Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File: v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier: B2ThIWvQKu3lbxGk4dJJ1wFoIpWoR/eh8tcReZZ5AmA=
Subject key identifier: 8B:7A:70:4B:4C:9B:1A:FF:CF:45:07:91:22:AB:33:0F:BE:BB:C4:CB
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial: 0196C2A6F6C5050D617161AAA647E6F36E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number: 0988
Signing time: Mon 12 May 2025 04:00:44 +0000
Manifest this update: Mon 12 May 2025 04:00:44 +0000
Manifest next update: Tue 13 May 2025 04:00:44 +0000
Files and hashes: 1: bzs57lv3Qbjc1TLCtfvKYgEau6U.roa (hash: HAYnok72dCcoCWV0+wPH7iuTT6c76+rSS6MIun+rwec=)
2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: ztf8pKfjp7mjBuFmgjudiC2dGxOJGUGNvbWVrXzmVSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:f6:c5:05:0d:61:71:61:aa:a6:47:e6:f3:6e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Validity
Not Before: May 12 04:00:44 2025 GMT
Not After : May 13 04:00:44 2025 GMT
Subject: CN=8b7a704b4c9b1affcf45079122ab330fbebbc4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:ee:60:9e:33:d7:fc:f8:59:db:47:40:8d:
c5:b5:19:fb:75:44:c9:af:cc:e2:e7:e7:88:12:3a:
59:5c:05:2e:95:c0:58:ac:a7:06:63:c5:cb:05:68:
ce:32:ee:2e:bc:28:d0:6d:43:52:3b:37:d8:6f:aa:
b9:71:2e:43:c8:6c:ca:80:7d:fd:f0:30:c0:20:2c:
23:b7:05:c3:61:bc:a9:8c:08:55:d7:8b:e9:fc:ee:
fd:52:f2:39:01:69:9d:43:5b:90:0d:85:09:9a:03:
14:a9:f8:86:b4:43:4e:07:c9:43:1b:f9:cf:2f:50:
8c:db:3e:ea:7d:0c:c9:0d:7b:d0:2d:f2:19:2b:4d:
e9:0e:99:5c:1d:ae:31:d3:59:15:5d:70:22:9f:4a:
fb:3e:83:a9:59:dc:70:4d:ff:dd:0c:64:c6:54:d1:
d5:59:9e:c8:36:e0:2a:e3:e9:6e:36:86:74:49:5f:
59:3c:ff:93:24:d5:3a:3c:75:87:d1:39:5e:21:ec:
03:3d:6c:38:4b:9a:7c:25:aa:92:e4:88:70:46:ba:
29:fe:5f:e8:ba:e4:64:a6:21:94:f5:75:bb:a8:3d:
95:75:fe:e5:e2:d8:88:e0:28:ed:5c:35:90:4e:0a:
09:13:8e:32:8e:3d:a6:30:13:6c:d9:02:9d:82:0b:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7A:70:4B:4C:9B:1A:FF:CF:45:07:91:22:AB:33:0F:BE:BB:C4:CB
X509v3 Authority Key Identifier:
keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0b:52:c2:db:01:f4:ab:62:9a:67:dd:6b:35:44:61:ea:60:
30:4d:c4:09:c4:8c:79:8b:dc:63:f3:2c:d8:62:f0:bc:a9:cb:
3d:17:d1:5f:1d:68:7c:6f:b2:9f:e6:9e:c7:d1:92:a8:af:66:
e8:df:9d:10:d9:14:4d:08:70:fc:e7:aa:1b:86:6b:4d:45:76:
30:60:59:db:74:47:5b:fa:de:e9:af:33:81:bc:1b:e4:75:52:
7e:a5:3d:99:0a:1a:1b:64:2f:56:23:75:d6:e4:1a:62:4d:bb:
f4:1e:96:b9:ac:1c:20:ac:dd:0b:b7:cb:fe:dd:c3:cf:46:68:
90:d2:aa:62:c6:28:48:41:1f:72:e1:8c:43:de:10:93:e3:a9:
82:56:41:9d:a5:3a:9a:15:86:ff:56:ff:dd:60:9d:c6:23:b1:
b1:df:b2:27:f9:86:68:52:c1:12:12:e5:68:02:f8:19:a1:a7:
f7:a1:07:c1:53:df:7a:b2:7f:69:4e:02:51:1a:b7:ee:e6:1d:
79:18:8e:e8:a8:0b:85:a8:fe:64:6b:7a:5d:77:6f:84:77:ee:
8b:55:b6:b1:5a:8f:78:eb:43:5a:6c:3b:14:a9:11:ea:19:05:
d8:7c:90:09:23:45:4d:47:e7:d8:b3:1b:e7:4f:01:05:2e:e0:
b2:99:b0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:30:56 2025 by rpki-client