Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
File: G8PBvvFfS8zE50jAiVfswimg8e8.mft (raw, json)
Hash identifier: PssqwXHg+yZLaDLJsG9ALqxwcrn/OeRfh8ZN6kVmvgE=
Subject key identifier: E4:9C:C6:F0:7C:9E:8F:98:2B:62:97:F2:2F:FF:2C:CD:F8:3A:F4:EE
Authority key identifier: 1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
Certificate issuer: /CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Certificate serial: 019683913C78271747925E841496C02AC388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 22:00:55 +0000
Manifest this update: Tue 29 Apr 2025 22:00:55 +0000
Manifest next update: Wed 30 Apr 2025 22:00:55 +0000
Files and hashes: 1: G8PBvvFfS8zE50jAiVfswimg8e8.crl (hash: 05my+oORdEb1SeK01EwvJAlsRi0JhmkUNswvYsAq0gg=)
2: hwl_pJftKoYgWaDLkyi1NUP4Iqo.roa (hash: zD6uA78lx0+tAtyuIqfvTt4SALf3UDD47V0kgwtFI/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:3c:78:27:17:47:92:5e:84:14:96:c0:2a:c3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Validity
Not Before: Apr 29 22:00:55 2025 GMT
Not After : Apr 30 22:00:55 2025 GMT
Subject: CN=e49cc6f07c9e8f982b6297f22fff2ccdf83af4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:0a:60:fc:07:90:d8:8c:1b:6b:d2:64:5a:
a9:ee:96:8f:5e:db:86:5e:ac:d9:a3:bc:2b:88:19:
f1:5b:44:74:37:73:0e:1f:25:62:04:b4:45:91:7e:
bb:ba:c4:b3:33:2e:b5:35:07:e1:d2:3c:55:17:57:
59:fe:68:92:e3:f3:42:c9:e2:8d:d6:10:63:ad:fa:
3c:7f:0f:4f:2b:cd:c8:4a:c3:3b:c9:ea:2e:6e:62:
70:37:6d:d4:51:d7:ea:fc:63:05:90:8b:64:d6:e3:
14:c8:b9:8f:ed:d6:2c:ae:78:2d:e3:6d:b5:93:2a:
d8:8f:63:83:d2:09:4c:d1:e4:e4:3b:e0:ff:5c:21:
b3:3a:ed:b7:33:fa:b7:22:c1:15:ff:88:f1:d8:eb:
53:b2:7b:76:c0:68:b1:76:4e:02:cf:13:3d:7f:38:
e2:42:10:53:d0:e4:98:0e:f3:32:e2:91:3b:8b:67:
29:86:ef:71:e3:d5:cd:b3:82:be:58:7a:16:92:a0:
2d:a9:06:8a:c5:c9:f1:4f:26:ea:87:91:16:55:cd:
bc:95:bd:c6:0b:cd:78:6d:b9:36:27:ef:d0:10:03:
44:b2:11:3f:39:65:19:49:1d:7a:1b:e0:36:7c:c6:
5d:df:e2:2a:46:08:ef:cf:41:a7:78:ce:b5:d9:93:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9C:C6:F0:7C:9E:8F:98:2B:62:97:F2:2F:FF:2C:CD:F8:3A:F4:EE
X509v3 Authority Key Identifier:
keyid:1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:aa:c9:a2:20:ce:7c:6f:f2:d1:c4:b3:65:38:77:41:05:63:
a2:bf:ff:81:a7:6e:59:6c:ec:03:22:33:d0:e4:89:6c:41:7f:
db:73:bc:b1:be:7a:45:0d:99:04:0d:c2:15:42:8d:b0:da:04:
40:1f:4d:09:5f:2d:5c:4d:a2:ca:85:f2:ac:c4:6b:20:f2:7a:
df:a6:83:85:a2:db:c5:24:36:a9:94:7b:74:ed:f5:61:7f:70:
6d:b6:c7:f7:34:1d:03:90:44:14:e3:d5:07:31:cd:47:44:5e:
e0:7f:2e:66:b4:05:94:9d:bf:8e:da:ce:68:d4:47:38:79:c6:
8d:78:00:06:38:93:a4:42:33:b2:70:5d:9a:6a:ed:cb:e7:28:
ec:48:68:bb:d3:f1:6b:0b:19:26:87:1d:99:2f:50:51:c8:4d:
2c:53:80:bb:4d:89:2a:51:b0:09:6e:d8:59:d6:2b:3a:c5:82:
d1:08:5c:31:62:3f:4d:a1:36:a9:38:1d:f4:f2:46:4f:fd:fb:
ca:ad:32:bd:71:47:91:35:f0:d2:4e:e8:e5:87:a9:5e:f9:17:
82:5a:a9:09:9a:1f:ac:62:0b:f0:28:c1:04:d8:cf:9c:3d:75:
f6:c8:33:f3:75:e0:2a:e5:1d:f5:a2:38:c6:2d:0a:5f:71:51:
cb:69:f8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:09:26 2025 by rpki-client