
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft
File: u8v1S15m1hoXV2yMc2vyZy47mho.mft (raw, json)
Hash identifier: lybqfZMgnZSv0UKYumGBQ72PzUs8uZZV8reuwROs1OQ=
Subject key identifier: 39:CE:9A:7A:3E:79:79:F5:74:5D:D5:5A:C9:39:74:69:22:8C:FB:5D
Authority key identifier: BB:CB:F5:4B:5E:66:D6:1A:17:57:6C:8C:73:6B:F2:67:2E:3B:9A:1A
Certificate issuer: /CN=bbcbf54b5e66d61a17576c8c736bf2672e3b9a1a
Certificate serial: 01969002A7042D669E6F84768EC1FC6C5207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8v1S15m1hoXV2yMc2vyZy47mho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft
Manifest number: 067E
Signing time: Fri 02 May 2025 08:00:15 +0000
Manifest this update: Fri 02 May 2025 08:00:15 +0000
Manifest next update: Sat 03 May 2025 08:00:15 +0000
Files and hashes: 1: u8v1S15m1hoXV2yMc2vyZy47mho.crl (hash: gtrJS3DHFyB5FDF4q2qWoVBFgYHnEyP/vxBnfGtc+GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8v1S15m1hoXV2yMc2vyZy47mho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:02:a7:04:2d:66:9e:6f:84:76:8e:c1:fc:6c:52:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbcbf54b5e66d61a17576c8c736bf2672e3b9a1a
Validity
Not Before: May 2 08:00:15 2025 GMT
Not After : May 3 08:00:15 2025 GMT
Subject: CN=39ce9a7a3e7979f5745dd55ac9397469228cfb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d3:ca:b9:c8:e7:ab:aa:5d:4a:f5:fe:9b:1c:
50:c7:dc:26:0f:07:42:37:eb:f2:94:1d:52:32:10:
b3:09:a4:f0:43:21:bb:50:b2:62:35:92:b4:d5:4c:
a9:46:8d:cb:37:d7:06:d8:84:e5:ea:07:5b:26:51:
40:ca:c0:df:8e:73:5c:3a:c6:e8:6a:74:11:a8:60:
4a:ff:ef:3b:10:9a:a6:3c:b8:66:0a:61:a0:6a:20:
03:12:9a:2f:ef:68:a6:de:f1:9f:49:fb:88:f5:ef:
8b:1b:f3:19:56:7a:d7:a2:a0:71:bc:82:5e:b9:7d:
d5:d7:e6:9e:37:67:c5:58:4f:22:73:50:8a:88:02:
22:5a:59:e9:5d:48:4e:bb:0c:56:cb:04:0f:e0:2e:
a2:ac:5f:b4:bf:10:2a:ec:d6:db:72:6d:17:c3:e0:
8e:eb:f4:23:67:0f:56:ba:59:ee:82:b7:7d:fb:56:
0c:41:82:f9:32:99:e1:e5:0a:0c:89:e9:a0:5f:02:
1d:0f:c4:ac:bc:dd:ba:b9:9a:68:77:e0:bc:f9:b1:
1c:ae:b8:9b:48:55:24:49:7a:1d:29:07:f8:a8:0f:
a9:5c:a6:66:3e:cd:af:a3:69:3f:c1:28:38:fe:c7:
a3:5c:af:ab:5f:ab:bf:2f:65:6c:e9:5c:ed:fc:56:
80:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CE:9A:7A:3E:79:79:F5:74:5D:D5:5A:C9:39:74:69:22:8C:FB:5D
X509v3 Authority Key Identifier:
keyid:BB:CB:F5:4B:5E:66:D6:1A:17:57:6C:8C:73:6B:F2:67:2E:3B:9A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8v1S15m1hoXV2yMc2vyZy47mho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/916742-51f9-4eb4-a195-29fd80ba4bf1/1/u8v1S15m1hoXV2yMc2vyZy47mho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f3:dd:0e:46:23:15:3b:9b:69:62:48:44:08:60:a4:f1:ea:
0f:b9:90:5b:21:30:c7:aa:3e:4c:d5:9d:f5:d1:86:f0:b9:72:
e9:d9:3f:05:5c:cd:28:95:82:2e:e3:e9:a1:6b:93:01:82:df:
5d:c3:f6:1e:41:c1:13:cb:3a:c2:0a:c6:65:f5:57:3f:38:c0:
61:e7:31:2b:91:57:8d:bc:2e:6c:1f:eb:9f:e5:c5:39:11:cd:
d9:d9:82:f3:bd:05:d9:0b:e3:ed:0b:6d:49:7f:04:c0:66:bd:
72:42:37:86:3d:1b:25:13:39:2a:a3:50:90:ed:86:f8:55:d3:
57:71:6d:3d:a1:f8:6f:41:db:51:b8:87:a0:d0:38:5e:38:d4:
1c:10:c8:5a:f1:78:8b:f9:02:26:dd:b9:f3:ef:44:72:b0:8f:
18:1e:4d:d3:ac:ea:7e:44:73:46:75:73:30:44:5d:80:d0:cf:
ba:26:35:5c:de:95:8e:e4:9e:74:ec:1f:e7:88:a9:4f:09:42:
30:13:9b:44:f6:86:5d:d4:1b:af:8b:49:4d:23:f9:fd:f9:be:
6e:79:0c:43:6c:b2:09:3b:1a:5c:5b:91:d6:1d:63:63:9b:6e:
fc:ab:08:c0:09:3a:94:a1:2e:49:e8:c9:ad:d0:95:71:fb:87:
34:c4:c6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:01:45 2025 by rpki-client