Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json)
Hash identifier: PGUrU7fp3jZ87YNJ2V/p89vfKIU4yuOTx/JVyJvtm7E=
Subject key identifier: 2D:23:7E:E7:E8:BF:B2:41:54:42:E2:88:F9:7D:0A:3C:54:61:67:04
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 0196C3B981E0E8FCC8E9E61E3CE5039D4396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
Manifest number: 1127
Signing time: Mon 12 May 2025 09:00:36 +0000
Manifest this update: Mon 12 May 2025 09:00:36 +0000
Manifest next update: Tue 13 May 2025 09:00:36 +0000
Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: vvG0kUi9lyr8ZPK2kKs58DS2YQ2WtHSXrHc/l3MIoWY=)
2: IPgK_RAdsHuRvKKv6Yp_JI973ng.roa (hash: tX54SYM7m1FlAg3IfdN7mYvGyQfWousk3Km0i1Rx1t4=)
3: Ui6ZcVR5VSgOavfnIix1oy38mjY.roa (hash: yRTuvXTUZnIOOWWsEOiOGa2OWkTQmK3kH5dqt1VxT5k=)
4: X6FDOxTNKh52-I33xxvcwTU1qaA.roa (hash: 2Nya6BSwofcloqYL9ndMBA+GqP5w942e0XCFOKQVeZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:81:e0:e8:fc:c8:e9:e6:1e:3c:e5:03:9d:43:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: May 12 09:00:36 2025 GMT
Not After : May 13 09:00:36 2025 GMT
Subject: CN=2d237ee7e8bfb2415442e288f97d0a3c54616704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cf:9d:45:95:66:91:52:3e:38:86:f0:b3:1f:
a7:53:72:dd:ea:b7:42:ca:19:90:bc:91:d2:63:ea:
74:c2:5e:0a:4e:d9:b2:b6:64:18:a2:64:30:3f:ec:
6e:88:71:e9:18:6e:24:4a:d8:2a:88:36:40:4a:91:
62:7d:fb:6c:43:08:6c:b1:ac:c7:53:79:55:73:93:
cf:1f:dc:67:a3:1f:db:45:55:16:3b:0d:43:5b:5e:
16:f0:b7:e1:db:3f:71:3d:81:20:83:50:ae:cf:aa:
ca:76:6d:28:e1:ff:45:2d:ab:2a:2e:55:15:26:bc:
af:3e:e7:94:34:9b:57:6b:56:b6:9e:03:37:f1:79:
58:09:53:37:66:4f:8e:71:48:34:ed:fe:6d:11:0f:
48:05:b3:7a:6c:bc:db:8d:79:86:31:6d:6e:7f:da:
aa:53:b8:3e:fb:8d:f0:fe:f6:13:39:67:d2:48:d2:
f2:bb:64:38:7a:c9:cf:75:be:9f:bc:2f:ab:39:d7:
85:99:f2:7b:04:11:0e:80:fe:f5:4d:71:61:23:18:
23:c5:17:8f:b1:88:00:c4:15:aa:e1:92:a9:17:a3:
52:1c:94:46:0a:e1:4b:00:2a:b5:0c:ae:d4:21:7f:
59:89:fa:c3:78:e3:39:24:7f:a8:73:b2:f3:ba:3f:
02:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:23:7E:E7:E8:BF:B2:41:54:42:E2:88:F9:7D:0A:3C:54:61:67:04
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e3:20:16:2e:d6:f3:6c:5d:00:4b:bc:10:05:f7:cc:a7:4d:
91:36:1a:22:4c:03:eb:2c:ad:c5:01:c7:13:74:1f:32:33:1c:
5f:ac:02:42:35:43:41:e6:7f:32:6b:7b:4c:a5:c6:2a:b4:2a:
b7:ce:d6:c3:bf:65:73:00:89:73:50:ad:f0:3d:10:77:9a:52:
3c:aa:55:89:07:a2:ce:00:76:db:fa:69:17:4e:13:44:a2:46:
fa:78:bc:3c:c1:81:2b:e0:56:7b:52:d3:02:8f:d4:38:99:44:
66:ca:f9:84:fc:b9:91:af:de:aa:ab:4f:b2:14:a6:4b:ab:a5:
47:ed:2a:d4:d5:4d:47:c0:73:9f:50:0e:22:c3:94:c3:77:5f:
fb:af:21:6b:37:65:41:e7:24:ee:f0:af:17:da:8c:f0:17:e7:
08:16:24:bb:bb:47:1b:65:c1:69:9f:47:10:53:6c:c2:5d:ba:
b6:84:ca:f5:7c:b5:19:78:22:3c:a7:1a:84:bd:d7:d6:d9:f1:
cc:38:7a:76:dc:e8:57:12:7e:49:ed:9b:69:fc:a1:0c:c3:f8:
bd:a2:0b:02:c9:26:c6:4f:b9:73:11:ff:2a:b5:34:fa:ed:f9:
75:0a:84:bd:99:e3:8f:7e:40:e4:4c:77:e7:6b:da:7e:24:21:
72:b9:07:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:49:23 2025 by rpki-client