Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
File: B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json)
Hash identifier: uHtBtgHwMTc7WfkLwqr4ix12ww6Z7EKvb2RIgSyiKWo=
Subject key identifier: 21:76:2C:6A:7F:7C:D8:AC:EC:39:A4:92:A6:7E:08:CB:53:7A:70:A2
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial: 0196C87227BA1A3C218C422926DE90160E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
Manifest number: 0DF8
Signing time: Tue 13 May 2025 07:00:46 +0000
Manifest this update: Tue 13 May 2025 07:00:46 +0000
Manifest next update: Wed 14 May 2025 07:00:46 +0000
Files and hashes: 1: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: 6E73cv0E2OE2PnM5CQqV62iq9wDLDic/hjweHuwApiw=)
2: FrqlWltvg2IIueyy45ogVbfzXOI.roa (hash: I5FtBNSL1o5XSBQN3V8eqj4CiYkfCwGhk95ch/7f1y0=)
3: w7QCmizrQXeuidochTL3wPaTPwQ.roa (hash: H6wbvBF9uFQ8IN4rm+CScPncC9WaN8oR2hYLVqdaZWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:72:27:ba:1a:3c:21:8c:42:29:26:de:90:16:0e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
Validity
Not Before: May 13 07:00:46 2025 GMT
Not After : May 14 07:00:46 2025 GMT
Subject: CN=21762c6a7f7cd8acec39a492a67e08cb537a70a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:84:65:61:4b:76:27:a8:d7:83:f5:15:92:cd:
17:65:fb:ef:37:c3:fe:99:13:4b:4a:43:4b:b8:2d:
5f:67:ca:c5:fc:e7:40:36:dc:5a:8d:54:3d:23:f9:
04:e3:ba:b2:77:d3:a8:32:d8:af:45:ae:a0:64:e3:
90:72:6d:cf:06:76:b6:a2:73:5f:7d:59:db:f5:bd:
84:0e:fe:36:8b:33:e2:24:b0:5a:db:59:9d:5e:03:
4c:8b:58:ce:2c:73:cc:b3:d9:85:33:68:8a:c5:50:
75:e8:9f:5a:ae:43:67:a5:2a:c7:c9:ec:a6:45:d2:
b9:e2:36:f2:8d:5d:45:1f:f3:b6:8a:e9:30:0e:a6:
c7:77:11:0a:5b:e0:cc:5c:fd:17:1b:c2:39:48:93:
0c:20:ef:91:c8:ad:06:1f:fa:ea:98:18:02:a6:59:
61:c2:a6:64:a6:20:29:5d:d2:e4:a1:ef:5d:26:68:
fb:ac:e9:5e:3e:a8:23:8e:b6:b7:6c:3a:9f:21:90:
d6:b7:5b:fa:81:1a:bd:85:57:a6:11:31:c4:8d:5f:
e2:b4:dc:43:a3:d5:47:e3:8f:19:08:9d:56:45:cd:
f5:cd:8e:b8:13:07:c6:96:2b:30:6e:d8:ba:8a:9e:
47:0a:a7:ee:1c:71:e5:74:f0:d0:33:ef:9d:57:58:
d1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:76:2C:6A:7F:7C:D8:AC:EC:39:A4:92:A6:7E:08:CB:53:7A:70:A2
X509v3 Authority Key Identifier:
keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b9:17:16:d5:b6:67:36:1b:d9:8a:32:1f:82:3c:76:db:d9:
a6:de:54:ef:63:d1:11:1b:02:7c:15:26:e5:3c:fa:47:e3:6c:
b8:0a:8b:f5:c4:75:c9:14:f0:3f:f7:7a:d9:b4:d8:e6:31:99:
37:73:84:39:bb:c5:3e:84:5d:e4:8a:f8:48:63:00:6f:0a:04:
c7:5b:67:e8:41:cb:06:e4:cd:27:4b:d4:86:ea:b5:dc:18:93:
2a:b4:79:69:5e:1b:2d:bf:d7:d4:9e:77:c6:91:a6:f6:df:3d:
ad:5e:9d:2e:8b:e8:1d:18:8b:ed:a6:c6:1a:54:7e:9a:a1:ea:
99:73:27:df:c7:f8:94:fa:0b:11:f5:f1:cd:5b:55:7a:cd:86:
d0:2e:05:19:22:88:68:34:f9:f7:f0:d8:1a:2e:29:54:ae:8b:
9c:b4:e8:32:8f:a0:2b:cf:94:d2:7e:1b:64:b3:54:82:a3:5c:
f7:1f:ea:e7:68:88:f7:c3:fd:75:68:29:4e:a7:6e:b0:16:8d:
e2:29:ce:39:19:34:d3:2d:46:d1:ed:b0:8f:94:a5:5f:38:6c:
4b:83:ca:90:09:34:e9:c3:4c:e1:c7:f7:c6:63:cc:17:0e:d1:
74:06:74:04:4e:0d:a6:d5:80:2a:b7:fa:f0:86:de:15:0f:85:
28:92:d6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:23:55 2025 by rpki-client