Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
File: G8PBvvFfS8zE50jAiVfswimg8e8.mft (raw, json)
Hash identifier: cMo9h0waFza9CpX6bA+Brr+n2z8w9lxsJqWwG/PN4yo=
Subject key identifier: 8B:57:79:40:0F:47:AD:1E:46:0E:83:A1:95:F7:DE:37:A7:72:85:B7
Authority key identifier: 1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
Certificate issuer: /CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Certificate serial: 0196BD811F336FA9302634D0C9A9F8773A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 04:01:17 +0000
Manifest this update: Sun 11 May 2025 04:01:17 +0000
Manifest next update: Mon 12 May 2025 04:01:17 +0000
Files and hashes: 1: G8PBvvFfS8zE50jAiVfswimg8e8.crl (hash: OEbd76jXLwNMeEa4qle4Ea+ezwvCTVliTnx2231JYGo=)
2: hwl_pJftKoYgWaDLkyi1NUP4Iqo.roa (hash: zD6uA78lx0+tAtyuIqfvTt4SALf3UDD47V0kgwtFI/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:81:1f:33:6f:a9:30:26:34:d0:c9:a9:f8:77:3a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Validity
Not Before: May 11 04:01:17 2025 GMT
Not After : May 12 04:01:17 2025 GMT
Subject: CN=8b5779400f47ad1e460e83a195f7de37a77285b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:e5:1a:bd:44:52:de:06:ee:32:4b:ee:25:
77:c4:21:20:00:3c:0a:27:55:e6:6f:59:cc:97:83:
9d:cc:91:b7:92:24:e1:f3:85:3b:b4:48:f6:f7:3c:
e8:72:f5:3c:b0:7d:71:75:16:0b:1c:68:de:a9:30:
21:ab:14:ee:36:64:97:d2:48:1f:06:20:be:91:30:
33:d1:56:f5:8e:a1:1a:2b:db:84:dd:f5:c2:3b:8f:
44:1c:1b:fe:97:20:ea:3d:86:f2:91:7b:54:a3:ff:
4d:76:62:3b:bd:8f:99:a4:9f:e1:64:86:e5:62:ae:
79:e5:3c:d4:47:f4:4c:7e:a6:25:7e:02:31:09:a4:
b0:d5:30:73:f8:53:ad:2a:db:3c:5c:b5:8f:9f:aa:
a9:8a:dc:7b:3b:da:9e:f7:bf:27:73:11:41:87:d0:
45:7c:eb:e0:42:65:a3:05:74:e8:a1:c9:51:af:c3:
09:cc:70:f9:f9:40:04:5e:0f:94:3d:0d:67:bb:5b:
1a:44:a1:03:35:6e:bd:4f:70:56:87:25:42:ea:74:
6a:d5:69:df:20:c8:c1:9f:8c:0c:0e:b5:4c:29:50:
be:30:91:5d:43:3b:49:a9:7c:66:5c:5f:b1:be:1a:
e4:ac:13:af:b5:85:cc:e0:24:c3:2c:23:f4:c8:99:
f0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:57:79:40:0F:47:AD:1E:46:0E:83:A1:95:F7:DE:37:A7:72:85:B7
X509v3 Authority Key Identifier:
keyid:1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:32:75:2f:37:53:e8:96:55:fb:1f:65:8f:28:3e:bf:ab:93:
6c:39:cf:fa:68:99:f6:f0:14:0b:36:d1:f9:20:7e:ee:11:91:
01:d2:a4:f8:51:b3:52:61:1e:85:de:f7:70:32:9e:52:e8:81:
08:33:34:51:80:dd:33:c4:cc:08:ed:96:94:12:f7:21:2b:d1:
5d:2c:62:da:cd:eb:e6:e1:ab:99:d3:53:84:c1:27:ee:cc:0f:
f0:6c:fa:fe:70:4c:0f:29:ee:17:a8:74:77:6c:bf:06:73:29:
c7:a5:13:c9:bb:4c:95:26:80:8a:96:74:97:20:05:a8:d0:f3:
f2:19:4f:44:73:ab:68:eb:21:54:3e:d6:2b:ea:cd:38:ac:c5:
35:1e:c2:a1:19:af:dd:b4:ba:3e:8b:48:5f:91:ba:55:f2:fb:
5b:15:c7:38:cf:0f:0f:0a:04:fb:82:90:fd:c8:c9:a4:ee:80:
21:e3:d3:a5:83:dc:c5:82:27:9d:11:00:df:50:90:fe:3d:98:
f7:47:96:af:70:d4:8b:77:19:49:58:89:13:5d:83:9e:dc:81:
ad:8d:97:d1:2e:19:22:85:a8:a5:e9:49:81:c5:ed:f0:ae:fd:
e2:e3:cc:8a:1a:06:34:55:2b:49:e2:0d:02:0c:f8:67:22:65:
57:3a:c8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:50:23 2025 by rpki-client