Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
File: s8hW6VbErdthWY88JInyvfbtHRg.mft (raw, json)
Hash identifier: pVJs5dPKIgoSazxfvVnQ9oH9nsQy76S3OWOFJ2y7L/A=
Subject key identifier: 79:CC:DF:18:FE:8C:F5:B4:9F:A2:22:34:80:A5:D4:B4:63:87:9F:1D
Authority key identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
Certificate issuer: /CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Certificate serial: 0196A98B9278BED1DF84504CA9B37D973C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
Manifest number: 14BA
Signing time: Wed 07 May 2025 07:00:18 +0000
Manifest this update: Wed 07 May 2025 07:00:18 +0000
Manifest next update: Thu 08 May 2025 07:00:18 +0000
Files and hashes: 1: Kc4V5tzdi4xhmWeJoyXZlmZAD6U.roa (hash: gVw1MMRDs2rY597vN0xWVEhdeHW2cAUodm7HsTOIyc8=)
2: s8hW6VbErdthWY88JInyvfbtHRg.crl (hash: znwDw9vhY2ff/TfGBXCNA90q/xtR2AT8z+abcOxD3P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8b:92:78:be:d1:df:84:50:4c:a9:b3:7d:97:3c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Validity
Not Before: May 7 07:00:18 2025 GMT
Not After : May 8 07:00:18 2025 GMT
Subject: CN=79ccdf18fe8cf5b49fa2223480a5d4b463879f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:2d:71:d0:78:53:a9:68:a6:62:53:ed:c6:
d1:69:84:d1:7d:5e:b2:3c:ae:ec:24:25:30:b3:6d:
f8:1b:ec:cd:be:9e:f5:91:96:9d:bf:06:df:c5:40:
49:a3:13:07:17:73:f3:94:80:0f:98:0a:63:99:34:
ea:51:46:02:82:20:b2:2c:80:3b:2a:65:d4:de:c7:
66:7d:a5:1c:cc:e6:f8:4c:91:d8:ab:8d:fa:5f:cf:
31:3e:fe:b0:ed:1b:5e:bb:05:d0:41:77:3a:71:2e:
f0:36:20:43:58:fa:16:3e:08:27:10:a1:ab:eb:a6:
30:a5:a3:29:c3:b1:0f:95:bf:bb:8e:03:81:6d:5a:
d6:17:a9:82:ac:a4:de:6b:c5:02:3c:db:e5:93:4f:
9b:6e:24:1f:e9:96:3d:2d:f8:cd:ad:0f:2e:d9:fa:
20:2c:b4:d3:3f:a6:07:a9:3b:8e:4c:f1:ac:e9:0e:
27:8b:53:bb:07:50:47:17:54:ca:33:65:46:65:1f:
b3:a8:17:24:12:f7:3f:7e:5f:79:b7:c0:d0:e6:01:
ea:d3:4a:5b:90:97:20:03:e5:aa:66:fd:5e:2e:a8:
0a:1a:b4:0c:6c:1d:9d:f6:48:56:71:cd:74:a7:06:
ed:9d:4a:28:71:6c:6d:79:72:b8:1f:b4:da:92:f4:
6a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CC:DF:18:FE:8C:F5:B4:9F:A2:22:34:80:A5:D4:B4:63:87:9F:1D
X509v3 Authority Key Identifier:
keyid:B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:26:eb:00:12:9b:eb:4e:3b:f3:39:88:6d:6d:57:95:7a:86:
3a:40:fc:75:63:4c:42:f4:6c:b0:6c:74:7f:53:b5:b5:51:54:
b9:7a:d9:d4:e6:c4:7b:08:3d:68:89:bf:0f:e2:8a:c7:be:28:
e9:a6:fe:0a:a9:2d:39:0b:86:82:a2:99:2d:65:22:2b:e9:95:
b9:89:5e:4e:ea:f0:47:1e:85:67:2d:08:c6:fe:f1:90:60:fd:
e1:e0:42:3d:80:79:5e:d1:67:bb:a2:78:85:14:29:96:57:63:
3c:d9:9f:82:5d:c4:c7:98:a4:f5:1b:da:68:7f:ac:2d:45:c0:
31:ca:da:95:7a:7a:08:28:dc:fa:ba:34:b0:8a:58:0f:06:95:
00:c5:b1:d0:ec:71:cf:43:02:ed:8a:a8:68:0e:af:d0:dd:cb:
90:26:1f:2d:01:fd:f0:0d:a8:52:6d:c3:26:7b:60:94:7e:63:
f2:8b:6b:06:30:24:e4:45:11:85:1f:cd:26:92:17:e1:d3:43:
90:dd:63:e0:62:14:82:5c:d6:d0:b2:0d:a9:1a:9b:79:46:36:
ad:ee:9b:ec:14:dc:11:0c:5b:2d:84:6b:21:65:3f:33:f2:91:
f3:3f:10:33:a9:2e:29:6b:6c:a0:20:5e:83:2a:51:47:7a:b6:
30:7f:1a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:35:42 2025 by rpki-client