Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
File: 8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json)
Hash identifier: kO5gzNeS+xCCzfngTiuAZoBMBUUJuYgial3e9vPcNTU=
Subject key identifier: 73:06:D7:37:6A:4F:D0:39:28:E5:C7:A5:4E:EE:E6:25:34:4F:C0:40
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial: 0196C1268270F6E26D5C43FAC203CF1997DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
Manifest number: 11CB
Signing time: Sun 11 May 2025 21:00:48 +0000
Manifest this update: Sun 11 May 2025 21:00:48 +0000
Manifest next update: Mon 12 May 2025 21:00:48 +0000
Files and hashes: 1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: k4w/q6wHNpuH274i/s3TrlFmrO1KcQKXw2i5m6muHfc=)
2: xcycZms0_ZHCVQVtErEWcPT6uzM.roa (hash: LGvEW3RDqUd1ArWiz/8ADiBje4yqqRUes0HgBtn3AOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:82:70:f6:e2:6d:5c:43:fa:c2:03:cf:19:97:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
Validity
Not Before: May 11 21:00:48 2025 GMT
Not After : May 12 21:00:48 2025 GMT
Subject: CN=7306d7376a4fd03928e5c7a54eeee625344fc040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:3e:39:25:6b:c0:06:9f:5d:c8:8a:fc:41:
6c:98:0b:ee:5a:5a:15:48:af:4a:ac:2d:fe:77:8d:
8f:28:55:5d:81:fc:47:09:63:1f:4e:59:8f:db:c7:
c4:c6:d1:0f:a6:83:7f:32:71:49:ee:d9:c4:eb:25:
77:94:df:d3:18:a4:1b:94:df:0e:c3:5d:ee:cb:47:
43:0f:66:61:fc:54:bb:aa:9c:b5:be:e7:4a:d5:78:
24:ec:10:d4:79:15:72:82:7a:13:97:9b:b4:29:38:
94:ea:61:33:96:78:dd:cd:cb:29:6f:5f:69:05:9c:
a5:82:ff:0d:a2:5d:5b:9d:21:65:ff:a6:a5:06:1a:
20:ac:1c:b1:5a:ff:d4:a5:7c:20:29:f7:c3:e2:fe:
93:b0:87:9a:8a:55:b6:66:91:de:ec:b8:96:53:78:
46:fc:1d:c2:83:34:30:de:eb:0b:90:c3:24:74:08:
6e:8e:58:ac:7f:10:7d:c6:86:38:7c:93:e2:a4:97:
24:24:fe:42:c7:7c:b4:4d:28:80:a3:b5:7c:b2:b6:
77:83:c3:b8:0d:9b:a3:02:ef:7d:59:38:c6:de:e9:
0f:34:df:80:4a:f1:25:47:fd:18:35:5f:3c:6a:c3:
61:73:91:a3:ad:43:b8:7d:2c:9d:7a:34:7e:df:9c:
bd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:06:D7:37:6A:4F:D0:39:28:E5:C7:A5:4E:EE:E6:25:34:4F:C0:40
X509v3 Authority Key Identifier:
keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:02:43:51:71:3d:9f:6f:12:53:18:d4:7f:9a:75:a5:76:ae:
27:15:33:43:14:14:a9:83:f0:1a:e6:6a:94:53:59:71:2f:cb:
4a:87:b5:12:46:f9:02:50:2e:32:1d:a7:61:83:d6:9f:88:36:
4a:3f:13:4e:20:07:19:1e:67:67:01:b8:6d:9e:fa:12:40:11:
a4:ed:f7:1d:0a:ef:a2:f4:fa:c0:41:c6:a4:12:c5:e1:8f:b8:
b8:b5:3c:d3:fa:fa:06:b7:14:52:ff:9e:f3:cd:ca:60:9f:ee:
e0:6c:2f:de:65:0a:50:a6:9f:04:ff:2a:00:97:60:96:48:5e:
e8:3f:e2:72:0f:a3:2e:c8:b3:13:2b:18:59:05:27:6b:e1:03:
bc:83:b3:6c:9f:f8:2e:6e:8b:50:54:b0:ac:23:5f:d0:4f:16:
83:ff:53:c6:f4:af:d5:6f:dd:42:e8:29:f6:03:aa:b6:b1:f3:
7a:5e:7c:ea:8a:b3:5b:9a:35:e1:ac:d7:a4:cf:20:00:fb:de:
f8:5b:23:88:c5:80:64:8c:76:65:82:29:75:d4:79:b4:99:47:
be:f0:07:8a:44:fa:68:eb:51:2d:c7:88:0d:1a:1b:3c:42:52:
82:8b:3b:c0:46:74:f3:89:99:2b:3f:89:ed:bc:a2:94:63:24:
08:5c:7e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:41:51 2025 by rpki-client