Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
File: 8jgjdZZpSOIWiOi6E4OkowngVi8.mft (raw, json)
Hash identifier: rxTgOawRrqWE5KNIJjceRHyjeUcHqsrRlJEp6BR0uMw=
Subject key identifier: B5:17:B2:C9:CF:E8:BE:40:83:64:69:37:6D:B0:80:AB:05:4F:D7:59
Authority key identifier: F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
Certificate issuer: /CN=f2382375966948e21688e8ba1383a4a309e0562f
Certificate serial: 01968B133F1F3A25686A4024DE6F7E4D1AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
Manifest number: 151A
Signing time: Thu 01 May 2025 09:00:16 +0000
Manifest this update: Thu 01 May 2025 09:00:16 +0000
Manifest next update: Fri 02 May 2025 09:00:16 +0000
Files and hashes: 1: 8jgjdZZpSOIWiOi6E4OkowngVi8.crl (hash: NcNEh3jVQ5arBJ5TxgmWLQ95ehdSbeZk5cqTM29UBcg=)
2: K1nEMmqR-bv_HJOMVOAQTlZLbDU.roa (hash: W5Jwdvi7etvP6GxGLNbBoK0ap2sodrYQoCXcswND0as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:3f:1f:3a:25:68:6a:40:24:de:6f:7e:4d:1a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2382375966948e21688e8ba1383a4a309e0562f
Validity
Not Before: May 1 09:00:16 2025 GMT
Not After : May 2 09:00:16 2025 GMT
Subject: CN=b517b2c9cfe8be40836469376db080ab054fd759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:37:19:2f:ca:5d:db:d5:8a:75:21:ad:49:cc:
9c:e4:d3:e0:98:a6:0e:cb:4e:9a:bd:1d:2c:5b:de:
14:d4:74:fa:26:53:6e:ea:f7:6e:70:43:f5:e5:4b:
f6:4f:ee:98:96:61:ad:6d:d8:94:40:b9:47:9b:8f:
5c:63:8f:87:c9:af:52:1c:bd:cb:18:97:81:57:3d:
dc:4c:4f:e0:03:39:0e:e1:b1:96:fc:0c:28:4f:f4:
ba:d1:36:7e:c8:0b:94:28:e3:ca:98:8c:d0:e9:8e:
57:3a:69:80:bb:b3:4c:6e:5c:f5:02:81:f4:c8:c0:
ce:8a:2e:f5:3b:11:71:47:07:b0:4d:9d:55:e4:d5:
78:83:81:12:63:fb:b6:b7:35:8f:ce:49:23:13:c5:
f0:65:fb:b6:50:ff:13:d4:d7:fc:72:c2:f5:78:d0:
86:3f:7e:7d:df:c2:34:11:6a:a2:3f:39:d1:32:b8:
be:eb:9a:01:95:f1:7a:2b:d1:ce:e6:ba:47:6b:9e:
9c:39:9b:3b:d3:b0:bd:4b:e3:63:5d:93:e0:cd:72:
0b:11:a2:18:06:13:86:b7:72:68:d4:96:c6:43:e2:
77:e3:bc:6d:61:e1:6a:1e:ef:9f:50:69:90:5e:03:
66:c2:33:01:be:6f:62:3b:9f:95:86:ac:68:85:99:
05:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:17:B2:C9:CF:E8:BE:40:83:64:69:37:6D:B0:80:AB:05:4F:D7:59
X509v3 Authority Key Identifier:
keyid:F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:03:20:79:d7:8a:26:b2:f6:78:91:f2:0d:cb:a0:08:f7:24:
3e:63:a6:6e:64:98:10:33:2e:19:d6:c8:cb:c9:24:e1:a8:ec:
78:e1:28:83:66:99:9b:9e:db:c7:f5:22:09:78:16:f6:2e:03:
90:3d:da:aa:58:10:a7:e1:8a:2d:9f:50:77:68:e0:b9:c5:01:
92:1b:70:78:f4:d8:8d:9c:0f:46:84:ea:3f:f7:bf:31:bd:5d:
06:56:df:c4:af:05:3a:f9:a3:f8:7d:0d:ac:3d:a9:b2:ea:39:
dd:b3:e4:7a:2d:20:01:5a:56:e5:53:6e:c9:df:ca:e6:ff:80:
36:3d:02:9f:a7:53:ae:05:bd:f9:6c:57:87:3d:8e:c7:7b:05:
3b:e2:43:ac:f7:27:bb:59:90:8d:2c:5e:c2:f5:e0:fd:7e:03:
03:77:9c:74:43:42:3f:37:28:f8:ad:19:f4:ea:d0:2f:f1:ed:
02:7e:c4:96:f3:91:36:b8:58:ed:5d:86:36:6e:b2:50:f3:2d:
4d:4f:12:4b:3c:4d:aa:2a:8b:e1:b3:79:a0:95:e9:f0:56:17:
b9:86:7e:7a:21:39:53:9d:5e:60:07:51:ef:ca:71:bc:fa:5f:
b8:0b:0b:b0:3d:15:9a:42:a3:ba:54:0f:be:96:20:95:c1:fe:
40:fb:24:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:09:45 2025 by rpki-client