Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
File: B8n9CgjdBL-Yalvahugx34BI8q4.mft (raw, json)
Hash identifier: x7o2/SFkQw9PbINirDjeMFnWW46cdegdrrEU/6UfWvk=
Subject key identifier: E4:E7:A3:30:30:0A:FE:22:C8:35:22:08:0A:D3:F9:1B:93:E2:38:A2
Authority key identifier: 07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
Certificate issuer: /CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Certificate serial: 0196BF6F0FA1B4DF0F786E9A1D18D9406A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 13:00:48 +0000
Manifest this update: Sun 11 May 2025 13:00:48 +0000
Manifest next update: Mon 12 May 2025 13:00:48 +0000
Files and hashes: 1: 8s5jlmVuyTPiRv4H9BvQU42g7nw.roa (hash: Ucu3y8/kR6J85jmowJDRLpHtgn2LtVqQioF1Y1wmZq4=)
2: B8n9CgjdBL-Yalvahugx34BI8q4.crl (hash: oLu5ypssHo9q5ND6+9AecqyIuwQOaTzCSRmwyh06w6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:0f:a1:b4:df:0f:78:6e:9a:1d:18:d9:40:6a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Validity
Not Before: May 11 13:00:48 2025 GMT
Not After : May 12 13:00:48 2025 GMT
Subject: CN=e4e7a330300afe22c83522080ad3f91b93e238a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ce:20:80:98:1b:e2:c1:81:25:8f:56:bf:41:
c2:6d:5c:08:9f:c1:60:26:f5:4b:3a:5b:ae:0f:9a:
bf:13:60:d5:58:2c:8a:1f:b8:6c:e0:48:8d:07:c6:
39:4b:7b:ff:65:bf:72:1b:80:d6:51:70:f6:38:0c:
fd:e3:0d:00:3c:e6:4e:1b:34:7e:dd:9e:06:59:a1:
7a:b0:48:50:d1:14:41:52:81:dc:0a:70:3d:22:1c:
1d:66:a1:2f:42:b3:a1:9b:1f:37:01:df:5a:18:0d:
a6:3c:88:d3:29:f9:43:9f:f8:a8:3b:34:32:08:0d:
31:76:38:ff:a3:a7:ee:43:2e:73:29:8f:7d:a6:6e:
c2:d3:ef:87:13:95:f1:e4:c5:33:ef:ac:85:6d:27:
91:b8:f9:fe:9b:8a:d3:ab:51:4d:a7:84:3e:17:7e:
d5:f4:8e:14:37:04:94:7d:f3:01:00:ee:f4:72:ad:
c7:d5:21:d9:00:89:20:e4:82:15:6a:35:10:0f:39:
ad:99:04:34:e4:15:fe:d4:8b:1e:94:71:50:9c:b9:
cf:ef:98:5d:7a:94:bc:06:f3:f3:6a:c0:fc:9d:91:
b7:f9:b8:a6:00:ae:e7:dd:54:4a:a4:11:8c:aa:9f:
eb:e1:ac:e7:fc:fa:ca:7f:15:c4:1f:31:f4:bf:16:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E7:A3:30:30:0A:FE:22:C8:35:22:08:0A:D3:F9:1B:93:E2:38:A2
X509v3 Authority Key Identifier:
keyid:07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:65:a8:3b:af:66:ea:25:fd:17:b7:55:a3:fa:04:95:db:9d:
c9:c4:73:52:01:3f:75:69:08:9c:cd:df:b9:0f:bf:67:d9:cf:
f5:86:fb:80:20:34:89:62:8e:62:9f:a2:e7:15:55:c6:ea:46:
8a:e6:5e:4b:79:5f:2a:32:c8:cd:3d:3c:a2:55:3c:44:b6:db:
ca:d9:2a:a3:2a:22:3a:b7:6c:ff:1f:f0:f3:dd:1c:93:c9:ad:
7c:12:25:74:0f:02:e4:b7:36:b0:d7:b2:38:b3:9a:ec:3f:39:
56:11:dc:90:62:50:d6:c4:6e:03:f4:c3:fe:34:a6:a3:7a:49:
e2:cf:74:a5:db:1a:c4:25:30:35:61:c7:fb:e9:fd:9a:f1:9a:
59:6a:ee:f2:5c:89:ec:fc:ee:dc:65:63:0d:e8:c1:e8:b1:40:
26:6a:ee:cd:f1:0f:33:15:66:10:46:87:84:09:1a:20:cb:1f:
d6:09:c2:39:3c:6c:87:65:42:62:0f:74:8f:9d:89:7a:f4:15:
1f:41:30:c2:59:ed:62:96:48:74:43:13:6c:13:6e:95:de:0c:
dc:fc:8c:12:d3:84:62:f3:ab:5f:86:fa:be:8c:4a:f2:d7:33:
99:44:f5:70:4e:af:49:ea:34:b4:86:84:a7:56:4c:e0:61:f9:
40:04:3b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:00:55 2025 by rpki-client