Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: 5NuHyqpWXhNWCxIuGZ6kAZYH5zXnE+PDFD7dr7luzfQ=
Subject key identifier: EE:B7:28:17:A6:51:85:7F:11:A5:83:D3:CE:9D:5F:C8:87:4D:21:07
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 0197515865A8AEA0C77B96CE6B343127D085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 0E44
Signing time: Sun 08 Jun 2025 21:00:37 +0000
Manifest this update: Sun 08 Jun 2025 21:00:37 +0000
Manifest next update: Mon 09 Jun 2025 21:00:37 +0000
Files and hashes: 1: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: xI1bePLyZLD2Dgwpkd4ieztjccd43b9CONvdW7ABHqk=)
2: FSVMQ4pJCPFoKLSJXQ6SN5sd20I.roa (hash: fn+/BnxEhFcy9tBiYyHkUVxuspdk8dmiFltXF8v88aI=)
3: tEflzcf84YeIQ7wQhAU1KUgL-Vw.roa (hash: 4tBHDD8ccamGIZtMNBVAmE3bow4OuhCBji726kCuMPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:65:a8:ae:a0:c7:7b:96:ce:6b:34:31:27:d0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Jun 8 21:00:37 2025 GMT
Not After : Jun 9 21:00:37 2025 GMT
Subject: CN=eeb72817a651857f11a583d3ce9d5fc8874d2107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c6:ae:23:55:c3:3b:54:78:8c:39:4e:dc:5f:
67:7b:b8:1c:32:ff:a3:c2:02:8b:d4:4d:6a:88:92:
ae:cc:f6:6e:ec:a4:38:6d:3d:9d:54:63:4f:6a:9b:
fb:22:cc:6d:3e:c4:fc:fc:d6:6b:16:ad:1c:2f:d3:
61:b5:f1:62:73:de:73:85:9d:19:8e:96:88:79:ae:
20:91:ee:45:77:ec:61:aa:f9:da:e6:b5:90:44:56:
9a:41:dc:db:76:07:df:23:39:80:a1:6a:1e:67:c6:
81:eb:ab:9b:33:28:86:63:5d:b0:02:e0:4f:fa:61:
bf:39:55:db:03:80:cc:38:9b:21:40:18:ff:67:92:
40:ec:6d:9a:3f:18:97:5f:73:b9:27:0d:36:7a:e0:
c6:c4:99:c3:ba:3a:a8:bd:d4:6c:d9:d4:ee:ee:ff:
7d:33:89:f9:6b:21:9b:4e:30:2e:93:f7:47:a9:0a:
a9:e5:26:3a:ff:9d:de:53:a0:59:8a:2d:62:62:3a:
42:65:19:f1:ab:92:18:88:91:54:61:ed:45:67:81:
72:50:e4:ee:67:07:5a:68:f7:fc:6b:55:d0:3c:f7:
4d:93:66:81:1e:2e:66:dc:c1:c1:15:76:2e:bf:19:
f1:56:91:eb:62:58:5b:8a:ca:7a:60:b1:f3:d2:25:
e1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B7:28:17:A6:51:85:7F:11:A5:83:D3:CE:9D:5F:C8:87:4D:21:07
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:44:92:a5:58:a0:84:b2:e5:ee:c6:65:04:8b:30:d6:f5:14:
19:00:a9:3e:1b:6a:2d:9c:a1:c1:9e:9c:03:9e:97:80:9c:c0:
bd:5f:e9:b7:1b:98:10:6f:e3:6e:83:6e:07:f1:97:fa:18:ba:
a7:99:9c:88:af:78:8a:40:56:88:5b:50:8c:1b:b8:8a:cb:34:
b2:31:8f:09:b3:c2:a3:28:d0:b7:91:d0:26:8a:4b:ff:fd:5f:
71:2b:70:da:bd:65:b8:75:17:51:81:bf:09:93:d7:69:1f:6e:
35:8d:9d:f7:e0:9f:68:49:dc:b0:9f:ca:85:1b:f7:49:4a:9a:
a5:70:ac:62:51:25:73:d2:52:91:60:76:e4:23:26:f0:ea:26:
d5:c8:f6:38:a8:ad:03:82:67:fa:a0:54:60:a9:23:d8:4f:ea:
35:47:88:1d:d0:e8:a6:fa:31:3d:2b:76:0b:9c:88:1d:36:3b:
67:19:ba:d6:49:a1:3e:1d:78:02:c2:35:af:2a:c6:20:64:a2:
de:15:43:18:01:70:b6:12:e3:ec:a7:e0:fd:78:fe:db:78:7c:
b3:ba:2e:a6:bb:3b:16:7c:2f:c5:45:96:d3:9c:ed:b5:ea:80:
00:f2:29:d7:96:cb:2b:14:7b:1d:34:47:48:b4:4c:94:f2:4d:
d6:95:9a:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRWGWorqDHe5bOazQxJ9CFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwOGZiYTUyNjM1MTliN2MzYTIxNTVjNjk4NzgyMTc3NzZk
ZWZiYTAwHhcNMjUwNjA4MjEwMDM3WhcNMjUwNjA5MjEwMDM3WjAzMTEwLwYDVQQD
EyhlZWI3MjgxN2E2NTE4NTdmMTFhNTgzZDNjZTlkNWZjODg3NGQyMTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcauI1XDO1R4jDlO3F9ne7gcMv+j
wgKL1E1qiJKuzPZu7KQ4bT2dVGNPapv7IsxtPsT8/NZrFq0cL9NhtfFic95zhZ0Z
jpaIea4gke5Fd+xhqvna5rWQRFaaQdzbdgffIzmAoWoeZ8aB66ubMyiGY12wAuBP
+mG/OVXbA4DMOJshQBj/Z5JA7G2aPxiXX3O5Jw02euDGxJnDujqovdRs2dTu7v99
M4n5ayGbTjAuk/dHqQqp5SY6/53eU6BZii1iYjpCZRnxq5IYiJFUYe1FZ4FyUOTu
ZwdaaPf8a1XQPPdNk2aBHi5m3MHBFXYuvxnxVpHrYlhbisp6YLHz0iXhpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO63KBemUYV/EaWD086dX8iHTSEHMB8GA1UdIwQY
MBaAFPCPulJjUZt8OiFVxph4IXd23vugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xYmIxYTItNjc2My00YjI0LWFkODgt
MDY0MTNjZWVmY2UwLzEvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xYmIxYTItNjc2My00YjI0LWFkODgtMDY0MTNjZWVmY2Uw
LzEvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYESSpVig
hLLl7sZlBIsw1vUUGQCpPhtqLZyhwZ6cA56XgJzAvV/ptxuYEG/jboNuB/GX+hi6
p5mciK94ikBWiFtQjBu4iss0sjGPCbPCoyjQt5HQJopL//1fcStw2r1luHUXUYG/
CZPXaR9uNY2d9+CfaEncsJ/KhRv3SUqapXCsYlElc9JSkWB25CMm8Oom1cj2OKit
A4Jn+qBUYKkj2E/qNUeIHdDopvoxPSt2C5yIHTY7Zxm61kmhPh14AsI1ryrGIGSi
3hVDGAFwthLj7Kfg/Xj+23h8s7ouprs7FnwvxUWW05ztteqAAPIp15bLKxR7HTRH
SLRMlPJN1pWa8Q==
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:36:39 2025 by rpki-client