Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
File: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft (raw, json)
Hash identifier: YuhlAKw4xMB/NNSjIvDiE7Yyvzx+5aALO9R0cLBir8U=
Subject key identifier: 06:44:83:22:9C:CA:C2:93:C8:E8:89:99:66:A6:F1:3B:88:76:F7:93
Authority key identifier: 8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
Certificate issuer: /CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Certificate serial: 01968924FB07E56584F3FE25D623771FA57E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
Manifest number: 14AB
Signing time: Thu 01 May 2025 00:00:24 +0000
Manifest this update: Thu 01 May 2025 00:00:24 +0000
Manifest next update: Fri 02 May 2025 00:00:24 +0000
Files and hashes: 1: di6vtJn17ke553wiZoaxDGK1MLE.roa (hash: HpCMH1Ia0lvZ8f3O26OMSYPbId0TPu+1abwCSdtco9A=)
2: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl (hash: JOVT3a98A6pifQX+5NehHpJsQf2cu/Xm2EudfM77XKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:24:fb:07:e5:65:84:f3:fe:25:d6:23:77:1f:a5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Validity
Not Before: May 1 00:00:24 2025 GMT
Not After : May 2 00:00:24 2025 GMT
Subject: CN=064483229ccac293c8e8899966a6f13b8876f793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:4f:ae:a8:5c:aa:73:cb:63:88:83:a4:1e:
50:65:f5:05:d6:82:8f:6b:87:49:7e:77:39:e1:58:
2a:de:fc:d0:47:7c:e1:c0:b4:cf:2f:62:21:eb:0f:
61:b1:52:bc:70:82:30:a8:36:0d:40:0a:41:3c:31:
2b:c7:9d:91:3d:5b:a0:d9:fa:ec:6b:4e:e6:fb:cd:
55:92:b4:02:04:cc:15:76:f1:ff:42:aa:2b:24:5e:
1f:97:3f:e5:08:4c:05:5b:5f:f6:e5:b3:50:78:6e:
84:5d:2e:ee:d6:ff:0b:a3:1c:3e:d4:18:85:f5:1f:
15:4b:47:b0:66:05:ce:b8:3d:4a:c1:54:b9:c8:51:
bc:57:49:0b:99:5d:f6:7e:f4:1c:a4:ff:ee:91:aa:
a9:d6:09:67:d7:97:a6:0a:a7:20:70:31:49:d2:bf:
7f:83:59:30:2f:4a:bc:9d:d3:32:22:cd:e5:78:4f:
bf:ec:e6:ba:c3:75:b3:47:3f:61:79:b3:cc:ab:68:
ad:3e:1b:e2:1e:87:b9:b0:60:9c:25:f4:db:be:dd:
1e:9a:1f:ac:8e:cd:09:71:26:f7:d9:db:37:6c:f8:
ba:12:6c:32:2e:cc:ef:c6:dc:40:0b:2e:0f:7c:40:
92:11:1c:5b:b5:37:1d:e3:0c:5c:fd:38:86:c7:43:
bf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:44:83:22:9C:CA:C2:93:C8:E8:89:99:66:A6:F1:3B:88:76:F7:93
X509v3 Authority Key Identifier:
keyid:8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b6:c6:aa:ad:4a:95:18:df:eb:4d:00:2f:ac:6b:59:5e:cc:
3b:7c:e4:ca:fb:98:4f:41:2a:fa:23:ed:49:63:32:6b:1a:6d:
a9:58:4e:ba:4e:e8:b5:7a:64:77:bf:fa:2b:30:9e:0d:65:8d:
d1:72:9d:d0:65:68:06:1c:d5:96:8d:53:4e:74:1e:05:c0:e3:
e1:9d:f1:f4:08:c7:b6:3d:c4:cf:00:95:4c:d6:27:ba:9a:fc:
05:09:a3:af:8a:2d:d2:d4:70:11:b7:d4:68:4e:f3:9b:b4:23:
fc:79:87:71:d2:a1:9e:bf:55:6e:f3:55:ef:b8:ad:e9:aa:46:
c1:c8:ad:e5:41:0a:52:a8:ab:66:20:e0:03:f3:a4:a3:3c:e8:
ef:ae:89:8b:50:68:63:32:c4:1a:10:23:e5:ef:bd:4e:78:de:
ad:0c:15:cb:63:0f:4d:a5:6c:9b:b2:d6:5a:75:42:7a:e9:15:
b9:27:e2:5e:52:b4:95:97:55:fb:c3:99:cc:ab:8a:64:4f:c4:
a8:f8:8f:9c:87:ad:a1:a2:b6:c3:31:95:1f:e1:43:e1:04:b7:
f3:3f:a2:6f:83:57:9e:e4:25:69:7f:e2:2b:ee:bb:ec:6f:61:
0c:80:35:3d:66:0d:2f:10:05:ea:a0:f9:37:89:62:f7:8f:ef:
f8:07:ec:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:46:34 2025 by rpki-client