Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier: kYZW+cLpdr7gNmRDzBN5mQi26LOpBPPbUkZRbdanXmo=
Subject key identifier: 73:8D:BC:00:5C:A5:3E:28:B0:0A:FA:7E:B7:AD:D0:71:33:F6:B4:77
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 0196CC177816CB85328E0D11AABE0F0FA09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number: 0F8A
Signing time: Wed 14 May 2025 00:00:12 +0000
Manifest this update: Wed 14 May 2025 00:00:12 +0000
Manifest next update: Thu 15 May 2025 00:00:12 +0000
Files and hashes: 1: 3hbfOacsgkP1pg9qyg2MfHcWFYc.roa (hash: cOfUIokArUM0fSLBq8ZJr6uobm8IIPK6h0yhiKwO2kU=)
2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: PMl0o+/nM1XMEfzvadx2FxhkgkkrcuPjLIR3RV75MHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:17:78:16:cb:85:32:8e:0d:11:aa:be:0f:0f:a0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: May 14 00:00:12 2025 GMT
Not After : May 15 00:00:12 2025 GMT
Subject: CN=738dbc005ca53e28b00afa7eb7add07133f6b477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0a:99:95:51:76:f5:31:39:2d:de:25:d7:8b:
bd:09:a0:13:af:41:3d:48:b9:75:70:aa:61:b9:a5:
77:76:1a:2c:d1:59:74:22:3f:68:5b:30:dc:77:41:
35:71:80:8f:a5:34:8c:19:01:73:e4:86:b1:c9:8f:
80:0c:2a:4d:d8:87:f5:b0:44:c2:44:c6:36:69:9d:
08:e3:79:07:fe:44:49:5a:57:b8:48:ab:ab:9d:08:
4f:ea:cb:40:13:3a:49:09:b1:08:29:bb:7a:1b:ae:
90:7f:1f:da:65:3f:cb:69:ec:1d:96:e8:88:5b:4c:
ba:89:21:da:76:c1:58:b6:31:c4:87:d3:52:65:a7:
3c:45:10:3b:9e:04:8b:bd:62:4e:e4:f0:78:46:e7:
8c:d9:ee:a8:bc:15:c6:9e:55:cc:0c:e9:c7:35:e8:
5f:d4:1e:0c:59:d5:8c:d2:12:d3:44:ab:1c:fd:3b:
ac:f4:dc:a1:a0:89:43:64:7a:b9:e1:e3:77:55:0d:
ec:29:69:43:25:88:ad:de:ef:85:ad:f3:37:39:b4:
d4:dd:c3:3a:3a:dd:f2:8c:5b:9c:06:0e:fb:76:d2:
7a:2a:73:a4:9a:75:76:fe:05:7f:41:98:17:4e:ac:
ae:26:eb:5c:f9:e8:f9:7e:a8:25:58:ef:5d:74:ed:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8D:BC:00:5C:A5:3E:28:B0:0A:FA:7E:B7:AD:D0:71:33:F6:B4:77
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ee:f4:3c:1f:23:0a:e4:cc:a9:d2:76:a5:a1:57:d8:2d:a9:
93:84:1d:75:1a:df:76:0b:23:0c:bf:6c:22:ba:15:39:7d:31:
f4:91:75:a5:81:e7:d4:88:f3:0b:55:4f:00:91:cb:66:a9:3d:
a2:b2:2b:f8:8d:02:a1:70:c4:ba:ae:62:51:4b:02:b6:24:ab:
ac:40:9b:08:a5:4f:d9:d2:b1:b6:63:99:06:41:30:2e:f5:1b:
3c:a4:53:99:d8:8d:d8:52:b7:69:bb:6b:2b:33:69:01:93:de:
92:61:08:a4:37:60:60:ac:a1:c1:3c:d0:09:0d:20:33:0f:b3:
d4:13:ff:ca:77:c4:e0:c7:60:f6:d2:d1:75:dd:fb:89:bf:de:
29:39:3a:60:41:2b:4f:19:16:91:eb:f2:21:07:aa:d2:34:84:
85:44:54:c2:a8:34:7f:03:45:47:7a:3c:33:0e:1c:f2:1f:d4:
28:50:97:d2:ed:07:b9:da:a4:29:86:7a:94:6d:1e:0c:92:40:
c4:1e:d2:5a:7e:24:56:27:cd:f4:64:72:28:51:66:7d:8e:b7:
ba:0b:a6:a7:63:13:97:ce:f9:57:cc:b0:8c:da:19:ed:18:3a:
8e:94:0e:0a:63:fb:3a:f8:e4:75:8c:a2:8a:92:01:22:9a:94:
e2:b8:b0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:48:15 2025 by rpki-client