzTsnQytVgw
+1DnxuKd2y6mvJb4hvW+mh4oYlrP2YO7/ArEcnEeQogIpH2WYD1Vua+749YvY8Fo
6qGsI7tbP5cdeTmcozPain3GdlWitNnBpEJpDNqXzDJyV0nOAdvNw7YaMM6UzSL7
96sJiteWnHSv9w8elrbUpldKPIrVQaDOdLyLSm6DhdQeiTJTY2aP55kw56cBXTgF
J4US0KOsS+BS69gujvgIRDxdCdvLgoh52rjyEySfxoP1c77rQUvVYQqDIWeAsErs
y2RuCt2ivhsIbw==
-----END CERTIFICATE-----
Generated at Fri Jun 6 10:48:18 2025 by rpki-client