Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
File: B8nKHieDB7riQFpINK9EfAZBRwE.mft (raw, json)
Hash identifier: YxY9JEAGHlTUZLFbLHK4Y4gKTy6CiqhY7QD4OermV2Y=
Subject key identifier: AA:8C:28:5D:77:0C:B8:48:97:E5:EA:75:7D:52:0C:0A:CC:69:AE:DB
Authority key identifier: 07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
Certificate issuer: /CN=07c9ca1e278307bae2405a4834af447c06414701
Certificate serial: 01968BEF2A601FE487DF05BCF62B943C0F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
Manifest number: 05A3
Signing time: Thu 01 May 2025 13:00:29 +0000
Manifest this update: Thu 01 May 2025 13:00:29 +0000
Manifest next update: Fri 02 May 2025 13:00:29 +0000
Files and hashes: 1: B8nKHieDB7riQFpINK9EfAZBRwE.crl (hash: 6uD+/DIE4m4WB74qwJZvwHoS83QYPLCs4u8TF/G4PyY=)
2: F9Q0Mg_SdChrVPmjRELNfy5ikeQ.roa (hash: D+oypEIJiZTBGT95av8yorKEZBq5uNCWOIeANOZvJiA=)
3: gpb4-1Pa8jheX2ShBqmDY1Oz_uE.roa (hash: ouq0lXCMNkqwSYjgnbFoNQVBaOceZaj3Z0yPlQ2cSos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:ef:2a:60:1f:e4:87:df:05:bc:f6:2b:94:3c:0f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9ca1e278307bae2405a4834af447c06414701
Validity
Not Before: May 1 13:00:29 2025 GMT
Not After : May 2 13:00:29 2025 GMT
Subject: CN=aa8c285d770cb84897e5ea757d520c0acc69aedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:7e:12:07:d7:1c:d1:0a:c9:3a:9a:76:9a:
46:dc:d8:20:4f:69:2c:f1:7d:92:34:cd:ef:11:9a:
66:85:3b:47:63:3c:1f:dc:91:c5:c1:fe:10:f3:32:
b9:c7:96:72:f2:15:14:52:30:7a:ea:f7:e5:87:cb:
ec:69:d9:c8:d3:77:71:d2:83:07:c2:8d:de:b5:40:
c8:d3:96:52:95:0f:ed:e1:82:ef:a4:db:78:fc:68:
23:6b:5a:00:b7:03:1c:ac:8e:32:64:89:0e:cb:b4:
a9:5e:82:1a:59:71:55:43:0b:d8:a3:3f:93:f5:33:
46:76:1e:dd:2a:94:43:0c:7e:b5:e9:4d:5b:c4:dd:
5e:2f:d0:e7:0a:0f:cc:d9:59:74:c7:18:d2:95:a7:
73:7b:bc:f4:f0:10:68:37:b1:36:ec:f2:f5:34:bf:
1e:62:fd:85:26:f3:fe:e9:22:9c:7f:c2:61:9a:92:
f2:59:e7:5f:fc:df:e0:32:2e:28:4e:a3:9d:e0:95:
2c:a0:b5:d6:c8:9a:06:e5:91:4e:06:06:6f:ba:d0:
84:8c:ba:04:ef:e3:64:bb:fb:63:82:f5:8d:bd:f9:
1f:95:2c:73:8a:9a:a6:6f:b6:27:38:96:a3:8b:99:
36:43:aa:05:52:3c:31:4b:1c:f1:23:4f:88:c9:04:
08:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8C:28:5D:77:0C:B8:48:97:E5:EA:75:7D:52:0C:0A:CC:69:AE:DB
X509v3 Authority Key Identifier:
keyid:07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5a:d7:cc:bd:5d:22:48:59:98:c6:2c:fe:2d:f2:aa:00:d7:
db:4d:78:a7:f2:0c:24:bc:bc:ec:a0:03:fb:32:63:42:2f:1e:
65:e6:92:ff:76:30:a1:92:07:08:f8:4e:59:27:5f:bf:c3:9f:
a8:df:ef:a1:cd:09:be:65:e6:e8:06:1c:aa:83:cd:cc:5f:88:
7a:bc:b0:16:e7:54:da:46:46:dd:30:82:a9:10:73:1a:7c:e8:
cb:9a:21:ba:b7:2b:b9:48:ba:16:8d:e0:da:ad:c9:0f:f3:2c:
e3:b5:61:3b:99:10:0e:63:7d:bb:9a:b8:31:91:99:5b:88:d2:
15:1e:aa:66:e2:c2:ba:8d:7d:54:62:72:ce:fa:8d:d9:4d:60:
bf:07:11:8c:aa:f6:e9:0a:3e:bf:3a:96:2c:6e:36:3d:48:40:
28:73:7e:65:c0:3e:14:ac:5f:c2:d8:2d:08:ec:79:f6:68:0a:
56:45:28:44:a1:bf:af:e4:0a:c6:6a:d0:ac:a7:58:61:88:b5:
1c:b3:c3:ff:91:0f:3d:2c:22:f5:35:56:be:41:b1:83:44:5d:
32:02:3d:5b:c1:fa:5e:1c:1f:3a:d5:f3:34:23:df:18:3d:65:
4c:01:fe:93:6c:fa:4f:71:4d:bd:a7:c4:e1:a6:ad:5c:53:5a:
90:87:74:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:58:33 2025 by rpki-client