Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
File: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json)
Hash identifier: ygrHgwxIA01xRW3od/CbJXl1oJH2zR/W5ZzyVdq37H0=
Subject key identifier: F9:05:DA:77:47:DD:5D:51:60:29:32:9E:D2:FE:FF:E5:E4:56:40:36
Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
Certificate issuer: /CN=73c2f49445980199475512f5297608f45d08bb5a
Certificate serial: 0196C0B8C3CD7DF8E5F57424AA61774BC510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 19:00:56 +0000
Manifest this update: Sun 11 May 2025 19:00:56 +0000
Manifest next update: Mon 12 May 2025 19:00:56 +0000
Files and hashes: 1: T8CaRngGi_3wzcIt9PzPZ1wckgY.roa (hash: 37vNH+xFSIYvkh93FypQjuj5VJFxVq0H4oy/OpBqTs8=)
2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: LVMQ8zTvyJq+whV8DoHOP+KcLUsVLfq0NSi3+09x2Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:c3:cd:7d:f8:e5:f5:74:24:aa:61:77:4b:c5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a
Validity
Not Before: May 11 19:00:56 2025 GMT
Not After : May 12 19:00:56 2025 GMT
Subject: CN=f905da7747dd5d516029329ed2feffe5e4564036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:94:21:cb:3c:d3:45:9f:2f:85:47:56:01:
c6:06:39:1e:77:71:18:3e:47:bd:c1:4a:fa:3b:a2:
17:55:18:09:ae:eb:94:5d:93:a5:7b:64:8d:c7:c7:
6f:0c:44:ea:a6:9f:6b:c0:16:82:9c:76:35:50:30:
de:e5:17:41:9d:26:fe:e0:e7:52:ca:78:3f:6a:c6:
61:e2:0c:9f:1f:ae:e1:73:7f:c1:3b:60:37:8f:56:
6d:89:3e:dc:98:91:e3:db:7c:7d:26:97:24:38:2c:
3c:f2:33:52:e7:70:41:f8:fa:aa:91:7b:77:84:8c:
52:e0:41:0f:5f:26:39:ea:83:57:4e:91:94:a4:c7:
27:05:68:46:79:26:12:8a:0f:0a:0c:00:ae:f4:e3:
28:33:6a:e8:e7:6c:05:28:5b:aa:29:ea:53:65:09:
a5:dc:b4:9d:8f:34:55:7d:ac:49:ab:29:d4:96:14:
4f:bb:86:e3:80:38:80:d3:32:bd:d9:79:c4:17:aa:
29:0e:42:50:5c:15:6f:50:4b:ff:30:18:8b:b2:22:
d3:31:b4:33:fa:fe:f7:47:9d:9e:fb:49:d9:e3:f9:
0f:3b:11:af:fd:a2:b6:86:55:77:2a:2e:68:51:36:
e8:0d:aa:ea:05:5b:aa:0b:ac:8e:e7:6a:c6:b9:78:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:05:DA:77:47:DD:5D:51:60:29:32:9E:D2:FE:FF:E5:E4:56:40:36
X509v3 Authority Key Identifier:
keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d3:51:23:f5:15:b4:f4:a7:c3:88:1e:bd:77:dd:89:1f:02:
98:f9:58:2c:c3:6c:5f:54:b2:f0:59:10:f1:c5:9a:5e:a3:08:
0c:45:fe:88:34:4f:fc:d7:16:c9:26:9a:3c:4c:6e:f4:74:36:
35:a6:47:df:3a:56:f2:7f:35:93:c2:1a:fd:49:92:fe:d3:fa:
3e:db:c8:c2:61:60:d6:4b:48:b3:59:93:37:09:53:b2:82:84:
0d:11:3d:4a:6a:8f:00:92:42:ae:b6:f1:70:82:a3:44:40:80:
f9:ce:ca:43:f4:52:2f:57:7e:4b:52:9d:7a:f2:97:a3:68:68:
3c:9a:b1:33:bb:e7:f1:d1:ff:6a:7f:1e:f3:3e:8f:69:34:e5:
43:83:77:e3:03:c9:3d:db:a8:0b:43:a5:90:6c:83:63:c3:12:
59:5d:6d:c0:03:93:58:ca:2f:45:47:44:fc:40:02:22:7a:b7:
23:f4:6b:0b:50:8c:55:00:46:e1:0d:ad:0c:c5:8f:91:c2:7f:
00:a5:ef:21:4c:b5:29:fa:11:4b:38:8b:22:b8:81:31:8a:39:
d6:97:c7:72:fe:a1:ef:d4:dc:c6:3d:4d:2f:a4:52:7b:23:f2:
1c:5d:99:d8:e6:50:18:e6:f9:09:9f:af:25:12:4d:b6:31:ad:
12:53:ea:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:40:42 2025 by rpki-client