Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
File: 8iL76FrkCNN3shfU66eziyS69d0.mft (raw, json)
Hash identifier: wRbbVMrDQnVpSdqIeWjT3Xe9QKGnFPnSw5BNTCnXKs4=
Subject key identifier: 63:DD:4C:86:D3:18:AD:3C:E3:31:27:51:FF:64:49:96:8F:6D:09:B3
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 01964E90C528DFA2ABDE209E2B11818489AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
Manifest number: 0BAA
Signing time: Sat 19 Apr 2025 15:00:32 +0000
Manifest this update: Sat 19 Apr 2025 15:00:32 +0000
Manifest next update: Sun 20 Apr 2025 15:00:32 +0000
Files and hashes: 1: 5-tO1DtUPdvn-gHncHuAbgt6OiM.roa (hash: L6Z02H1tfyOJ9fsH+lsAomG7wfqgJlWMWjJh/1Ka9SI=)
2: 8iL76FrkCNN3shfU66eziyS69d0.crl (hash: 0rEt2KHgGx1VV5P+4/H1qNvnOD0wI6HT1JNhMURBhVY=)
3: gPE9V0tO8JPLDv8MCZH-UuWvdnQ.roa (hash: 5qjlUc3/t7psPBo135Wzs5OYxrc/B+KKSYzn0gcEaGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:90:c5:28:df:a2:ab:de:20:9e:2b:11:81:84:89:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: Apr 19 15:00:32 2025 GMT
Not After : Apr 20 15:00:32 2025 GMT
Subject: CN=63dd4c86d318ad3ce3312751ff6449968f6d09b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:d9:70:73:72:d3:d5:d2:8f:a3:33:4c:5d:
b8:34:e5:d5:c9:4c:25:cf:b8:11:6b:6c:3f:09:f5:
07:cb:d5:97:a5:96:c1:69:c8:63:51:1d:38:29:d7:
86:b4:a0:ac:18:9b:ad:a6:bc:ab:c3:d2:a7:f9:5b:
00:1f:b8:ac:82:96:6e:18:fc:2e:e6:95:fb:35:b9:
c6:21:51:ae:77:71:b1:90:27:f9:b4:07:79:62:85:
e6:08:43:e2:a7:55:2c:30:bc:36:20:40:eb:b1:d0:
01:bb:5c:74:6f:52:8d:33:3a:dd:cc:47:17:73:15:
63:8b:27:19:09:61:ec:17:43:b4:b9:40:3b:b0:c3:
d3:3d:41:8c:02:63:48:82:8e:62:62:e2:6f:4f:b4:
06:bb:bb:0e:1b:b5:9f:b2:23:c1:fd:14:87:4c:aa:
30:de:a5:0d:75:34:c6:44:f1:46:c3:0b:59:de:16:
e2:c9:8b:3d:cf:f8:79:09:69:cc:a6:d1:ac:0a:2f:
56:40:d5:45:d8:55:f7:f8:2e:da:98:fc:0d:60:b2:
c9:92:2d:a9:1a:f6:f9:67:49:e8:ca:3e:07:fc:da:
63:87:3d:98:12:7e:38:bc:d7:34:b1:f3:25:51:38:
d5:ab:df:cf:72:74:4c:07:f2:f8:00:20:01:51:0e:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DD:4C:86:D3:18:AD:3C:E3:31:27:51:FF:64:49:96:8F:6D:09:B3
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:61:95:02:12:d0:ba:0b:2d:6a:be:d1:7a:98:a9:6c:d1:39:
a5:30:4e:83:16:49:83:c5:09:fa:00:c2:54:ee:39:40:39:f3:
87:0f:b3:e0:2f:f0:09:70:4a:10:8c:58:85:2b:31:63:53:1a:
69:34:15:be:4d:b7:bb:9f:ae:48:e0:fb:f3:aa:be:b7:9c:13:
c1:0d:7d:cf:57:4d:f2:0b:67:98:09:30:5c:a1:bf:c2:4b:ca:
b7:8a:72:62:fe:a3:fe:e8:f4:f9:97:b5:b9:b8:04:f1:6f:ac:
28:2b:57:8c:f1:10:25:e0:39:b8:d4:53:1c:8a:3b:1f:e8:eb:
25:b1:cf:c0:a7:eb:7f:f4:ba:fc:67:3a:c0:bd:23:4f:31:38:
1d:03:4f:6e:d0:bc:fc:f3:d3:77:d8:ca:2e:27:92:ae:69:5e:
06:d5:59:fa:e3:65:06:89:ed:50:2c:3d:c8:ec:d0:db:c2:4d:
a2:fb:46:f6:18:b4:d6:10:09:02:33:07:84:0c:85:6c:2a:81:
46:ef:65:ef:0d:3e:e7:d7:1e:3f:cf:85:47:23:17:e7:81:c0:
26:0b:38:73:49:ff:46:cc:36:5c:75:d0:bd:c3:49:28:e4:2f:
58:22:76:8d:af:6c:3a:5e:ca:72:80:47:86:26:c5:42:ea:2d:
c4:95:b6:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOkMUo36Kr3iCeKxGBhImrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMjJmYmU4NWFlNDA4ZDM3N2IyMTdkNGViYTdiMzhiMjRi
YWY1ZGQwHhcNMjUwNDE5MTUwMDMyWhcNMjUwNDIwMTUwMDMyWjAzMTEwLwYDVQQD
Eyg2M2RkNGM4NmQzMThhZDNjZTMzMTI3NTFmZjY0NDk5NjhmNmQwOWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb3ZcHNy09XSj6MzTF24NOXVyUwl
z7gRa2w/CfUHy9WXpZbBachjUR04KdeGtKCsGJutpryrw9Kn+VsAH7isgpZuGPwu
5pX7NbnGIVGud3GxkCf5tAd5YoXmCEPip1UsMLw2IEDrsdABu1x0b1KNMzrdzEcX
cxVjiycZCWHsF0O0uUA7sMPTPUGMAmNIgo5iYuJvT7QGu7sOG7WfsiPB/RSHTKow
3qUNdTTGRPFGwwtZ3hbiyYs9z/h5CWnMptGsCi9WQNVF2FX3+C7amPwNYLLJki2p
Gvb5Z0noyj4H/Npjhz2YEn44vNc0sfMlUTjVq9/PcnRMB/L4ACABUQ4OuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPdTIbTGK084zEnUf9kSZaPbQmzMB8GA1UdIwQY
MBaAFPIi++ha5AjTd7IX1Ouns4skuvXdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xYWE4NzUtMDNiNS00YzE3LWJiMzkt
YjBjMWUzMzA0ZTc0LzEvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8xYWE4NzUtMDNiNS00YzE3LWJiMzktYjBjMWUzMzA0ZTc0
LzEvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGGVAhLQ
ugstar7RepipbNE5pTBOgxZJg8UJ+gDCVO45QDnzhw+z4C/wCXBKEIxYhSsxY1Ma
aTQVvk23u5+uSOD786q+t5wTwQ19z1dN8gtnmAkwXKG/wkvKt4pyYv6j/uj0+Ze1
ubgE8W+sKCtXjPEQJeA5uNRTHIo7H+jrJbHPwKfrf/S6/Gc6wL0jTzE4HQNPbtC8
/PPTd9jKLieSrmleBtVZ+uNlBontUCw9yOzQ28JNovtG9hi01hAJAjMHhAyFbCqB
Ru9l7w0+59ceP8+FRyMX54HAJgs4c0n/Rsw2XHXQvcNJKOQvWCJ2ja9sOl7KcoBH
hibFQuotxJW2UQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:13:09 2025 by rpki-client