Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
File: 8vZyvbewdlkUflh9RDGqYE92o4Q.mft (raw, json)
Hash identifier: mNDmCT4B37NtLzH7/Kv8G5PH/O4L0ZXnxM0DtPLhmAM=
Subject key identifier: BE:A4:66:0D:D8:EC:F0:FD:8E:C9:58:87:F1:3F:EF:FB:D0:C8:99:44
Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
Certificate issuer: /CN=f2f672bdb7b07659147e587d4431aa604f76a384
Certificate serial: 0196CE740E26EDF6C88578116808D8665C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
Manifest number: 14CF
Signing time: Wed 14 May 2025 11:00:34 +0000
Manifest this update: Wed 14 May 2025 11:00:34 +0000
Manifest next update: Thu 15 May 2025 11:00:34 +0000
Files and hashes: 1: 8vZyvbewdlkUflh9RDGqYE92o4Q.crl (hash: j9S6aw2iPhf+oPV8NIk+gFF/+BSYZiyaVsRzFHARy/A=)
2: MZX1sQ-Npgh0Pud-IcGKNSLyo0k.roa (hash: U9/To+oLXeceO29CXxgG6V0U8rAZo8+5KCoNTba0dLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:74:0e:26:ed:f6:c8:85:78:11:68:08:d8:66:5c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384
Validity
Not Before: May 14 11:00:34 2025 GMT
Not After : May 15 11:00:34 2025 GMT
Subject: CN=bea4660dd8ecf0fd8ec95887f13feffbd0c89944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c7:3c:40:02:42:ee:60:8f:a9:b0:81:06:7e:
92:fe:14:2f:6e:b3:dc:59:09:3d:88:8e:ed:34:5f:
93:2d:ea:25:23:d8:32:53:e6:33:c3:98:35:fc:3c:
6d:17:04:e8:f4:61:c9:45:dc:c7:49:54:6b:3e:78:
1d:f5:6f:a5:84:91:2e:a1:74:bf:b2:84:ba:55:dd:
43:34:79:a7:dd:a1:11:5f:a6:69:7b:d7:ff:3c:57:
15:30:4a:07:c5:27:69:b7:c4:8b:fc:99:5e:d6:58:
c0:1f:d0:bd:3d:b1:8a:bd:67:bb:be:14:e5:94:62:
3c:d3:e5:3d:a1:b7:c6:d8:bc:2b:db:ba:5f:f0:9b:
28:12:d1:e6:76:40:74:cb:da:2f:86:7d:64:4a:60:
db:e7:17:8c:29:fc:63:44:33:ad:b1:4e:bd:28:27:
d2:0d:e8:5c:61:ee:cf:64:04:98:3d:c0:19:57:7a:
d1:04:d5:67:a3:92:a0:76:53:fe:7a:fe:43:7a:e4:
dd:8e:1f:83:5d:11:5e:fb:67:d5:64:95:50:68:b1:
7c:7d:a1:55:70:bd:ae:54:fc:82:b4:fc:c3:d1:ef:
57:1a:bf:9b:5e:26:1b:a4:90:f9:53:21:75:e9:70:
c2:92:f3:8e:2d:3b:5b:fd:57:08:3a:18:3d:99:db:
df:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A4:66:0D:D8:EC:F0:FD:8E:C9:58:87:F1:3F:EF:FB:D0:C8:99:44
X509v3 Authority Key Identifier:
keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:65:93:21:25:77:69:ca:69:41:bd:ff:07:93:60:15:19:0e:
8b:af:c9:2f:be:c6:19:9f:af:4d:4d:b9:37:71:b4:a1:d3:20:
79:5a:d4:25:91:df:77:e6:45:a0:c5:c9:0d:82:9f:ce:33:21:
6b:e1:c5:fb:81:bf:24:04:f0:25:c7:cd:35:da:3d:48:6d:55:
09:18:e6:b7:48:28:bb:c9:1a:36:5e:5f:33:f4:5c:25:32:a2:
12:e3:8f:b4:8f:de:d2:6e:dc:ea:f2:9d:9a:25:13:b3:cc:a7:
f1:f3:5c:6e:a2:eb:96:6c:9c:bf:25:f0:58:c9:e1:ac:04:1f:
e6:d0:25:e0:cc:c8:7d:b0:5e:fe:7d:dc:7b:b4:85:d0:ab:62:
81:46:5d:80:5b:00:30:14:a2:b4:68:3f:60:98:2d:2f:43:8a:
bb:c6:1c:56:fa:2a:0b:8d:b3:3e:84:ab:88:0d:cc:d5:42:b8:
63:13:0c:77:3d:66:8b:ca:c3:82:6a:4e:24:c9:3b:a2:54:a7:
ef:f1:f8:c6:9a:b8:fa:a3:e8:96:86:a9:7c:6e:fc:0d:a2:90:
4a:95:bb:53:c9:7f:a7:9d:3f:17:fa:50:68:29:f2:44:1f:80:
ca:7b:8c:e0:26:b6:95:74:40:c9:cb:69:d2:da:7f:e4:68:f3:
2a:b1:c8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:41:23 2025 by rpki-client