Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier: 39oFrxsvehwdChehNuQ8GLIeoqf+nuN7J9ualvo0150=
Subject key identifier: 2A:D4:70:C3:03:AC:67:AA:11:56:75:04:36:96:72:3E:8E:F6:CE:DA
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial: 0196CB3BFB23AE65987DB0D8D68F6BCE6E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number: 04BB
Signing time: Tue 13 May 2025 20:00:27 +0000
Manifest this update: Tue 13 May 2025 20:00:27 +0000
Manifest next update: Wed 14 May 2025 20:00:27 +0000
Files and hashes: 1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: YBNVKLW943cC2tnDbzQGcHt3U7WfDoUH11I94Q/dLNI=)
2: CGcYt6qx267X0glJTA7aL9VX3lc.roa (hash: C7Akg4uPsnwTrDUVpipPgKYJ70rbAz3rIOj8sk4nXFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:3b:fb:23:ae:65:98:7d:b0:d8:d6:8f:6b:ce:6e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
Validity
Not Before: May 13 20:00:27 2025 GMT
Not After : May 14 20:00:27 2025 GMT
Subject: CN=2ad470c303ac67aa115675043696723e8ef6ceda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:43:dc:c2:80:d9:2f:a6:77:54:9a:f3:85:
a1:8c:5b:4c:bc:bf:12:12:ac:b0:0b:69:3d:5b:40:
d6:50:00:d6:b2:db:90:88:22:0b:75:c1:dc:c6:53:
d7:ca:20:e4:ab:8c:3d:c1:bf:12:93:2e:c8:63:99:
eb:da:e2:5f:cb:a2:34:11:54:4c:90:ce:0c:40:72:
c3:48:60:27:e8:ef:d7:58:b6:e3:b9:cb:3d:68:ee:
4e:aa:5c:ee:95:12:f5:2c:e8:70:97:0e:33:37:0f:
24:5c:58:50:d5:7f:2a:cc:60:62:8c:c6:bb:50:bb:
b2:7f:30:d4:3b:81:e1:59:02:c1:89:a9:45:97:eb:
32:38:63:ae:f4:15:97:34:5d:55:47:e1:80:23:56:
72:46:82:89:d6:f5:6b:b0:b6:39:55:e4:55:dc:11:
d3:f5:38:01:23:25:4c:a1:36:c2:99:12:5c:78:02:
73:76:e9:ec:ef:14:40:a3:e9:4a:b1:c5:6f:c6:a2:
44:00:62:33:35:62:0c:92:45:30:bc:08:1f:e4:dc:
ea:f1:2a:66:bc:56:ef:aa:8f:1c:b8:6d:54:a9:2e:
ec:26:c4:4f:d7:dd:26:4f:95:ed:c0:8e:8e:46:f9:
2d:ec:4b:a5:a4:af:3b:df:e7:d4:8f:cb:0e:5c:f5:
60:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D4:70:C3:03:AC:67:AA:11:56:75:04:36:96:72:3E:8E:F6:CE:DA
X509v3 Authority Key Identifier:
keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7b:23:55:50:e8:9e:f5:6d:5d:64:61:57:79:12:3c:06:a1:
c6:20:f6:bf:52:9a:78:9e:34:30:df:21:e2:01:22:70:24:6a:
98:12:a0:31:eb:19:90:5a:8b:15:78:c1:b3:5f:67:cb:54:73:
82:72:82:7b:cf:53:5f:f2:83:23:41:98:e1:73:b4:91:b7:57:
9e:85:fc:cf:d3:ab:d1:0f:c2:40:9f:b4:f8:69:22:77:18:50:
a1:58:f5:21:66:95:ef:a3:14:4e:f8:84:6c:41:61:14:e2:97:
83:03:6c:8e:d0:1b:5a:0a:b0:47:7b:a3:67:e0:70:e0:63:aa:
c2:80:df:cf:a6:80:44:76:24:26:2a:4a:68:32:34:f6:94:de:
6e:13:f1:20:dc:87:b7:89:22:b4:bb:93:9e:5a:67:84:d4:87:
bb:07:28:cc:f9:66:58:2f:67:9e:7e:cc:97:7c:4b:ae:80:d9:
94:75:5d:d5:33:be:4b:64:23:92:3f:7b:c3:67:f3:8f:1a:cb:
cf:91:d7:df:60:c8:1e:af:36:1a:9f:2b:85:20:97:44:b5:ee:
b1:27:ff:7d:a4:a8:9d:28:66:6c:3f:67:5a:d1:0c:f1:a9:f5:
45:21:74:c8:6a:69:ee:5d:c6:39:37:13:91:33:e7:40:7e:39:
9f:f3:9d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:53:56 2025 by rpki-client