Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json)
Hash identifier: 7+H/4VXnW8JhtJUQogYK6kZ1PAPQ12wS9sFrGD5iL+M=
Subject key identifier: 7F:26:E8:EA:2A:45:62:FB:95:FA:13:A9:89:61:9A:EA:4A:70:13:D4
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 0196B032BA4F81E1C98A0D2963B5B3E30462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
Manifest number: 0FD1
Signing time: Thu 08 May 2025 14:00:36 +0000
Manifest this update: Thu 08 May 2025 14:00:36 +0000
Manifest next update: Fri 09 May 2025 14:00:36 +0000
Files and hashes: 1: KzHfiiDg2EcCwKAmppKJC7QdUFA.roa (hash: QZ0RWt1gfijBZB5RL8yUAfB/DWbprl5d1kxp7e8kc3g=)
2: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: YIiiJ7H2glvoCB+v3L+oIdhTIuHM/aGPVaYIKlhkDQA=)
3: kuAnd9NqWnoBzCTnx0XxXmRi7Z4.roa (hash: gmNwgm6wcIRoGUSbEH7MItCnGX2M/c/Toez7Z0Fqses=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:32:ba:4f:81:e1:c9:8a:0d:29:63:b5:b3:e3:04:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: May 8 14:00:36 2025 GMT
Not After : May 9 14:00:36 2025 GMT
Subject: CN=7f26e8ea2a4562fb95fa13a989619aea4a7013d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:2b:98:05:31:f8:f0:65:c7:58:35:38:7a:
a8:84:cf:1b:27:19:17:15:e1:f6:52:e8:c8:9f:30:
65:95:33:ba:65:de:f2:93:78:8d:4a:31:67:ee:97:
36:12:55:c4:d0:8b:7c:57:1e:9c:00:0f:ab:aa:13:
e8:03:49:74:cc:96:4f:f6:10:04:a9:61:d4:c7:c7:
41:82:64:90:b8:9d:d4:68:6a:56:8f:08:2f:2e:4b:
45:60:28:d3:2f:46:9b:e5:48:58:6d:89:af:a4:93:
e0:7c:06:84:c8:b6:fe:7d:4c:ae:42:26:68:a5:55:
ae:25:60:a3:d8:8b:15:13:50:de:63:e0:64:99:10:
a1:95:15:b8:ba:bb:60:c9:bf:bc:af:8e:48:71:b4:
47:2f:9e:ad:60:52:d2:9a:a0:7f:33:57:7e:3c:1a:
c2:b0:fc:55:c1:f1:b9:9f:04:6c:42:c1:6b:8a:90:
b5:26:aa:84:df:ff:a2:51:c4:21:47:8d:76:c3:14:
a7:22:00:a1:1b:1a:72:ea:21:dc:61:0b:bf:2d:b7:
b3:34:36:a1:f7:8c:a9:84:51:73:d9:11:92:44:47:
05:2d:1c:aa:4d:85:3f:ca:83:96:a1:d5:56:c6:69:
92:2a:3f:02:d6:25:7d:19:44:c7:be:d5:68:9b:6c:
b8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:26:E8:EA:2A:45:62:FB:95:FA:13:A9:89:61:9A:EA:4A:70:13:D4
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:83:7b:0e:31:42:e2:b0:2d:50:c4:f4:be:cd:07:c4:d2:e3:
b4:ae:3b:d3:1d:9b:7a:df:22:32:8e:56:f7:4c:c4:31:da:7b:
83:6f:4d:d5:dc:9a:dd:9f:9b:4e:3f:25:57:c9:40:56:32:36:
90:6f:7b:8d:36:a2:5c:3e:81:ff:84:e2:57:ce:77:b2:20:a0:
4d:ec:0e:92:c1:71:50:17:d3:ca:e6:75:3d:15:b5:65:b5:ee:
d4:d1:e9:e8:f8:ad:cb:68:dd:6d:fb:41:20:df:82:d1:e1:21:
c2:d8:45:63:ee:6b:dd:e7:df:41:1e:85:b4:a9:66:56:fd:03:
a9:78:14:4f:c8:72:8f:14:12:84:7b:90:92:7a:5a:42:fc:41:
cb:3e:4a:b4:c9:e0:66:84:3f:83:9a:7e:d1:ab:d3:b8:d2:d6:
54:62:0b:30:29:95:85:65:c3:30:07:1c:df:82:6f:8d:2a:1d:
59:f0:c0:74:be:9f:d1:15:f9:00:68:d2:5e:43:66:c6:5a:a5:
c4:1d:aa:50:76:92:80:a3:ec:3a:96:a0:e9:62:69:ca:3a:36:
9c:aa:c4:3f:31:3c:7e:94:0f:e2:1b:67:32:bd:db:6e:e4:38:
f2:75:b0:bb:5e:ab:b9:a0:fd:95:de:9b:cd:21:c0:d4:d5:c4:
c9:e2:3d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:52:30 2025 by rpki-client