Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.mft
File: 8pbiWBIRaAfIv3q6xcaVvrQbhc8.mft (raw, json)
Hash identifier: qQwqPOg2Jj4DwEwcBqksEHSBLoF7HL0PxyWysihyWZI=
Subject key identifier: 2D:A4:2E:FF:73:01:09:0D:6D:9A:93:F1:5E:34:79:76:84:66:52:80
Authority key identifier: F2:96:E2:58:12:11:68:07:C8:BF:7A:BA:C5:C6:95:BE:B4:1B:85:CF
Certificate issuer: /CN=f296e25812116807c8bf7abac5c695beb41b85cf
Certificate serial: 0196C539DF722B481C30A07532785A3F731B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8pbiWBIRaAfIv3q6xcaVvrQbhc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.mft
Manifest number: 90
Signing time: Mon 12 May 2025 16:00:26 +0000
Manifest this update: Mon 12 May 2025 16:00:26 +0000
Manifest next update: Tue 13 May 2025 16:00:26 +0000
Files and hashes: 1: 8pbiWBIRaAfIv3q6xcaVvrQbhc8.crl (hash: WgxJFxQ4QDil9Ub39hB8iOXNMtdg/Ryligi8UJp/hX0=)
2: C_9wJpC7N12kOu0pJ_D7XheLG4E.roa (hash: gH4AEfeN7fzJJXj/ip3PiHbGkEFNAd9HeLBxlPcZ0hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8pbiWBIRaAfIv3q6xcaVvrQbhc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:39:df:72:2b:48:1c:30:a0:75:32:78:5a:3f:73:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f296e25812116807c8bf7abac5c695beb41b85cf
Validity
Not Before: May 12 16:00:26 2025 GMT
Not After : May 13 16:00:26 2025 GMT
Subject: CN=2da42eff7301090d6d9a93f15e34797684665280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:84:2a:a1:8c:0c:1a:6f:fa:df:d2:96:23:
33:a6:30:2a:0a:5a:cc:1c:78:26:04:b8:e8:83:7a:
3c:e1:19:34:7c:b1:34:23:2a:47:08:67:5e:b3:19:
70:13:26:e4:5c:3e:fa:1b:16:1d:40:ac:1b:67:56:
b6:6b:c7:e5:eb:c7:28:38:90:02:1a:4c:d0:da:4b:
1f:cf:ed:49:ec:84:82:87:f4:99:58:ce:08:1d:1f:
9b:83:09:60:09:da:9d:c8:83:f4:7a:39:35:76:48:
31:8e:ae:56:22:ab:1a:ff:30:19:4b:1a:c6:bd:98:
f9:39:7d:3a:d5:83:4a:56:46:67:b0:ef:46:70:e7:
63:86:10:2b:4c:cb:d3:f3:e4:db:4e:48:61:f4:25:
af:07:20:28:09:26:f4:73:1d:73:41:35:45:2a:27:
0b:45:74:3b:70:05:5e:17:05:52:da:cf:b4:ee:fd:
42:33:10:ae:f4:2e:31:40:2c:d4:07:20:38:99:4b:
bf:5e:27:b2:a3:94:13:12:f0:91:77:68:ee:cf:9d:
19:b8:62:70:51:e1:ca:f6:f4:51:41:4f:2a:47:99:
a6:cf:b4:38:00:d5:f7:d5:c0:45:44:d5:9d:ef:c3:
eb:90:fc:9c:db:09:c7:06:72:e5:74:9e:c5:da:4b:
63:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A4:2E:FF:73:01:09:0D:6D:9A:93:F1:5E:34:79:76:84:66:52:80
X509v3 Authority Key Identifier:
keyid:F2:96:E2:58:12:11:68:07:C8:BF:7A:BA:C5:C6:95:BE:B4:1B:85:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pbiWBIRaAfIv3q6xcaVvrQbhc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:19:a7:d1:69:ea:f1:29:41:48:ca:6d:01:c3:21:3d:88:89:
a6:3a:13:1e:b9:6c:13:bc:47:5c:f4:62:ba:ea:9a:08:a0:06:
27:70:ca:ea:e1:0f:d4:65:b0:44:66:0c:cd:d4:c9:8e:2a:10:
2c:70:fa:c7:da:d2:eb:ce:cd:a6:25:1b:61:28:90:f8:22:82:
51:ef:6c:04:e3:5d:7a:b7:0b:6b:ac:e0:10:3b:12:6d:a6:0c:
99:71:3a:5c:bc:a2:31:a0:75:55:4a:8c:15:f2:6f:2e:c6:8e:
22:1f:21:60:1b:f3:b0:b0:8c:e7:e8:50:cc:fc:a3:b9:bc:69:
c6:db:db:31:31:c5:8b:76:fa:44:ad:62:38:a7:c2:c1:d1:94:
b8:8f:0d:49:09:69:50:3e:27:cf:e1:ec:b9:72:d6:e4:7f:73:
15:64:7b:52:9e:f8:98:07:35:18:6e:01:50:44:e5:a5:3d:b6:
1a:50:c5:c3:ab:ac:84:47:c6:58:ae:70:56:a9:dc:4a:15:da:
f6:ee:78:a3:85:fb:52:8e:44:d7:89:a2:9a:18:f3:7e:de:e8:
d9:52:c9:bb:31:76:cb:e4:23:be:40:71:be:b0:f9:0e:53:3d:
9b:63:20:5c:73:ab:ba:7f:fd:66:d0:bd:13:6f:65:04:ee:f3:
52:3f:bd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:11:39 2025 by rpki-client