Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
File: v8pT8KWH822Jqcq4K_WlA2xhQKI.mft (raw, json)
Hash identifier: zVtbfmMUybsYDnd781iOVQy4OyZC7FmNkiwLWJm9Nu0=
Subject key identifier: 23:1A:7C:AB:60:81:78:EB:87:9A:07:45:39:FB:4B:9E:27:CC:56:60
Authority key identifier: BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
Certificate issuer: /CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
Certificate serial: 0196D43F87775ABDF976F1EA7AB9175C8815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
Manifest number: 1541
Signing time: Thu 15 May 2025 14:00:55 +0000
Manifest this update: Thu 15 May 2025 14:00:55 +0000
Manifest next update: Fri 16 May 2025 14:00:55 +0000
Files and hashes: 1: QDWmx_ik_mzSmaKaFjMrEYPMK6E.roa (hash: JZeZqTP/kJM8f2vw7vOLQj4DQbxRzuI8jkZc142sebw=)
2: v8pT8KWH822Jqcq4K_WlA2xhQKI.crl (hash: puK3iWGYaJFPXzu5pjeBhYn5ih1a+SD7fLASbfNoUJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:3f:87:77:5a:bd:f9:76:f1:ea:7a:b9:17:5c:88:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
Validity
Not Before: May 15 14:00:55 2025 GMT
Not After : May 16 14:00:55 2025 GMT
Subject: CN=231a7cab608178eb879a074539fb4b9e27cc5660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:07:e0:64:4b:62:ef:4d:c1:28:06:49:44:50:
a0:0d:6c:a6:5b:42:4e:ab:2f:71:84:b6:83:d9:07:
21:a4:13:36:2d:64:2d:60:e5:fd:17:aa:63:07:6e:
ed:e3:20:ce:b5:f7:7c:9e:ce:7e:93:77:cd:b9:11:
7a:bc:46:de:e7:9a:9f:8a:9e:d3:d3:13:a9:51:52:
74:22:3e:31:4c:c2:9b:85:18:04:97:bc:4e:68:7c:
8c:c3:c0:0c:d5:1a:ad:4c:69:55:34:16:d6:c0:db:
73:ca:11:d0:c5:b4:ad:4a:eb:45:70:09:c2:c8:8a:
06:f9:b9:57:8d:32:af:70:c8:ea:90:5d:e1:00:01:
67:af:aa:f7:fd:e7:49:70:74:79:a2:f3:5b:17:ad:
2b:e0:9a:1b:ac:5a:8c:be:32:d7:57:ee:e9:5b:e3:
6e:76:f0:a2:e5:9f:18:88:b0:87:10:eb:6d:09:3b:
94:d7:95:6b:3a:bc:5f:f2:a2:ba:a0:bb:eb:b7:82:
31:65:6e:45:33:ed:53:60:cc:cd:8c:2f:90:53:de:
ed:8a:ab:94:5a:48:3c:ad:5f:2a:fe:f6:92:ce:6b:
3e:2b:bf:de:83:81:3c:c3:45:e7:ee:06:f1:04:62:
e6:a2:ed:fb:4e:a7:16:d7:6c:d8:c2:b9:e6:05:f0:
ac:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1A:7C:AB:60:81:78:EB:87:9A:07:45:39:FB:4B:9E:27:CC:56:60
X509v3 Authority Key Identifier:
keyid:BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a8:fa:ee:23:c7:c5:9e:72:b4:8e:f9:05:b0:b9:9a:49:b2:
10:de:de:c9:6b:32:9f:24:8e:83:2c:c8:fb:cb:81:a4:67:b4:
8c:0e:53:a2:63:42:36:92:38:fc:7e:0b:54:84:6c:ad:47:c2:
d9:7a:8b:82:d6:72:ac:8d:1b:be:2d:78:85:aa:13:75:55:65:
3c:00:d4:e8:c1:e4:d7:99:3c:11:c7:ab:4c:a6:6c:a6:25:29:
81:b5:d9:59:f4:67:04:32:c0:53:06:9c:7c:19:55:a9:46:12:
59:38:dd:01:c3:a9:f2:88:7d:75:15:01:9c:d7:06:af:31:31:
2f:7c:41:d6:d9:bd:e4:f1:cb:cd:e9:b2:28:4f:eb:0a:02:ff:
cb:50:f2:c3:b6:2f:5c:0c:dd:22:ac:74:b9:ca:b6:8a:d1:a7:
54:4c:33:f1:d8:6b:e4:51:6b:88:6c:93:c7:e1:97:13:d0:06:
79:60:00:9b:7a:0a:96:1f:6e:c1:55:c7:f8:94:d4:79:8d:b3:
41:2f:97:34:69:0a:79:cb:68:63:e8:b9:0f:f2:3a:db:c8:2d:
f6:35:44:ca:07:ac:20:61:7f:d4:c4:69:c7:7e:81:8c:6a:c7:
4b:9e:7c:73:72:4e:1b:cc:13:de:d1:74:55:da:e5:7e:09:c2:
f3:78:39:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 20:28:44 2025 by rpki-client