Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
File: 8bv5vuUx897i0Du_Tmnvgu7bma8.mft (raw, json)
Hash identifier: jEM61EHsTKrnRMnijUiDyX/EPVyxB0c689zWAiqC45U=
Subject key identifier: BC:8A:4D:5B:7C:6E:A2:EE:E1:1E:A2:5E:8E:71:D3:AF:B4:93:EA:5F
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Certificate issuer: /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial: 0196D4ACDED0625AAAFD64030873E054A679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
Manifest number: 10EA
Signing time: Thu 15 May 2025 16:00:21 +0000
Manifest this update: Thu 15 May 2025 16:00:21 +0000
Manifest next update: Fri 16 May 2025 16:00:21 +0000
Files and hashes: 1: 0tRdpRIVKa8GC5rndgVUBjWyq_0.roa (hash: zQ8BfDuwqWf4BKhuE29aPhx2YBI5m36iLFxsbczWouw=)
2: 8bv5vuUx897i0Du_Tmnvgu7bma8.crl (hash: nzqcRDCZhIJVE0L7aKtMhIkYp7mXp9ApTFjeHgOxqlA=)
3: MkYvLYpqbrY1k1hziBPcgNzDk5A.roa (hash: 9jZ4rUSHtTJBWwTiSaqDWjUP8V/ZrhGAYaJndS1KB3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:ac:de:d0:62:5a:aa:fd:64:03:08:73:e0:54:a6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Validity
Not Before: May 15 16:00:21 2025 GMT
Not After : May 16 16:00:21 2025 GMT
Subject: CN=bc8a4d5b7c6ea2eee11ea25e8e71d3afb493ea5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:a4:d0:91:51:05:48:6d:64:77:9e:f2:9c:
1f:84:8c:6f:3c:d7:38:7b:b4:e0:9e:6f:2b:e0:bd:
44:19:51:df:d0:58:cd:13:24:26:7b:4a:c5:f3:f3:
22:72:6c:40:2d:63:2a:7c:8d:4b:bb:96:d3:53:68:
b2:e3:c9:fd:a3:c3:4b:8f:4a:b9:41:f9:78:b8:cc:
83:28:e4:2a:26:4a:49:f3:9e:4b:da:92:21:3e:7e:
f5:1d:de:3f:14:a3:d6:17:42:11:74:8e:33:cf:19:
b6:86:33:93:a2:f7:75:2c:9e:3c:5f:9b:8c:c7:e8:
14:e1:08:f4:fb:aa:8f:26:4a:2d:fe:44:e7:da:df:
a4:27:31:ae:2b:79:81:57:13:57:a3:1e:5a:2f:39:
5b:0f:44:ff:23:6f:85:11:48:bb:ad:1d:f7:5e:db:
ce:fe:42:06:b3:81:5e:ca:c2:24:e3:3e:9c:87:89:
95:fd:1c:1a:81:f2:84:ad:02:48:f2:f9:c5:7c:b3:
de:67:ea:76:b7:65:3c:ec:9d:5d:91:c6:b8:25:98:
a6:ba:82:c4:96:43:36:88:28:c4:50:93:97:06:67:
fe:46:bb:f6:c5:60:e7:51:3d:bc:d3:e7:5a:2c:69:
95:3f:8a:78:d1:47:d2:85:dd:71:d0:cb:8f:be:d7:
03:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8A:4D:5B:7C:6E:A2:EE:E1:1E:A2:5E:8E:71:D3:AF:B4:93:EA:5F
X509v3 Authority Key Identifier:
keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:23:7d:65:59:70:57:d7:4f:bb:5e:c0:85:b6:fc:1a:9d:e9:
54:44:b2:e7:b1:cf:e2:7f:61:23:46:e6:5a:7b:96:15:84:c5:
e2:dd:3f:a8:aa:7f:79:45:6f:7a:6a:a9:44:46:d0:2e:ba:00:
90:15:53:d2:60:8f:86:9e:da:1d:a0:b3:0e:3a:f6:09:1b:0f:
8c:f5:b0:0e:ff:09:a6:b6:38:83:89:39:a5:40:44:ce:cc:84:
56:34:9a:9c:08:76:19:11:52:d4:29:ea:a9:57:1b:2c:f8:6f:
f8:d7:6f:e8:a1:fc:00:77:1f:e8:c7:6b:56:01:a1:c2:85:4b:
a1:46:44:3f:e5:85:29:c8:49:c0:eb:b9:4d:ed:f3:ae:8f:9f:
20:94:e5:b5:fb:cd:b6:d3:4c:1b:1e:99:fd:78:7e:ec:ef:ab:
f3:42:36:37:dc:64:af:8b:82:55:2c:0a:38:54:8b:88:1f:ec:
47:f2:b2:5f:ab:7f:11:06:15:be:71:6b:71:c2:ef:8b:55:67:
b5:5f:10:b3:d6:7f:51:37:a6:a9:c7:75:e5:a2:2a:49:fd:fc:
05:52:fc:73:ab:e6:29:03:46:e4:80:5d:48:76:9a:51:56:10:
9a:b3:f6:cd:27:8b:25:fa:91:89:9e:10:a7:aa:b6:24:1b:42:
31:e6:e1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 20:39:47 2025 by rpki-client