
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
File: 8QtzTfT6au4S6pkGV7A1oWK0qeY.mft (raw, json)
Hash identifier: w2iqO9j5FWWGRHS2lKLF+aFV3Vl8SqhO+dLr3Zrt7Fo=
Subject key identifier: 71:75:DB:45:77:C5:36:7A:B4:66:8F:C9:AA:BE:78:E3:73:63:78:1E
Authority key identifier: F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
Certificate issuer: /CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Certificate serial: 0196CD6180EF0931C8442CAB5D717384CF0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
Manifest number: 37
Signing time: Wed 14 May 2025 06:00:41 +0000
Manifest this update: Wed 14 May 2025 06:00:41 +0000
Manifest next update: Thu 15 May 2025 06:00:41 +0000
Files and hashes: 1: 8QtzTfT6au4S6pkGV7A1oWK0qeY.crl (hash: ThDh6cI9zrPzRVknFx4GdeRa+n+Cqse2qoUC4rWzphI=)
2: Q6silJK-IvgyeC7B9ILjiqVlW8g.roa (hash: 52E/4nvDPRzIRmQ8XP9pcAbqbJbgApdKo3OnGEgthTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:61:80:ef:09:31:c8:44:2c:ab:5d:71:73:84:cf:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Validity
Not Before: May 14 06:00:41 2025 GMT
Not After : May 15 06:00:41 2025 GMT
Subject: CN=7175db4577c5367ab4668fc9aabe78e37363781e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:31:16:3c:cc:89:f6:31:66:41:b4:a8:cc:
0d:e8:da:8a:cb:c5:b0:73:6f:00:ed:2d:1f:d4:23:
9b:7c:74:92:23:4c:39:73:12:34:34:73:fb:98:51:
c1:f9:3a:e1:62:c5:66:f0:da:de:fa:2c:b3:f7:78:
14:b1:3d:fe:3c:83:68:de:b0:c0:bd:35:57:e0:cf:
82:40:60:9a:90:7d:75:33:bb:fa:ad:3f:63:03:a5:
be:c7:66:b7:57:3b:e9:4c:f3:3c:bf:94:26:42:16:
fa:52:21:2b:2c:d4:98:8a:b6:d6:da:67:50:e4:e5:
5e:aa:71:30:f9:8f:4b:e0:e1:ce:c4:f7:ae:27:f7:
38:de:c3:48:0e:30:78:12:44:43:c9:e2:ad:42:5f:
b9:af:15:5c:be:e6:03:26:79:4e:12:c5:9e:e5:2d:
0b:2a:d2:cb:72:bc:c1:55:27:75:20:25:86:1a:dc:
6f:ae:aa:03:71:0b:66:6c:d1:b7:e5:17:41:37:19:
23:1f:ce:92:58:26:6f:a4:ef:01:b2:d6:5d:5f:ce:
d9:32:1b:8a:b4:0f:86:81:a8:3b:c4:6f:28:b4:17:
96:03:4b:94:49:88:7c:38:06:36:c6:14:51:92:20:
62:d4:69:55:48:64:25:c4:f7:c4:46:ca:ef:7d:5f:
e1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:75:DB:45:77:C5:36:7A:B4:66:8F:C9:AA:BE:78:E3:73:63:78:1E
X509v3 Authority Key Identifier:
keyid:F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:eb:c8:fc:1a:7d:e8:88:de:d7:34:bd:41:65:6e:fa:41:bf:
bc:e2:91:0d:26:4b:4d:f0:79:45:6c:ca:d6:07:c2:66:10:01:
15:d8:c8:12:81:ca:62:a7:86:a0:04:a2:fd:c9:85:d9:76:d1:
14:fe:82:27:b1:6c:31:32:87:04:32:d1:e6:15:4b:5e:e1:01:
c3:91:bc:32:71:34:95:0f:e6:3b:da:2f:57:f2:ab:05:64:3d:
e3:53:f4:2c:79:35:ac:15:bc:2a:d7:39:e8:8a:8e:9b:cd:d1:
86:eb:f4:7b:a5:57:c0:ca:57:15:29:2e:e3:1a:c0:25:6f:04:
fd:9f:43:99:50:7d:cc:9b:77:a9:41:2c:27:13:b6:81:c8:b2:
c7:2b:91:04:8e:39:64:d1:ae:a2:46:1b:ca:ad:dc:f1:df:6f:
ee:5d:7e:40:e1:ac:5e:68:54:90:f6:40:f0:e1:74:85:b8:8f:
9a:9b:8d:00:ca:f6:4f:70:20:93:7f:a9:22:81:b2:b0:89:be:
a7:13:a5:1b:3a:d7:e0:94:25:c3:14:25:9b:9f:26:3d:89:42:
a1:ac:e7:73:de:e0:56:69:17:7c:74:c5:70:32:da:85:7c:81:
b4:2e:9b:21:8c:bc:e9:e6:f6:cf:ea:3f:06:3f:f9:0d:26:b6:
41:b0:57:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 13:53:28 2025 by rpki-client