Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: DqWaQaEhqkC+Ts0aXandrY5yxIwz1H5GC1DtNKwNcfk=
Subject key identifier: 21:0A:4A:E9:4F:2E:EE:9F:B6:E6:F1:BD:F1:C5:1E:EC:9E:59:4E:CB
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 0196B3D88559B091798AD13FF36506ACEE39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 07:00:33 +0000
Manifest this update: Fri 09 May 2025 07:00:33 +0000
Manifest next update: Sat 10 May 2025 07:00:33 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: VF+2FBkLjxOU41zAx9PwqRdQZ7futM0ZJI8JiFGkMig=)
2: a-zhZjuXDc_FsfQbRuaEtluPpHA.roa (hash: 5+3esVT/zzC55YQOAsi2tnDDnrmv1Y7c5U2ef5q3Qdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:85:59:b0:91:79:8a:d1:3f:f3:65:06:ac:ee:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: May 9 07:00:33 2025 GMT
Not After : May 10 07:00:33 2025 GMT
Subject: CN=210a4ae94f2eee9fb6e6f1bdf1c51eec9e594ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:a0:ce:43:78:10:00:cc:20:31:88:57:ab:
5a:10:15:06:4e:db:7a:46:95:36:b6:ef:20:5a:cf:
28:e4:b2:f3:4a:95:5f:87:49:3f:78:29:0d:22:9a:
34:19:03:d3:ca:88:20:6c:d6:ce:14:7e:9e:45:b8:
80:01:01:98:33:6b:95:b1:99:58:2d:1c:2e:d3:23:
78:ab:ab:f9:37:ae:dd:0e:e9:cb:e7:70:6c:ef:66:
94:93:40:7d:19:d4:33:90:7a:97:b4:66:54:69:b8:
ba:76:8d:a9:9d:e4:15:17:3d:77:99:45:b1:5c:c5:
5f:0f:de:ce:aa:14:80:91:ba:d8:d7:45:e1:64:0d:
b5:43:93:e0:d0:fd:9a:1a:dd:ef:64:0a:96:9a:0f:
5c:6d:98:3e:c5:ef:7b:f7:88:fc:23:20:8e:32:ce:
cb:08:88:a5:86:7b:0c:69:d0:18:84:3f:91:94:cf:
8f:92:03:85:ae:07:a0:96:6f:f5:13:77:7d:41:c9:
19:89:f1:56:5e:ee:11:b8:7a:4c:ac:f5:23:5d:ea:
f1:44:91:ea:5f:8b:ca:8c:6c:d1:44:82:97:62:76:
12:b5:93:60:32:b0:fe:b6:43:95:e3:91:26:27:39:
3d:d8:00:ea:71:5e:8b:46:0f:5f:28:bd:02:22:8b:
4e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0A:4A:E9:4F:2E:EE:9F:B6:E6:F1:BD:F1:C5:1E:EC:9E:59:4E:CB
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b2:e7:17:08:f9:ae:18:5d:7f:41:0e:6c:fb:af:c6:55:68:
b0:a2:bd:15:a4:9b:07:1f:70:1d:b0:08:04:f5:20:49:4f:f3:
b1:71:66:8e:87:7e:82:1b:cb:f8:bd:21:9d:e9:95:9a:bc:8b:
5f:65:46:5c:43:18:c9:b1:8e:74:f8:4d:23:ed:40:49:64:ad:
f6:b9:34:e1:28:f0:11:fd:f9:10:fc:79:9c:05:0d:dd:c1:c4:
78:8e:e9:06:12:80:8c:fb:97:fd:f6:1b:b3:c6:71:c9:97:38:
a5:2a:34:9f:91:ed:da:5e:e3:f4:ac:08:e4:1f:23:38:de:54:
f7:0a:7b:ce:34:98:21:c4:09:d0:06:b1:b0:b1:6d:da:da:21:
9d:a0:7a:7f:51:48:f0:85:1f:09:2e:2b:7f:ca:b5:12:45:d2:
4d:ca:67:ef:ce:42:1e:e4:1f:32:31:28:13:7f:bf:e6:3d:77:
a8:d2:0b:36:de:79:e7:a1:52:37:d2:9f:7c:4f:4d:78:ec:7a:
03:a2:41:83:01:fb:20:32:1e:b8:c6:07:2d:9c:fd:1f:77:8f:
bf:2e:9f:96:d0:33:ab:2a:9a:9e:4a:ee:8d:7f:97:d0:0a:35:
41:04:2d:da:fb:6b:8c:fb:53:a0:2e:b9:ac:b9:0b:21:cb:46:
a1:41:1f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:58:12 2025 by rpki-client