Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
File: 8SsbaOoQk7zueNBxkubYw_cDAs8.mft (raw, json)
Hash identifier: TWVJuOREV/Y3l23aUtfSMIphp7ZJqJvxyE+6sAUucBQ=
Subject key identifier: EE:AA:CD:D2:1E:E8:AE:5E:EB:7C:34:EE:63:F0:34:3C:69:53:BA:AA
Authority key identifier: F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
Certificate issuer: /CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Certificate serial: 0196C916BCFF116E2D73382732136F77EF13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
Manifest number: 1426
Signing time: Tue 13 May 2025 10:00:32 +0000
Manifest this update: Tue 13 May 2025 10:00:32 +0000
Manifest next update: Wed 14 May 2025 10:00:32 +0000
Files and hashes: 1: 8SsbaOoQk7zueNBxkubYw_cDAs8.crl (hash: shqWMyp83Vq/ivTTutEYprG7nRq5yIQwQaBbDuT+In4=)
2: bKPhCw0mFqwfHuOY5bTkew_cDWA.roa (hash: GZO9dwOguzhoWcajFIoo6bMBVjK4nlEVTDqTZEZzar4=)
3: u_s4QKsF9p1kSN0KedlqNHJpJkI.roa (hash: 8YDGRlWAcN7f5DRHYPeywi/SAyIqYgv/xJQxk+e27Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:bc:ff:11:6e:2d:73:38:27:32:13:6f:77:ef:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Validity
Not Before: May 13 10:00:32 2025 GMT
Not After : May 14 10:00:32 2025 GMT
Subject: CN=eeaacdd21ee8ae5eeb7c34ee63f0343c6953baaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:ac:af:82:69:eb:2b:39:31:8d:7e:68:c6:
18:96:c9:dd:7a:8b:e6:d5:d4:a2:f7:84:21:93:45:
2b:4b:13:40:23:5e:65:9e:ce:51:29:30:f8:f5:a2:
21:68:00:43:bb:d4:0c:51:7d:3a:d8:3b:ed:29:d3:
e3:7a:01:c3:47:e0:2e:7d:d3:b5:fb:49:52:d9:13:
6b:99:77:c5:ec:c7:ec:47:9d:ad:8c:79:79:46:ca:
d5:a5:b3:bb:18:15:39:84:79:43:19:aa:16:3f:0d:
80:b0:b5:5c:fd:3b:4b:f0:27:1f:e6:13:e8:f6:a9:
68:d7:62:ed:c6:91:7d:d4:d1:d8:cb:60:62:d1:8a:
41:9c:a6:cb:fd:cd:7d:12:be:d8:7b:eb:24:8f:57:
91:1a:88:3c:71:6f:fb:05:13:11:12:bf:d4:a2:94:
6c:c0:ee:a2:c6:47:d8:61:0b:f9:b7:58:27:8a:2e:
ef:9c:11:75:81:e7:cb:78:30:91:c3:11:11:58:2b:
61:34:a0:ad:17:6a:76:8e:1e:97:4c:9e:1a:73:cd:
7f:c1:ce:de:36:61:b5:31:6a:6e:07:5c:8e:24:ec:
57:af:ad:26:4e:61:9b:15:8d:ca:4d:2c:bb:d9:16:
d8:b4:69:62:34:b6:f5:d4:fd:4c:0e:d9:99:97:2b:
7a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AA:CD:D2:1E:E8:AE:5E:EB:7C:34:EE:63:F0:34:3C:69:53:BA:AA
X509v3 Authority Key Identifier:
keyid:F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:36:da:3a:8d:1f:1c:62:20:82:d3:c8:aa:a6:8f:b9:2b:46:
f6:e4:7d:8d:05:a4:43:00:ec:5b:84:5e:83:aa:73:7c:36:23:
45:04:32:0a:65:6d:60:2d:37:95:30:7d:f9:28:ae:fe:e4:56:
7b:7a:67:4b:87:25:41:e9:e5:03:da:4d:d1:51:bb:d7:05:9b:
07:94:38:f0:90:57:24:3b:5d:d1:ba:36:a7:31:e0:ae:e3:c8:
bf:8a:a6:71:6d:2c:67:b3:5d:48:0f:9a:1a:97:a2:2e:1a:7d:
21:94:cf:7a:c6:a2:59:34:83:a1:2e:bf:eb:48:ef:b9:18:7e:
97:a0:63:c8:32:15:57:88:27:4c:43:b8:d3:05:4a:f4:cb:e4:
ce:da:42:24:86:f2:d6:eb:08:aa:49:83:18:76:fb:74:b8:95:
c3:30:a4:4e:35:d5:ff:cf:96:aa:e1:14:12:95:1a:69:da:59:
08:13:2b:b5:be:99:8d:a3:12:fb:a2:fa:c1:5c:27:f0:41:6f:
72:2c:e7:0a:87:52:c3:76:77:84:a4:c7:1a:91:79:47:ae:1e:
6a:c8:ba:c3:ad:6f:b8:bb:03:67:f6:e8:97:89:80:26:eb:4f:
63:4f:db:7c:cd:ef:06:aa:26:d6:4f:53:66:2a:4d:be:3c:df:
fc:42:8a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:25:48 2025 by rpki-client