Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
File: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft (raw, json)
Hash identifier: 5/9/SMv4wfNg423Gbdjab8SMog0tbnfFD011mDqjIAI=
Subject key identifier: 64:4A:50:8B:17:72:E8:4E:79:66:9E:06:25:53:08:F4:13:13:3A:79
Authority key identifier: 8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
Certificate issuer: /CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Certificate serial: 01968359DBD981CA3DB24E5C480E5A0AB891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
Manifest number: 14A8
Signing time: Tue 29 Apr 2025 21:00:26 +0000
Manifest this update: Tue 29 Apr 2025 21:00:26 +0000
Manifest next update: Wed 30 Apr 2025 21:00:26 +0000
Files and hashes: 1: di6vtJn17ke553wiZoaxDGK1MLE.roa (hash: HpCMH1Ia0lvZ8f3O26OMSYPbId0TPu+1abwCSdtco9A=)
2: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl (hash: 6F0gOxmuLTGpIpW9JogXYa2W/tJh1x+1qJLzZypihLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:db:d9:81:ca:3d:b2:4e:5c:48:0e:5a:0a:b8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Validity
Not Before: Apr 29 21:00:26 2025 GMT
Not After : Apr 30 21:00:26 2025 GMT
Subject: CN=644a508b1772e84e79669e06255308f413133a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:fc:60:0f:e2:53:75:5d:9e:07:b7:14:92:
0f:30:92:18:56:da:a7:df:d2:a0:2d:fe:84:fa:be:
34:40:8c:1e:60:2a:e0:a8:e0:eb:38:b8:34:c0:d4:
2e:83:7b:30:7c:04:6e:be:c1:5b:2d:56:15:45:e6:
86:5f:eb:d7:5f:66:1f:0e:55:e0:11:2b:46:10:9c:
e2:16:0b:4e:bf:9d:6b:76:cc:7f:98:6f:33:e6:c7:
66:81:51:c7:67:46:c2:ee:41:a1:07:a7:86:c4:32:
84:dd:75:02:ec:41:9c:59:5e:30:5a:69:91:38:2f:
ae:1f:c8:6e:8f:a0:95:7f:2a:8b:28:65:95:a7:43:
99:de:bc:fe:51:b4:88:29:c5:ab:2a:d8:fa:5d:0b:
fe:d3:a5:73:24:c3:3c:d0:8a:b2:e3:27:20:1e:dd:
dc:7d:6d:d0:b3:e1:b1:ca:bb:bd:6b:be:af:b4:cd:
0e:1f:5a:43:f5:e5:25:51:a0:b8:19:60:11:c7:c3:
47:97:a1:f3:f7:94:6d:1d:0c:f0:71:de:4f:3f:86:
a7:8b:2a:92:64:c6:f3:af:12:ae:e6:54:7b:26:91:
5d:d8:8f:7d:f1:c2:66:6c:42:9c:af:99:81:8f:ae:
f0:ef:71:02:8e:d4:43:8c:86:c4:68:c4:48:b0:d1:
6e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4A:50:8B:17:72:E8:4E:79:66:9E:06:25:53:08:F4:13:13:3A:79
X509v3 Authority Key Identifier:
keyid:8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5f:50:ba:8e:e6:ae:c9:4d:f3:49:f9:0e:55:8b:f4:93:af:
86:2b:1a:f7:24:3c:b7:95:90:3b:74:af:64:91:47:12:34:3e:
dd:16:ef:09:3a:93:32:2f:37:0c:91:a9:5f:81:69:2a:bf:9f:
b7:6d:cd:3f:c9:fc:af:5a:3c:11:9c:f8:3e:ac:43:c4:f0:a7:
10:6c:3e:5a:02:3f:92:7d:ce:02:a2:2f:17:c0:3d:66:34:ce:
d5:6f:45:04:00:50:74:f5:af:5b:63:6b:66:ba:a5:2d:6a:7a:
c9:a3:50:3d:b2:7b:32:fc:96:da:ea:fe:99:ed:49:f4:04:bd:
1a:77:31:25:ce:bf:4a:a2:87:42:51:be:66:a4:77:5d:03:05:
73:1a:2e:84:4a:98:7f:ff:ad:fb:ae:d8:e8:1f:d3:f1:0d:17:
67:26:c3:98:8c:f1:58:4c:1c:72:2a:40:7c:87:50:42:81:ed:
a2:2b:79:99:02:35:51:eb:8f:1f:3c:3d:4f:85:8d:86:22:21:
11:28:67:10:20:12:5a:c9:5d:8d:86:12:89:99:da:d1:ae:fb:
43:15:ff:70:21:7b:ad:eb:9a:9f:c4:a5:ee:94:0e:80:53:ba:
fa:45:3d:bc:80:de:f9:ea:09:fc:42:40:d3:6c:58:16:ff:f7:
36:68:c8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:53:21 2025 by rpki-client