Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: 1pPbYvQNvgEjamzlnC7ucAtDIumnq7C0Ujepb3J6irY=
Subject key identifier: 8D:E6:0C:2F:44:C8:6F:34:ED:E7:59:8A:D2:4B:FD:E1:30:A5:C8:71
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 0196BF6F72E15182A1CD36906F726B42C1FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 1274
Signing time: Sun 11 May 2025 13:01:14 +0000
Manifest this update: Sun 11 May 2025 13:01:14 +0000
Manifest next update: Mon 12 May 2025 13:01:14 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: nKtaZ3flcqNJuaM3Bx2iBmZZSwgEsuMs8b0Z5KpVUgU=)
2: Md8iGia1MbUzqtIWwDExWkmRVgM.roa (hash: 9TNv7T0YESkDbmJU8WmVBlvb3hJYh8sZp0R9zt0P83g=)
3: zzfWrdnIm-Z-w7o1PR68Qstk9VY.roa (hash: kTwVtQXhrNaWPZylIvh+tacEo9MdRsMxrNowU5p51wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:72:e1:51:82:a1:cd:36:90:6f:72:6b:42:c1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: May 11 13:01:14 2025 GMT
Not After : May 12 13:01:14 2025 GMT
Subject: CN=8de60c2f44c86f34ede7598ad24bfde130a5c871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9d:a6:bd:69:08:5b:e4:d2:f0:9a:88:bd:83:
62:0c:25:45:0b:0b:2a:9d:19:61:98:89:a3:f0:b9:
32:38:a6:e6:f9:94:0d:9b:22:17:c4:5f:31:c2:c8:
24:b6:5b:7c:a4:26:2a:fa:8b:da:35:9b:6f:02:d6:
f5:6f:1a:d9:9d:8e:8f:20:2a:8f:76:07:12:72:37:
4d:4b:da:92:59:d4:35:d4:aa:b1:dc:6b:f5:c7:c5:
87:bc:8b:9d:4e:0a:15:05:f8:96:fc:65:dc:7a:a2:
4e:d1:28:5d:c1:f0:bb:e5:84:23:b5:58:d9:fa:da:
f4:b8:b3:9e:58:09:c6:ae:c5:86:eb:9b:6e:c1:96:
3f:bf:eb:e8:d3:67:07:e0:9c:ee:cd:f4:23:f4:5c:
1b:d0:c2:20:00:57:28:65:82:15:b3:d0:e8:8f:98:
7f:16:15:98:53:f7:7e:1a:97:2a:17:0c:84:33:de:
f6:e5:a2:25:ce:d9:4d:25:64:ac:4c:80:fb:a4:2e:
a9:b4:07:c2:2c:aa:9b:92:b7:cf:7c:53:65:a3:a3:
eb:a8:d7:0e:ce:80:1b:d1:c3:26:55:e8:7b:b6:a3:
0b:fb:47:67:c6:9d:ff:c6:52:17:91:70:61:15:a2:
81:3b:d8:e4:59:83:ae:98:94:1c:74:2e:8d:60:7b:
27:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E6:0C:2F:44:C8:6F:34:ED:E7:59:8A:D2:4B:FD:E1:30:A5:C8:71
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:63:e7:da:a7:0f:03:a4:09:95:04:19:0a:bc:51:87:a2:44:
4f:5f:c8:23:de:45:8d:31:b1:23:aa:7d:42:04:cd:85:b7:52:
59:6e:fd:3d:46:1f:48:d1:97:33:05:29:d1:e0:8e:39:99:2b:
d4:20:df:b2:1f:8f:62:55:3e:3f:fc:28:8f:c1:25:f9:f1:13:
7f:a6:4a:bd:ec:72:d4:61:2e:1e:9d:32:e4:d2:69:b6:b7:01:
a8:e0:51:84:9f:6b:47:fc:27:4e:34:a3:cf:ed:03:f5:45:e9:
11:97:34:34:87:ba:4e:55:61:33:16:53:b7:2d:9a:9f:f7:d0:
a4:b6:c7:07:2a:21:77:02:ce:39:4d:2b:6d:56:d6:28:7d:3c:
b8:4a:90:2b:c2:2d:df:15:e9:d9:e5:86:64:ee:95:df:bb:eb:
3f:b0:82:d0:0f:7b:bc:f3:85:23:1e:a9:a2:89:d4:d6:2b:53:
61:35:1d:ad:de:47:5c:4d:32:bd:44:5c:1d:5c:c2:fc:02:6c:
c7:c5:d7:12:44:cd:c9:7d:c6:dd:42:ca:b5:98:89:21:e9:60:
81:1f:64:a2:7e:2b:ef:05:05:57:bf:90:c6:f2:1f:cc:f2:c2:
ac:24:c3:bb:04:cc:03:c2:10:04:3a:83:db:28:9a:8d:8f:b1:
04:45:ab:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:59:39 2025 by rpki-client