Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
File: 8v_48bgcLGFPw-lOsXy6CUAhGgE.mft (raw, json)
Hash identifier: duZraItC98QGPFhwjanITPDOH/9L1oFWONkfrF8ryg8=
Subject key identifier: 29:D6:B4:3D:D1:D0:8F:73:EC:FA:A9:64:EE:83:3A:E7:68:A8:15:3B
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Certificate issuer: /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial: 0196C1CAC80413D640ABBE8A2D5BA323268F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 00:00:14 +0000
Manifest this update: Mon 12 May 2025 00:00:14 +0000
Manifest next update: Tue 13 May 2025 00:00:14 +0000
Files and hashes: 1: 8v_48bgcLGFPw-lOsXy6CUAhGgE.crl (hash: mYGrNpnF4yDcLVzAqhhXh8pV520AyuCAJnPDTAlGFkE=)
2: vf_PL7Z26am-bUWHqusGVLE57ns.roa (hash: lq/qQHwmZ7jgnqMZo6s1jASjE57LJ9Te+YbA+3H42GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:c8:04:13:d6:40:ab:be:8a:2d:5b:a3:23:26:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Validity
Not Before: May 12 00:00:14 2025 GMT
Not After : May 13 00:00:14 2025 GMT
Subject: CN=29d6b43dd1d08f73ecfaa964ee833ae768a8153b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:77:3b:c8:6e:bd:ab:52:6f:f4:ea:06:ba:
29:f2:84:53:03:b9:a3:75:0b:d0:39:66:b8:c0:7d:
00:fa:95:5f:82:d7:82:bb:54:c2:40:cd:6c:4f:23:
41:38:18:71:34:b4:09:d0:22:35:cb:6e:7b:0d:c7:
1b:5e:3d:a6:08:ad:df:22:3e:7c:c5:e5:99:78:7d:
6a:5b:7b:3c:72:46:64:70:6d:dd:11:fc:6b:05:c2:
6c:da:bd:24:d5:36:8d:8a:49:0a:4d:a7:95:70:62:
d3:48:6a:dc:3b:ec:cf:d8:d4:64:dc:2d:ce:7b:47:
af:c4:31:1d:b6:c3:c7:de:f4:92:b6:42:79:95:46:
7e:2f:0a:2a:0f:45:32:a1:d0:6c:16:a2:cf:38:9e:
bd:96:33:01:31:28:ec:93:41:7c:59:de:1b:fd:c8:
38:a8:48:b7:b8:c3:f4:29:ad:f8:2b:4f:e2:2d:71:
35:72:44:18:b2:21:d7:db:95:1e:02:47:e2:fd:64:
93:ac:8c:fc:39:89:14:64:c6:70:fc:6a:7b:ae:56:
66:1a:57:0d:a7:3d:4d:4c:ba:89:c6:33:a0:af:65:
4c:e7:ac:a2:3a:6b:5a:30:74:a1:87:43:b6:d2:54:
fe:48:1f:6b:1e:0c:87:38:b2:fe:a8:d3:6d:db:b2:
52:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D6:B4:3D:D1:D0:8F:73:EC:FA:A9:64:EE:83:3A:E7:68:A8:15:3B
X509v3 Authority Key Identifier:
keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bc:94:87:82:01:f1:ac:73:b9:af:b7:65:e8:32:08:c0:a6:
cb:cf:87:f3:0e:57:29:3c:68:8f:c8:18:f5:6a:45:18:f3:49:
66:6e:38:6a:99:4c:ee:fb:85:60:7a:56:31:71:30:cf:07:02:
78:df:74:f6:78:ab:63:39:d4:bf:54:e7:86:a3:2c:5a:22:e8:
8f:19:a1:76:d0:0f:10:e8:de:dd:a8:06:92:c2:28:c8:da:54:
5f:23:4e:78:27:32:80:c6:6e:b6:94:89:13:31:f7:9e:67:d6:
63:2d:b0:90:be:eb:75:14:3e:1d:af:86:80:e8:3c:c7:3b:ef:
1c:8d:71:55:47:2d:eb:37:94:82:b7:64:90:f7:a9:69:1d:bb:
c6:90:49:26:74:51:03:8c:ea:b3:42:3f:24:f8:dd:23:12:98:
6e:f6:2a:f4:9d:c2:f8:d2:a2:df:61:c1:ef:2a:5e:60:0e:da:
30:97:a4:9c:3b:47:16:52:e9:db:09:ea:93:73:f5:e2:fd:b8:
96:88:c4:36:32:43:62:52:f5:b4:33:0f:d1:ed:e3:33:49:88:
e0:d5:4f:54:a3:ec:98:58:09:65:59:f7:6c:64:a4:31:d3:e2:
fc:6b:e3:5d:54:c9:68:79:21:a8:57:6f:83:e9:76:47:33:b8:
d1:82:67:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:31:27 2025 by rpki-client