Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
File: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft (raw, json)
Hash identifier: OvmW/Q/gc0rn54oXnq3t0KrlOD+qtiQ+aA1UBGWzMBs=
Subject key identifier: E8:82:27:43:E3:01:35:7D:46:6B:2D:B8:31:F2:4F:38:E9:73:08:84
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial: 0196CCF3E2CD9A393AEED4A0EABC879F8ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
Manifest number: 153B
Signing time: Wed 14 May 2025 04:00:57 +0000
Manifest this update: Wed 14 May 2025 04:00:57 +0000
Manifest next update: Thu 15 May 2025 04:00:57 +0000
Files and hashes: 1: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl (hash: +PQaB36IbqEsnufm9mNqgkEXGlOMXJjB8m6oGypEWdY=)
2: d-g1g1WIQH2eW5zQOoLECyf2CbU.roa (hash: 4hlHKC2roVEpNMRQA5ne6l615543DSp4qxsP/od40+A=)
3: kHVwAjV50K04XcEC52VZ9Z8xRlA.roa (hash: 2Boh063HYNHe4qTfS7TAeZC6aTKdY96/vHBa+9B6mso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f3:e2:cd:9a:39:3a:ee:d4:a0:ea:bc:87:9f:8e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
Validity
Not Before: May 14 04:00:57 2025 GMT
Not After : May 15 04:00:57 2025 GMT
Subject: CN=e8822743e301357d466b2db831f24f38e9730884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5a:fb:4b:8e:46:32:24:5e:a0:ca:8e:5c:92:
58:a4:fc:0d:6b:f7:ed:db:14:47:da:6f:77:b7:c2:
ba:cb:60:6d:16:73:f2:71:b3:83:b9:b4:9f:72:5f:
44:04:8c:0a:d9:e2:ab:ab:eb:c6:37:0f:fb:c9:9d:
90:56:66:03:d4:a5:67:41:66:b2:08:97:31:f9:25:
60:e6:4d:e3:b6:95:3b:20:1a:82:af:bb:92:96:a6:
0f:c8:84:1a:d0:85:e4:1e:11:ef:d8:49:ce:6d:b5:
fa:bb:9a:96:4d:b3:f8:48:ca:24:e3:02:7c:e7:1c:
f7:ba:3b:45:44:62:2e:77:d2:09:62:c4:80:52:ce:
ae:b9:8b:1a:44:d3:aa:64:c0:08:a1:aa:e3:5a:c2:
fe:a7:66:83:8e:d5:3f:5a:fd:df:6c:a8:40:86:c8:
db:f9:eb:8b:fd:ba:9c:1b:45:9d:29:b4:96:60:fe:
f9:b9:80:22:3c:61:bd:7d:24:b7:73:55:b2:c4:79:
d4:e6:bb:d5:e5:77:63:ce:61:73:f6:77:8c:83:88:
cc:a9:f4:3b:d1:0c:bb:e8:64:b7:be:6b:f6:e5:28:
2f:87:b6:db:a4:f8:6d:b3:bf:b6:22:2c:1c:76:ed:
89:8e:30:c0:80:27:89:43:a7:08:c5:2f:06:8f:67:
51:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:82:27:43:E3:01:35:7D:46:6B:2D:B8:31:F2:4F:38:E9:73:08:84
X509v3 Authority Key Identifier:
keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6c:56:41:c3:53:71:41:49:e5:fc:f4:02:6c:8c:be:58:4e:
7a:9e:44:c1:49:f2:66:26:dc:ce:6a:c2:bb:a1:cb:c8:56:26:
e4:47:0f:36:6d:7f:44:ae:c6:be:b5:c4:f5:39:7f:23:95:7f:
ef:ac:2a:fc:62:cf:bb:65:8e:05:b6:22:18:fd:f1:eb:b3:f4:
d8:6b:d8:3b:70:6b:5d:62:91:50:0c:1f:62:e6:af:58:19:dd:
84:cc:d0:64:99:01:52:4c:0c:4e:55:27:a7:ff:64:49:85:b4:
01:69:85:5d:e2:d1:a3:27:59:09:6e:95:b8:f0:60:0f:3e:13:
ac:b1:30:00:5e:0e:1e:4f:40:32:fd:0a:98:fc:ec:d4:f6:f4:
07:69:57:9d:57:ab:2d:85:02:59:b3:46:b9:de:77:50:7c:47:
33:13:29:2b:f5:4e:9d:92:c2:c8:57:6d:64:33:65:87:b3:8f:
a7:91:44:f2:55:3c:e1:62:81:82:4b:39:3d:26:78:89:50:0e:
42:02:ed:0d:0b:1f:8b:71:36:90:69:59:66:82:84:74:b9:99:
8a:47:d0:bb:8e:35:65:f2:23:31:fb:fc:76:34:db:f9:af:3a:
f8:66:a9:f5:56:cb:98:69:83:9f:b7:55:c1:97:d1:15:2b:86:
31:44:e9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:54:15 2025 by rpki-client