Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
File: t8QKdH46wazGEaTEA7YAc5jn158.mft (raw, json)
Hash identifier: V8vscaS41cUdirb+k4Fp4mm7ujV7F4BAor5TZiD9QvY=
Subject key identifier: 23:B8:01:57:F9:74:BE:64:0E:FD:B5:FF:5A:35:E0:FE:37:92:EF:DD
Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
Certificate issuer: /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Certificate serial: 0196B9A493438FE618A12F9B42BFC88FDA43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
Manifest number: 1540
Signing time: Sat 10 May 2025 10:01:32 +0000
Manifest this update: Sat 10 May 2025 10:01:32 +0000
Manifest next update: Sun 11 May 2025 10:01:32 +0000
Files and hashes: 1: 4k2m6oWhbCxHwu7ZoOs8FYwRSeo.roa (hash: 0X2CSeSS5EmJeG6XWlWGwSVUMGQ8gwE0QRYVBIvMpS0=)
2: DVTN6UDTMLciD2vdICL_CmxW5h0.roa (hash: lGGJwHWs8Ee+gESMD4HQV9LD4VTGYiiCY92mtSXN+g4=)
3: t8QKdH46wazGEaTEA7YAc5jn158.crl (hash: 8WFcxGwU19s+CMSOaPsRoJDYN8jtV4T0bU60bkANta0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:93:43:8f:e6:18:a1:2f:9b:42:bf:c8:8f:da:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Validity
Not Before: May 10 10:01:32 2025 GMT
Not After : May 11 10:01:32 2025 GMT
Subject: CN=23b80157f974be640efdb5ff5a35e0fe3792efdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:5e:99:51:df:8c:d3:60:f2:f7:38:70:e8:
61:aa:4d:47:53:75:55:b5:75:4a:41:31:2c:1b:60:
cc:8f:57:fb:61:41:85:da:f3:47:31:c6:55:cc:62:
bd:2d:b6:fe:6f:25:0e:5f:de:b7:e7:f3:8b:de:b7:
fd:fc:65:30:d2:a3:e5:1f:ba:a1:2d:04:85:17:fc:
e7:f3:eb:6a:87:14:e4:c6:f6:70:c9:9d:5b:d1:d4:
1d:4d:3c:33:3c:04:fc:da:b8:9b:8e:fc:60:62:17:
61:81:46:26:0b:63:b4:35:76:d6:b4:f3:aa:74:b7:
34:60:a3:f5:ef:55:bf:ab:39:80:33:80:75:f3:df:
3a:1b:3e:65:ef:cf:bb:34:b5:75:99:17:f3:ed:cf:
a3:3c:76:ba:37:f9:05:02:d0:33:71:54:b4:c5:11:
8e:f6:61:d7:7b:d8:e2:be:99:cf:6c:cd:b7:0f:bf:
7a:6c:34:91:00:7d:ee:26:8b:da:54:b7:2e:88:dc:
92:0f:3c:22:6b:3c:b7:69:26:e2:56:c0:fb:77:9f:
4f:31:bc:97:db:23:d4:6d:9c:d0:52:42:e1:3f:c3:
c6:ef:98:36:9f:c3:5b:8b:34:6c:51:99:8a:4c:c5:
96:29:f3:61:e9:6a:82:e5:80:a8:53:68:d7:51:5d:
7a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B8:01:57:F9:74:BE:64:0E:FD:B5:FF:5A:35:E0:FE:37:92:EF:DD
X509v3 Authority Key Identifier:
keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e1:9a:b9:34:46:33:fa:e0:e8:8c:95:8f:a2:fa:b0:9f:16:
c1:d5:79:7a:16:b4:b5:0f:48:0c:f1:9b:47:3f:ba:23:91:d3:
7c:59:72:a0:23:9e:d6:32:bb:26:2a:6d:0a:a9:15:da:a9:33:
0a:85:f7:e7:38:5d:ac:4c:e9:ce:73:5f:ae:65:ae:0f:7a:72:
0d:66:95:ea:c0:2f:fa:18:77:0d:e3:52:b9:b4:d2:23:9b:63:
91:fe:cd:09:1b:a6:2a:6b:46:4a:c6:90:a0:c3:b4:a4:51:f4:
8e:b9:14:34:1d:bd:bd:bf:85:38:ac:ff:0a:e9:9a:af:0f:ee:
b8:b4:62:51:93:6a:39:9a:e0:2e:ff:2c:f6:c9:f5:e0:5f:e7:
0b:2b:b5:2c:4a:6f:94:5b:99:90:5b:93:eb:4b:15:0b:82:a6:
47:c9:57:4c:c5:6d:af:a5:69:7b:d5:5f:f8:15:f8:76:bb:08:
48:44:78:b3:aa:4c:71:8e:78:b3:a5:ed:a8:cf:c2:57:63:7d:
24:2a:8a:9c:b9:fc:b6:14:2d:f6:e0:b7:dd:35:fe:30:93:dd:
3e:50:70:7b:d3:a2:9d:e9:b0:fa:67:e5:1d:8e:40:79:9c:d0:
fb:f4:05:72:44:d8:1f:8c:1b:3d:6e:bc:c6:a9:57:d5:5b:32:
d7:ac:aa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:33:05 2025 by rpki-client