Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft
File: i8EWjaFgICh-6h_eygVBkwqdNok.mft (raw, json)
Hash identifier: niSIeFyms8uVIrngVcu4mEafSRUPonrT92q55XA4u84=
Subject key identifier: AA:FE:05:21:84:BF:86:4E:6E:72:A3:D3:62:2C:6B:B1:3A:40:4D:3B
Authority key identifier: 8B:C1:16:8D:A1:60:20:28:7E:EA:1F:DE:CA:05:41:93:0A:9D:36:89
Certificate issuer: /CN=8bc1168da16020287eea1fdeca0541930a9d3689
Certificate serial: 0196BAED5882E70D3B341BBC8212EA4A4470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft
Manifest number: 01B6
Signing time: Sat 10 May 2025 16:00:38 +0000
Manifest this update: Sat 10 May 2025 16:00:38 +0000
Manifest next update: Sun 11 May 2025 16:00:38 +0000
Files and hashes: 1: M8dNAav4bGEdssIavf8xkWsYnhg.roa (hash: XQuy4W50mLmkvV791/MW+gWfWSh1bhqASgHVJ90pFyY=)
2: i8EWjaFgICh-6h_eygVBkwqdNok.crl (hash: QtDmqoNcVcSB1qRZsQd3bSJ/HqMeCHyyw5OfSo/SrnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:58:82:e7:0d:3b:34:1b:bc:82:12:ea:4a:44:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bc1168da16020287eea1fdeca0541930a9d3689
Validity
Not Before: May 10 16:00:38 2025 GMT
Not After : May 11 16:00:38 2025 GMT
Subject: CN=aafe052184bf864e6e72a3d3622c6bb13a404d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b3:19:b5:40:ee:6f:24:a7:f0:1f:d2:7b:94:
13:81:13:7e:4e:a7:36:3a:93:f7:54:ae:d8:23:a4:
67:94:3a:e6:19:98:6d:9d:6d:af:f3:ab:25:d3:34:
ac:07:db:92:0b:97:38:3d:b8:b4:42:8e:81:b2:06:
81:ae:90:55:de:43:d8:e3:92:1a:d6:d6:9e:47:e4:
6d:2c:e6:dc:1d:48:5c:e2:ce:5a:49:50:96:32:a1:
27:3b:fe:a1:67:46:77:50:de:48:72:03:4f:49:d7:
47:58:54:95:04:11:7a:b0:4f:74:91:8a:7e:ef:25:
36:50:cd:75:99:8c:83:46:43:f9:c1:85:4a:09:64:
a5:d7:08:86:87:ac:6d:88:1c:45:a0:fd:5d:4f:f8:
e2:6c:fc:a8:8e:69:bb:75:b4:90:a9:df:13:6f:cd:
c0:fb:20:58:bc:f7:d5:f1:be:14:ac:a3:14:7f:c7:
2d:1f:55:1f:b4:de:d4:c1:84:8a:dc:33:af:d0:c8:
e9:99:42:6d:ba:95:dc:b8:12:4b:5a:fa:ff:dd:a6:
a5:1c:3e:39:33:99:3c:a2:9d:74:53:95:30:b5:56:
a7:95:4b:b5:01:8a:ba:34:15:d9:7a:bc:93:b3:d5:
67:22:9a:b6:4e:b3:9f:55:2c:9a:7f:42:7b:72:51:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FE:05:21:84:BF:86:4E:6E:72:A3:D3:62:2C:6B:B1:3A:40:4D:3B
X509v3 Authority Key Identifier:
keyid:8B:C1:16:8D:A1:60:20:28:7E:EA:1F:DE:CA:05:41:93:0A:9D:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:69:5f:3a:e5:1e:27:f0:42:90:a3:ed:c1:68:60:48:52:a1:
0b:92:43:d2:0a:6b:c5:87:bb:c0:30:88:fd:91:12:63:19:3b:
b8:c8:fa:b3:11:fc:39:07:16:36:1a:0c:dc:13:12:d4:cb:55:
79:f4:73:b7:ce:40:af:70:28:44:ba:ef:23:25:6c:bb:07:60:
42:57:73:b9:41:5d:35:f3:4b:1c:3b:d1:bc:60:dd:5e:ec:c2:
bf:35:cf:bc:54:05:ca:b3:eb:0c:40:cc:d5:33:62:40:38:8f:
f2:3d:8e:e1:96:41:d5:c1:41:08:a3:c1:cd:88:0a:48:79:78:
52:be:bd:e9:b3:9b:c3:d7:dd:5b:b0:29:cf:2e:12:16:8a:43:
99:76:4c:16:80:15:ff:9d:62:95:30:2c:e6:0e:0a:d9:85:73:
da:fe:d4:10:f7:17:24:c0:db:cb:2b:1f:14:e0:f1:db:81:ae:
bd:d9:a6:54:b4:99:49:45:24:40:e1:8b:39:df:c9:c2:a9:60:
e1:28:09:fb:07:2f:65:0d:7c:3f:14:60:41:c5:02:4c:3e:c0:
e3:8a:34:6b:26:37:90:31:0b:5b:76:8c:88:2d:90:bd:2b:16:
9d:77:1d:8f:27:ce:6b:f8:05:c5:5c:c1:0b:2d:54:86:00:39:
78:d6:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:12:37 2025 by rpki-client