Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
File: c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft (raw, json)
Hash identifier: F/l5k+ge6mqiKQW5AVplBtB88lOOO2lYeI33XikKq98=
Subject key identifier: AF:E3:5D:CF:EC:05:FC:1C:F4:9C:E4:93:49:7B:1D:69:C5:52:CE:D4
Authority key identifier: 73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
Certificate issuer: /CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Certificate serial: 0196BECA26EBD072C5BD0E30157781F3B686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 10:00:41 +0000
Manifest this update: Sun 11 May 2025 10:00:41 +0000
Manifest next update: Mon 12 May 2025 10:00:41 +0000
Files and hashes: 1: YlBw5zZMyGmVSKcyUcis3LeoBu4.roa (hash: FNW2TVY99VnemA7lyfpV1rEplwNPKCZ+roIw6UfcWJE=)
2: c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl (hash: BNBDjmALDT8ynjstPwmndJ7irdYtIhqor6UxqhD2VWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:26:eb:d0:72:c5:bd:0e:30:15:77:81:f3:b6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Validity
Not Before: May 11 10:00:41 2025 GMT
Not After : May 12 10:00:41 2025 GMT
Subject: CN=afe35dcfec05fc1cf49ce493497b1d69c552ced4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:3a:66:ba:71:13:b1:63:8e:5e:61:47:3d:
4d:4e:c8:2b:fc:c4:73:df:8a:2f:18:72:e8:66:68:
d8:2e:ea:0f:bc:11:80:79:e7:17:68:17:8e:70:5f:
ca:91:70:bc:6d:63:c6:f8:52:07:79:80:2f:2b:b8:
c9:a7:4f:ba:68:3b:ea:af:ec:8b:b5:33:35:cc:f2:
fe:95:28:64:b5:7c:15:df:a1:de:37:2b:7a:1b:df:
fb:04:88:04:3f:14:15:4f:dc:8f:42:59:8e:c2:11:
01:37:b4:46:d4:a4:40:2d:b2:64:dc:73:d9:98:f8:
3e:b2:56:bc:01:41:0e:cf:36:2c:58:4c:e2:ac:bd:
a1:e1:6d:6b:69:d9:37:9b:9d:5b:64:32:2f:a0:a5:
06:d6:fe:c7:2a:02:a2:a7:75:91:09:e7:74:5d:7f:
b8:9e:37:37:ba:27:22:15:c0:5b:fc:21:17:c8:57:
a7:60:34:ba:45:22:a0:41:84:28:55:69:d9:17:be:
73:18:81:39:c9:78:53:3b:ed:cc:2b:05:fd:fd:92:
a4:fd:07:cb:d0:53:86:ca:a6:83:34:d6:46:74:88:
e1:2e:9d:7a:c4:67:8e:cb:d3:86:ce:81:de:cb:90:
77:b0:3a:21:5d:b2:77:ed:cd:28:35:81:1d:66:f2:
7b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E3:5D:CF:EC:05:FC:1C:F4:9C:E4:93:49:7B:1D:69:C5:52:CE:D4
X509v3 Authority Key Identifier:
keyid:73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:43:0d:8d:96:0a:02:54:7a:eb:cc:00:87:86:fc:a9:53:ec:
73:b7:73:ab:c3:7f:4d:fb:a8:e1:ca:89:c7:f6:49:b4:bf:89:
96:d1:44:b4:62:22:1f:66:d7:09:3f:c9:5b:2e:12:aa:2c:d7:
e3:b9:62:17:28:f6:b0:c1:7c:50:2d:c8:89:e7:3c:b0:f4:b4:
3c:cf:0b:8f:19:cb:83:eb:9c:ab:9d:f6:3f:57:b9:6c:5c:13:
b1:64:e7:b9:bd:f2:f7:db:ac:9b:e8:73:30:96:a3:3d:b2:e6:
b9:1b:ea:7a:86:9f:0d:3b:49:31:1b:50:75:3b:ae:d7:ff:a1:
33:9f:2e:03:49:7e:1a:80:f5:97:28:b9:fe:d9:c2:f0:93:53:
22:c4:a5:52:91:d3:70:be:73:87:b5:20:4c:a7:af:47:d4:1c:
05:41:2d:e3:7f:f1:99:1e:c6:6e:4d:17:7a:ac:a4:52:f7:86:
a5:af:39:3f:f7:31:64:c7:95:6c:c7:b6:dc:aa:6c:c8:28:b1:
09:42:27:88:44:f1:c3:8d:3a:35:01:ac:29:22:6e:2a:bc:25:
a0:4e:e0:c2:1a:b7:e4:f1:9e:d0:8f:44:e5:28:8c:e3:f4:5c:
00:3a:7d:2e:c8:77:db:49:e5:d5:c8:c4:33:b7:06:dc:c2:10:
17:43:0c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:03:46 2025 by rpki-client