Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
File: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft (raw, json)
Hash identifier: QJCl9Ds5FUyr8yW/o8B3xiFn4xfYtKOyr/bA5d9Y4bM=
Subject key identifier: 58:B8:CC:75:1E:8B:CB:77:0D:02:88:14:3D:2C:78:40:90:30:B9:12
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial: 01968F275EC0AB457C0E12141F3672E9FC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
Manifest number: 151B
Signing time: Fri 02 May 2025 04:00:44 +0000
Manifest this update: Fri 02 May 2025 04:00:44 +0000
Manifest next update: Sat 03 May 2025 04:00:44 +0000
Files and hashes: 1: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl (hash: UhlZFQpxAvhB/n++NEZv8W6i1C80YIJiWaaOllhngsk=)
2: d-g1g1WIQH2eW5zQOoLECyf2CbU.roa (hash: 4hlHKC2roVEpNMRQA5ne6l615543DSp4qxsP/od40+A=)
3: kHVwAjV50K04XcEC52VZ9Z8xRlA.roa (hash: 2Boh063HYNHe4qTfS7TAeZC6aTKdY96/vHBa+9B6mso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:27:5e:c0:ab:45:7c:0e:12:14:1f:36:72:e9:fc:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
Validity
Not Before: May 2 04:00:44 2025 GMT
Not After : May 3 04:00:44 2025 GMT
Subject: CN=58b8cc751e8bcb770d0288143d2c78409030b912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:92:e3:07:ba:5b:0b:cc:37:5f:10:91:dd:
8e:83:f1:f2:41:6d:ff:41:99:61:c1:6c:1f:a0:d3:
76:cf:80:88:1a:49:1f:64:e2:9c:f7:3c:f9:2b:df:
ba:cf:45:1c:31:89:8d:95:c5:26:60:73:02:7c:b5:
68:a3:c8:65:6e:e3:ab:7c:eb:de:84:8d:6e:2c:2e:
97:01:12:2b:5f:7b:c7:ef:ea:e1:db:85:6e:0b:07:
15:9a:d0:b4:97:5d:68:1e:a6:8f:54:93:53:15:5e:
d5:b2:a6:e2:fe:85:e0:b5:34:8b:cd:14:e4:ce:d8:
4e:52:39:b0:cc:50:97:65:e7:b0:4a:4f:00:3a:f5:
6f:16:0b:da:94:fa:b9:4c:54:0a:08:e1:13:ca:27:
49:95:82:ad:5a:8e:0e:4a:6c:77:8e:12:e5:15:bd:
3d:81:1b:74:a4:3a:c0:79:29:b2:76:d5:d9:d8:81:
3e:f5:c4:2c:a6:cf:97:19:88:d5:dd:44:bb:3f:06:
bd:69:3a:5f:bb:59:6a:d0:e7:94:c8:0f:48:fb:e5:
ee:c3:03:ec:87:a8:a4:a5:0a:56:3c:cd:53:7f:ad:
9f:5c:4d:a5:09:e8:cd:26:f2:5d:2a:35:58:b6:be:
48:2c:70:83:93:4e:3c:2d:69:a6:46:e7:fe:c5:c6:
77:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B8:CC:75:1E:8B:CB:77:0D:02:88:14:3D:2C:78:40:90:30:B9:12
X509v3 Authority Key Identifier:
keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ac:5d:d6:a0:06:99:f6:a5:b9:73:29:af:2e:e6:bf:3a:b4:
33:2f:b7:9f:db:c1:6d:b5:1c:f9:bb:7e:b2:40:a2:da:3c:57:
e5:01:80:92:f0:29:c5:a3:a8:78:8a:6a:0e:75:bd:b1:fb:b5:
a4:72:91:8f:7d:64:20:7a:a6:1c:a2:2c:c0:3e:4a:15:fc:4b:
b1:ad:95:89:ae:dc:28:fe:50:15:a5:02:39:5d:ff:86:fd:59:
49:78:01:2a:b4:62:3f:61:13:85:c9:0e:83:a2:a4:8c:0c:fe:
68:21:41:32:1e:d8:2c:59:6a:c6:28:e8:4a:c2:b8:7c:21:66:
88:b6:73:0f:2b:bd:b5:ed:88:58:82:fa:77:03:ba:b6:89:46:
75:3e:a8:87:5c:79:b7:ca:df:2f:cb:6c:e2:73:66:58:8e:8a:
79:63:ce:8c:c6:34:3c:21:14:7e:bb:b2:79:5e:27:3b:a7:08:
5c:49:a9:5e:1f:16:b7:0d:49:21:29:43:ba:cd:69:15:84:20:
41:cf:4d:db:1a:8d:b7:21:ff:84:05:8f:0c:30:23:fe:b2:08:
8d:a8:82:6a:b9:9c:d1:d1:49:4b:b2:3e:a0:ed:e8:c5:8c:49:
42:1f:42:c2:51:df:f6:ac:b1:40:af:8e:c6:bf:25:54:2b:0c:
a1:b7:08:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:02:50 2025 by rpki-client