Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
File: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft (raw, json)
Hash identifier: NL/psFDLAWdi9yjevuEZj79DqPjwOB1kUftkjQrGWCA=
Subject key identifier: D7:6B:B2:35:7D:DE:4B:09:B6:58:22:53:1A:B0:92:B6:7E:A8:E4:CD
Authority key identifier: F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
Certificate issuer: /CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Certificate serial: 0196DC6647E5CB55BFB484148E2FDAB2F2D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
Manifest number: 0951
Signing time: Sat 17 May 2025 04:00:12 +0000
Manifest this update: Sat 17 May 2025 04:00:12 +0000
Manifest next update: Sun 18 May 2025 04:00:12 +0000
Files and hashes: 1: 8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl (hash: 1MiK9/YC/HK+PSPdpklje1WKqhue9+5u8fnBjDUC380=)
2: SeOuDtHpMnNedoWWR3YCwAFSo6Q.roa (hash: KKrsIQvSnuAAjrYFyC+00nKT3QiU4KGPAaz0PYrqnb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dc:66:47:e5:cb:55:bf:b4:84:14:8e:2f:da:b2:f2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d4116975d3e87bd8a28e643c69a3081de0019f
Validity
Not Before: May 17 04:00:12 2025 GMT
Not After : May 18 04:00:12 2025 GMT
Subject: CN=d76bb2357dde4b09b65822531ab092b67ea8e4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:4d:81:ac:30:9c:b1:3a:0c:d3:b5:40:5a:
4a:29:93:ac:5a:3c:61:fb:97:16:a2:19:ff:0c:b3:
e3:85:5a:f4:db:4c:5d:05:97:ef:ef:0f:aa:99:72:
b4:c4:44:b8:e4:f4:37:20:86:80:2f:7d:e3:f5:ff:
50:bc:a2:e2:80:33:1c:a1:7c:a8:49:ac:3b:4b:bc:
bc:0a:2e:4c:d1:5f:7f:62:51:db:f8:a4:7c:8a:7b:
64:33:70:34:f7:5a:8a:0d:ed:bb:96:19:a1:f8:92:
14:6b:3a:2e:c8:24:86:e5:b0:04:88:10:c1:db:bd:
a4:81:7e:29:30:48:23:e9:09:f3:18:c0:2c:ea:88:
18:bf:e1:ab:bf:0a:bf:89:34:5d:74:9b:54:c0:b9:
4f:6d:5f:c3:f5:72:14:10:b8:80:7d:b8:df:90:19:
c8:f2:c8:ba:f8:60:d7:e4:f2:33:50:a3:e2:f1:3d:
5f:87:6f:93:f3:8e:ea:81:dc:ba:00:4a:77:a2:da:
9a:ee:f3:df:2b:70:9e:5c:f5:f4:d3:35:a8:53:29:
1f:b2:f3:39:86:d4:39:73:64:14:62:d0:75:f8:2b:
7a:af:a6:44:97:38:da:81:61:cf:f2:44:72:c6:0d:
7c:54:fe:22:3b:92:e0:e8:04:65:09:f9:b2:98:52:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6B:B2:35:7D:DE:4B:09:B6:58:22:53:1A:B0:92:B6:7E:A8:E4:CD
X509v3 Authority Key Identifier:
keyid:F2:D4:11:69:75:D3:E8:7B:D8:A2:8E:64:3C:69:A3:08:1D:E0:01:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5996e1-2ff0-4bb7-a880-faab9cae1e81/1/8tQRaXXT6HvYoo5kPGmjCB3gAZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fc:55:61:32:16:d3:42:6d:da:88:8d:64:d9:09:35:78:1c:
60:3a:08:54:0b:1e:a4:5e:c2:28:97:84:fb:30:52:16:1f:10:
79:98:b5:4a:27:24:eb:f3:62:a6:46:86:90:14:87:54:e8:c2:
e6:8b:6f:8e:c8:d6:fd:8d:13:88:65:b0:9c:93:c9:b3:f0:7a:
03:a5:cb:4e:9a:ec:4f:30:cd:1b:ca:6f:f4:6e:c0:d6:3d:33:
95:d9:9a:e5:51:3f:f9:1d:bd:8e:20:87:1b:c5:bf:8b:51:8f:
d4:49:f7:80:99:f0:e3:f8:73:c1:33:fb:9d:52:9a:73:3a:dd:
a9:7e:07:91:f6:89:97:b8:af:6c:a0:89:97:c7:16:cc:d7:dd:
0a:90:f1:43:b3:32:03:da:5c:29:d7:42:6b:2e:08:77:b7:b7:
cc:f8:b3:65:57:a2:50:1f:5e:86:ff:6e:64:70:97:90:bc:01:
20:bb:bb:75:55:6e:fa:27:26:2e:e8:e1:57:e1:57:65:fe:af:
6a:78:1b:d1:49:dc:63:7a:d7:b8:33:e3:a3:2f:76:5c:e9:d6:
f6:02:c4:ef:d3:a5:88:0b:a7:33:37:85:34:22:29:a2:41:a6:
bb:34:38:79:59:93:f7:55:c4:42:9d:6c:99:14:ec:1f:09:00:
50:5a:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:23:39 2025 by rpki-client