Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier: zBgXnMccT7d41MGqPy8N5k6MdmxziW7A6w8tbdqkKFs=
Subject key identifier: 36:52:0D:77:D5:B8:22:D1:B6:7D:DD:D2:48:EB:84:67:1B:74:19:70
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial: 0196BECA08A5CE14A17FE9BD18A5B2E9AF7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 10:00:33 +0000
Manifest this update: Sun 11 May 2025 10:00:33 +0000
Manifest next update: Mon 12 May 2025 10:00:33 +0000
Files and hashes: 1: 4ghkRfOquB-e7Fok48kTrT0aVAU.roa (hash: 6SkfRPpDusU3pdgmnRmAtb8LYqLwuaj5aFdgg7X05Uw=)
2: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: BXpZUuHKbzxDFVOHGkmlyvKiteVnKC0ltxxvy6TO0Ig=)
3: k86L2r6PyseZfyszmOgSsSpazQk.roa (hash: IsdULHTb1wucLEEG+EnermzxJ4zmYkO1E7qf8JXpI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:08:a5:ce:14:a1:7f:e9:bd:18:a5:b2:e9:af:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Validity
Not Before: May 11 10:00:33 2025 GMT
Not After : May 12 10:00:33 2025 GMT
Subject: CN=36520d77d5b822d1b67dddd248eb84671b741970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f5:d2:5a:a7:a8:19:94:90:6b:ac:41:8a:f9:
78:40:47:64:4b:10:77:8c:9c:57:e9:00:26:a1:e0:
3f:c0:ea:46:8e:1a:33:a0:11:5b:06:a1:e5:c9:4e:
84:d0:b8:7a:48:91:3a:0f:9f:2f:bc:53:fb:ba:c1:
d9:73:5f:df:ae:4a:70:99:d2:9e:4a:fc:87:e7:9b:
58:24:82:4b:45:5a:f5:6f:2d:07:da:15:bb:4b:08:
93:dc:3b:ab:90:f1:9c:ef:49:74:74:d2:21:20:6d:
0a:c8:b9:c8:01:0b:43:f8:c2:4d:d2:2a:dd:88:53:
d3:4b:ce:d1:e3:26:77:ae:00:b3:d4:5d:f0:04:f4:
63:9f:85:56:e3:47:36:53:c9:2f:c7:a4:3a:ee:00:
f8:f0:fd:8a:95:2b:6e:67:52:af:67:b9:36:15:c7:
93:a5:2a:40:90:11:84:c5:42:32:e7:7b:19:46:56:
79:89:85:55:17:0c:33:70:b9:ce:cb:35:f2:88:84:
cf:49:d6:55:cb:c7:d6:b8:aa:94:7e:37:51:ea:4a:
12:f9:82:a3:3f:de:96:92:99:66:ad:e4:26:29:e1:
6e:14:e5:e4:55:1a:84:19:83:03:bc:89:e4:93:4e:
d3:a0:ec:ee:ec:72:07:1c:10:13:1a:98:74:30:a3:
63:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:52:0D:77:D5:B8:22:D1:B6:7D:DD:D2:48:EB:84:67:1B:74:19:70
X509v3 Authority Key Identifier:
keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:85:d5:6f:d3:f0:ae:61:23:73:1f:2b:c2:d2:7e:c6:df:5f:
5d:9f:5d:a4:93:ae:7d:2c:5b:42:7d:dc:48:3f:ce:1d:8f:a3:
cd:33:55:e4:90:6f:68:a5:a8:19:50:49:16:70:7b:5d:7c:73:
af:b8:13:ab:fa:6a:03:5d:56:c4:ae:68:4a:96:0c:8e:a3:8d:
8e:92:77:ed:96:ee:d3:8e:e6:ae:94:ba:b8:0d:29:49:d2:50:
3e:a9:87:5c:7a:bd:5d:de:24:55:dd:04:ae:ea:63:38:4a:ca:
27:30:af:29:ca:af:46:d1:c3:bf:62:00:04:b7:bc:a6:83:55:
6b:db:6d:6f:f1:c7:ca:a0:d9:e3:9c:25:69:d8:77:96:89:aa:
c2:5c:c3:89:ba:dd:68:5a:6e:4e:1f:0b:8d:42:a0:21:c0:3d:
7a:04:53:f4:2b:6d:34:d1:8b:3c:51:21:e2:2a:f2:de:cc:80:
17:5c:ef:40:68:69:f5:54:a7:8b:cf:ce:4c:7d:12:74:21:7f:
d9:47:ab:b0:40:ed:ab:30:b4:c6:60:c3:05:24:db:86:00:d5:
7d:06:a6:0e:c8:18:f2:47:f0:1d:a1:97:80:5c:af:8d:97:0c:
3b:46:b2:ba:c0:cd:95:f3:71:fd:88:07:6a:6b:86:29:ee:e1:
c8:59:a9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:45:55 2025 by rpki-client