Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier: FxK+0CAWfm1PXb6Psro+/Pf05YYCTVK9bxL0bi03fTE=
Subject key identifier: 83:FD:43:D6:AC:C7:67:01:D8:2D:9E:6E:4F:C0:DE:A7:02:F9:1E:47
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 019692963CFD9A40797BC73FAB7A7F599027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number: 12EA
Signing time: Fri 02 May 2025 20:00:41 +0000
Manifest this update: Fri 02 May 2025 20:00:41 +0000
Manifest next update: Sat 03 May 2025 20:00:41 +0000
Files and hashes: 1: 1-_88t3hetlFBanVHA2DU4QOnOb4.roa (hash: latlaUAnjm2YfCy+iquDacPIbXwTYbtI55yE63hF5qU=)
2: 9bvrYkBqiqKMnn8_sup9wHDDvAw.roa (hash: OmLw4QBgjy48HSO5mm8k/HJy6DwFgzHoft0ePJqTlrs=)
3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: NpFucjrSFMZXiA71K9OLEmUcdRBF7+TL6Lx5QtA0Vys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:96:3c:fd:9a:40:79:7b:c7:3f:ab:7a:7f:59:90:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: May 2 20:00:41 2025 GMT
Not After : May 3 20:00:41 2025 GMT
Subject: CN=83fd43d6acc76701d82d9e6e4fc0dea702f91e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:b2:7d:50:a9:f4:34:af:ac:4e:5f:4f:04:
8c:9e:72:3c:7f:c7:4d:0a:a3:cd:f9:e9:85:9e:93:
1e:b3:bc:95:02:3e:9a:17:b6:75:3a:c0:4d:38:9a:
b4:eb:4f:b6:7f:81:e7:17:b9:89:8c:7e:81:38:69:
28:9f:d3:23:d9:b5:b3:96:97:83:92:3a:83:ac:b2:
fa:bd:b7:5d:d0:16:12:84:94:c5:ed:53:ac:ce:01:
b5:aa:98:c0:b8:2c:15:6d:ec:33:a9:04:ff:70:ae:
37:1c:c0:21:c2:2c:ea:2b:c9:1d:93:19:31:f5:86:
f4:b8:73:59:0f:8e:8b:cb:0d:21:de:d3:a1:8e:04:
e9:4f:29:84:c2:0e:98:c6:cb:d0:81:26:37:f8:01:
59:43:fc:49:06:7b:f7:dd:42:99:f2:25:8e:35:58:
b7:9f:a0:59:de:12:04:71:51:45:9f:81:25:c8:fd:
d1:ad:4a:eb:e7:04:59:cc:fa:4c:0e:b5:5e:24:b1:
cc:00:f8:dc:81:40:12:9a:94:5f:53:80:61:26:b2:
da:af:2e:c3:97:e9:22:1b:18:08:14:f4:23:2a:5e:
8f:13:34:71:18:57:37:2e:07:53:01:e2:63:41:43:
4d:90:88:88:a6:0b:4d:10:7a:13:b8:ff:ff:c8:63:
d3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FD:43:D6:AC:C7:67:01:D8:2D:9E:6E:4F:C0:DE:A7:02:F9:1E:47
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:df:33:b2:50:27:b4:8e:46:d7:6c:58:ad:14:0a:d1:89:5f:
b6:5e:6a:7a:8b:5e:71:dd:ca:46:3d:20:00:4b:54:08:6e:c1:
39:ef:f0:b8:7f:f6:5f:bc:b2:a6:8e:f5:68:fb:ff:33:23:60:
92:89:de:33:99:52:de:1e:20:9f:be:ce:8a:45:3b:83:3f:6b:
a4:df:a0:2c:9e:3e:4b:29:0c:f7:80:59:7d:2a:7a:86:62:fe:
42:f7:43:26:5f:1a:4d:db:76:bf:10:9c:1b:c6:8f:f4:bf:65:
24:51:88:c9:ba:cf:ee:ec:c1:40:74:06:60:18:f0:65:c9:0f:
46:e4:e2:3a:8b:4c:a5:b6:f5:6e:f2:29:07:3c:18:fb:e0:84:
88:b9:fd:b3:5d:50:c3:42:98:e9:79:52:78:85:5b:fc:0d:b7:
75:bd:db:44:11:40:d2:cb:9d:ea:80:59:cf:03:e2:f1:f0:f5:
f3:1d:23:6d:a2:4d:4a:4d:e9:5e:61:a6:3e:24:7a:3c:cd:3a:
b3:dc:1b:2f:a0:71:4e:07:dd:54:00:a3:0f:14:75:6b:7b:48:
29:e4:97:07:83:a6:b9:90:71:5b:a6:a5:13:83:00:57:e0:7c:
9d:30:ed:64:4a:94:b2:66:f0:82:a0:19:d4:f8:cc:1f:fd:9b:
1d:fb:93:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:06:35 2025 by rpki-client