Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
File: 8bv5vuUx897i0Du_Tmnvgu7bma8.mft (raw, json)
Hash identifier: a0eQPFRt5L3SEV2yXb3o9vJlDwhiu/dFgIba6cF7s9Y=
Subject key identifier: 42:81:C1:82:5F:AB:85:DA:7F:DE:0F:24:D9:8D:C0:A8:93:28:5F:D7
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Certificate issuer: /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial: 01968B4A8E68C73E22AE84DF194AA8BE7715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
Manifest number: 10C4
Signing time: Thu 01 May 2025 10:00:41 +0000
Manifest this update: Thu 01 May 2025 10:00:41 +0000
Manifest next update: Fri 02 May 2025 10:00:41 +0000
Files and hashes: 1: 0tRdpRIVKa8GC5rndgVUBjWyq_0.roa (hash: zQ8BfDuwqWf4BKhuE29aPhx2YBI5m36iLFxsbczWouw=)
2: 8bv5vuUx897i0Du_Tmnvgu7bma8.crl (hash: mQCEZtkHbMy8+ku0VkTD3mmCcuMgakUWgWmKJcpUKlk=)
3: MkYvLYpqbrY1k1hziBPcgNzDk5A.roa (hash: 9jZ4rUSHtTJBWwTiSaqDWjUP8V/ZrhGAYaJndS1KB3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:8e:68:c7:3e:22:ae:84:df:19:4a:a8:be:77:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Validity
Not Before: May 1 10:00:41 2025 GMT
Not After : May 2 10:00:41 2025 GMT
Subject: CN=4281c1825fab85da7fde0f24d98dc0a893285fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:6d:66:c0:ef:dc:59:d5:68:81:90:50:e2:
57:a1:ab:6d:00:6d:49:20:a8:ba:38:cc:4d:cd:84:
8d:be:e1:3d:0f:00:f4:ed:79:d6:36:e5:a3:af:cc:
d4:c6:eb:91:0e:37:84:c8:06:6f:80:24:8e:37:4c:
53:ae:0c:19:cd:b2:c5:b0:74:28:15:77:ab:ca:de:
3e:a5:5d:78:84:72:dd:75:fb:57:72:f3:09:9b:d1:
d5:3f:18:5b:7e:fb:7d:c7:3d:39:d0:02:fa:90:ce:
48:74:74:eb:b9:ce:38:92:74:0f:f3:77:93:3a:9c:
ee:e7:06:fe:94:39:a2:e5:31:6e:81:7b:34:34:85:
c1:6b:8b:18:35:c3:79:42:8c:3e:1c:f0:e2:bf:44:
7a:15:dd:91:54:a4:c5:4e:1f:44:13:42:02:c2:28:
c7:59:4d:2a:9c:87:9d:ea:17:bd:ae:15:4f:b7:f7:
3e:c5:35:4e:9a:3e:a9:1b:f4:a6:fd:df:c9:a9:57:
34:7a:fd:04:4b:7e:1d:2a:05:42:4a:c0:c1:a7:a5:
6a:f8:0e:e0:c7:06:6b:8e:52:ac:e6:46:13:11:0b:
5a:e3:74:7c:22:de:ab:6e:88:50:a0:6c:4e:da:4a:
44:d2:b9:3e:f7:e0:e8:94:8c:1d:78:98:22:67:63:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:81:C1:82:5F:AB:85:DA:7F:DE:0F:24:D9:8D:C0:A8:93:28:5F:D7
X509v3 Authority Key Identifier:
keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bc:ee:88:b9:0c:c4:fd:7b:82:3c:80:10:04:17:b1:20:b4:
07:6a:26:8b:2a:a1:75:b0:94:2c:69:82:73:8d:e0:88:9c:6a:
ee:17:a6:b5:64:7d:90:fa:cb:4f:0c:64:0c:d9:ab:69:5d:2b:
f7:e2:28:68:5e:fb:4c:8b:6d:b9:36:be:a4:50:7d:d0:df:fd:
5f:a5:c4:f9:93:1b:4f:62:e2:1b:8b:2d:d1:2f:05:9a:a3:45:
a2:e1:58:72:c2:85:68:7d:cc:3f:d2:0a:19:a7:26:86:7b:a8:
7d:c1:97:22:96:06:0d:9a:1c:23:29:cd:e6:18:c7:fb:30:d6:
53:38:f0:b8:cc:8b:7d:be:62:ce:7b:39:a7:ee:01:d0:2c:b1:
08:3b:52:e5:d5:e8:68:a2:db:1a:88:a6:85:9a:7b:e0:a2:34:
d6:7c:7e:c3:40:8e:18:d7:9e:49:0c:8e:eb:32:86:1d:cb:a4:
8c:1a:58:90:70:b9:a3:e7:47:cd:0d:74:56:0a:f2:52:c6:9c:
19:ed:3b:e1:da:ee:59:9b:14:cb:5c:76:01:bc:ef:b6:7b:41:
cb:1d:89:64:68:04:62:d2:83:56:36:e1:34:b7:84:73:83:3d:
df:75:8b:ba:8d:da:9c:58:a3:21:96:ec:cb:d5:e2:f1:9d:02:
03:e8:95:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:14:11 2025 by rpki-client