Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File: 8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier: /kG5GbmD6bFM42wZW6WRA2aHaCqu+XYGoJOyzZSD21I=
Subject key identifier: BB:07:30:8E:F7:D8:C5:52:CB:3F:9A:6E:A1:24:DA:2E:2D:02:85:C6
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial: 0196A0F725C77F03A770D91728CCE09ACCBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number: 0EEA
Signing time: Mon 05 May 2025 15:01:13 +0000
Manifest this update: Mon 05 May 2025 15:01:13 +0000
Manifest next update: Tue 06 May 2025 15:01:13 +0000
Files and hashes: 1: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: /gWi2kWnvJxlOAN1m4sw0EC5lDGUadlMiR52u+cBqUU=)
2: Mkl44sEh_I1NJhSRpZogcHN-KpQ.roa (hash: UFBdvkUQHMElnZ7pMex1cDJSyxO3mce2NK6vzaKBwPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f7:25:c7:7f:03:a7:70:d9:17:28:cc:e0:9a:cc:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Validity
Not Before: May 5 15:01:13 2025 GMT
Not After : May 6 15:01:13 2025 GMT
Subject: CN=bb07308ef7d8c552cb3f9a6ea124da2e2d0285c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:c2:73:39:7f:f2:91:06:93:bd:25:15:67:
1e:45:ac:f0:7d:78:cc:05:4f:ae:38:7e:17:c0:6a:
22:1a:10:e1:94:f4:d4:07:07:53:9a:06:cb:f4:22:
bc:7c:df:29:c7:8a:65:75:68:ab:35:30:4e:06:12:
27:37:e1:5f:e5:93:f2:14:de:96:87:a6:5d:31:83:
67:c5:c9:dd:16:d0:c7:07:6c:73:bb:ef:83:69:5c:
dc:e0:8d:3e:18:cb:d4:39:86:9b:0f:14:12:ef:1d:
1c:45:d5:b3:11:b8:4d:4d:ec:e5:ea:f9:6e:ff:cf:
82:c4:59:ee:35:7e:9b:c1:cf:01:5b:2e:0d:09:ac:
ea:19:bc:53:84:31:66:10:19:cf:08:61:dd:31:0f:
51:9c:5b:0c:a4:8a:54:61:e2:15:c7:41:c0:21:5e:
f2:b8:e5:58:81:73:1c:be:7f:c7:35:46:aa:3b:1b:
56:9c:88:ad:88:0c:b8:96:8d:82:b1:ed:35:e3:88:
bf:92:f7:b6:28:9e:f6:88:1f:a7:07:34:33:6b:21:
79:e6:13:e6:46:2e:81:08:ba:51:fc:0b:38:47:bc:
25:1c:91:0f:98:04:67:04:84:df:95:df:b7:71:1a:
c4:84:6a:68:7e:8e:b6:0e:63:76:eb:72:1f:f5:6e:
93:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:07:30:8E:F7:D8:C5:52:CB:3F:9A:6E:A1:24:DA:2E:2D:02:85:C6
X509v3 Authority Key Identifier:
keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a3:f8:6c:d3:ff:b7:e1:8b:3d:eb:09:ce:53:92:fa:68:f0:
47:be:8f:c2:12:bf:b9:bb:a0:10:2e:d4:54:96:28:bc:ad:e7:
2b:d9:41:cd:8e:d3:53:ce:e2:81:e5:a4:6c:68:af:31:5e:c5:
58:ed:9b:66:6e:a5:69:2c:8b:32:98:7e:e7:9e:e6:14:dc:c2:
f0:36:42:6d:76:60:f6:8e:90:9a:7c:2c:4f:31:69:64:eb:aa:
ee:cd:f7:6e:5b:39:63:cc:77:ff:dc:d3:dc:60:3b:6e:bb:7e:
b6:ef:c2:b6:72:27:29:5a:66:45:b8:65:0a:06:e4:d7:1f:6e:
1c:00:db:74:31:82:47:7b:14:d9:df:36:4e:0a:94:42:32:50:
d9:d9:78:b9:a4:dd:a2:26:f1:7e:e7:94:f4:f1:00:fe:33:e5:
84:33:e9:0b:ce:27:73:4c:d4:0a:4d:89:5a:62:f6:d4:f7:bf:
f6:cc:4c:c2:56:29:47:0c:b6:d5:84:d6:5d:a2:52:61:66:7b:
48:64:88:64:f7:ab:2a:aa:d6:ce:38:4a:f9:c6:04:fb:6f:c4:
a2:b8:e5:f1:34:d5:f2:c3:d5:85:ff:6e:21:89:68:9e:c0:a7:
0b:78:a0:83:4a:3e:73:6f:a9:28:85:a2:16:c9:c9:33:04:d3:
a9:45:8f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:00:32 2025 by rpki-client