Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
File: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft (raw, json)
Hash identifier: Kg8TtaOT8arbHkK/w7exp6zCh8zGMgRUjMTbRCnHty0=
Subject key identifier: 70:60:F9:CD:00:2A:44:F8:A6:18:1D:5E:42:9E:DC:67:16:67:2E:2D
Authority key identifier: F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
Certificate issuer: /CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Certificate serial: 0196C53AC7127E7E8B897C86ECD09B41CA26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 16:01:25 +0000
Manifest this update: Mon 12 May 2025 16:01:25 +0000
Manifest next update: Tue 13 May 2025 16:01:25 +0000
Files and hashes: 1: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl (hash: JRvMHFUuQNnrjHw29ERCavyMJE0z4FI3IOqalbFf6HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:c7:12:7e:7e:8b:89:7c:86:ec:d0:9b:41:ca:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Validity
Not Before: May 12 16:01:25 2025 GMT
Not After : May 13 16:01:25 2025 GMT
Subject: CN=7060f9cd002a44f8a6181d5e429edc6716672e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:57:c9:e4:2d:3d:92:97:03:5f:12:41:96:
eb:84:a2:03:d6:a4:c3:81:f8:3e:e9:ff:51:7f:1d:
f0:d7:0e:53:1a:36:e4:70:d4:65:83:17:51:11:8b:
b2:56:38:7a:24:7f:a5:8f:99:ec:59:e1:c9:9c:9f:
95:43:57:fd:12:33:4a:0a:0a:c8:27:03:67:53:f2:
d6:6c:6f:0c:2c:f8:cd:8d:93:23:f2:a0:bd:85:35:
c6:86:a6:f4:92:8d:99:e9:e9:e2:7e:6e:e2:7e:02:
6a:28:a3:4f:e8:d1:e1:6a:7e:94:64:bc:02:33:16:
74:90:7d:11:43:0f:a9:9f:bd:78:ef:1b:79:35:47:
06:e9:8c:ae:fd:be:c6:7e:44:e0:33:67:08:15:bb:
fb:23:34:02:67:6b:45:26:12:c4:6a:7d:db:28:a1:
80:38:34:5f:cf:df:94:61:07:8d:b1:9c:a5:70:8d:
42:3e:74:ef:8f:3a:3d:c2:0c:eb:bc:c8:fa:59:ce:
a3:0c:a7:1a:dd:61:eb:a6:62:05:c2:d3:93:ff:64:
05:69:4e:0e:22:a6:b8:0f:16:a0:00:21:fd:16:6c:
c7:62:6c:ec:3e:c8:ab:30:2e:99:64:e7:d0:66:ca:
63:db:fd:97:76:06:ab:97:56:58:a2:6a:c1:13:15:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:60:F9:CD:00:2A:44:F8:A6:18:1D:5E:42:9E:DC:67:16:67:2E:2D
X509v3 Authority Key Identifier:
keyid:F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8b:95:ce:8f:ed:c8:ef:e2:7b:be:c2:85:80:f2:d4:6c:9b:
b9:86:13:58:8d:30:28:42:aa:13:b4:a7:01:98:6c:18:c1:f5:
26:6c:a2:59:66:de:70:c6:09:f8:7a:71:f6:b9:95:6b:d8:b1:
73:3c:2e:e6:56:f2:7a:79:06:a8:ad:25:c7:4f:47:b2:87:88:
02:7b:72:d6:13:e6:67:47:69:bf:ce:c8:1f:47:58:aa:c0:41:
4e:b7:9e:65:58:9f:5e:b1:7b:58:a2:37:52:30:be:00:88:52:
f0:30:7e:e7:c4:36:16:54:dc:24:a3:40:87:3e:e1:63:47:de:
0a:0a:26:fa:f0:0a:a3:e5:84:4a:01:c6:ca:89:26:36:12:5a:
c0:5e:e5:3e:5e:da:dd:5b:28:f8:96:8e:f0:e0:aa:67:19:5a:
22:24:e0:0f:d6:70:ac:2e:38:ae:f3:ae:6a:18:24:a3:ec:47:
5b:1a:77:33:e7:b4:6a:5b:ff:2f:22:d6:ba:90:68:33:69:dc:
e1:49:eb:82:00:f9:69:68:82:35:41:a7:52:27:7c:a9:b2:12:
b5:6b:95:0b:47:34:76:9a:0c:43:1e:2e:d9:19:0d:15:7f:2e:
eb:55:01:32:67:60:34:d1:47:8c:91:79:20:d6:54:67:57:a3:
28:bb:ae:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:06:13 2025 by rpki-client