Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
File: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft (raw, json)
Hash identifier: mjhqGI5aZgx/R08SSNaW1jPdC2E2dGrz+wJy9mSieVo=
Subject key identifier: 14:34:A1:6B:E4:00:0B:5D:0D:DB:41:EB:25:B9:7D:2C:16:CD:01:EF
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial: 01975422FCAFF5F392068343F7930F0BDCC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 10:01:08 +0000
Manifest this update: Mon 09 Jun 2025 10:01:08 +0000
Manifest next update: Tue 10 Jun 2025 10:01:08 +0000
Files and hashes: 1: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl (hash: HNZjhiujOUhNeaDB+7LJ2u2wcvL/crs8rfXO54grtBQ=)
2: d-g1g1WIQH2eW5zQOoLECyf2CbU.roa (hash: 4hlHKC2roVEpNMRQA5ne6l615543DSp4qxsP/od40+A=)
3: kHVwAjV50K04XcEC52VZ9Z8xRlA.roa (hash: 2Boh063HYNHe4qTfS7TAeZC6aTKdY96/vHBa+9B6mso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:fc:af:f5:f3:92:06:83:43:f7:93:0f:0b:dc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
Validity
Not Before: Jun 9 10:01:08 2025 GMT
Not After : Jun 10 10:01:08 2025 GMT
Subject: CN=1434a16be4000b5d0ddb41eb25b97d2c16cd01ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:f4:b9:d3:b7:2d:d3:e9:c3:ad:8c:15:ea:
e8:31:8a:b7:a2:ff:b4:a8:46:09:ee:3d:eb:d0:26:
4d:04:97:72:4e:5e:5d:83:12:13:64:5f:ee:71:42:
45:fa:d8:91:26:52:41:20:7a:31:7d:3f:1a:0d:6d:
09:8b:ac:62:d0:b5:a0:21:69:8b:00:e6:f7:06:83:
ea:c9:c0:aa:82:b9:79:fb:a7:17:8a:c8:e8:9d:fa:
b5:03:37:52:4c:47:a6:e6:84:12:41:4f:00:9c:21:
7a:cc:3c:8d:9e:65:7c:36:b5:e5:69:ef:9c:e4:af:
f5:0c:cc:2e:04:10:3f:e0:b2:b2:dd:d3:50:d4:f6:
86:b4:65:5a:87:2d:84:34:95:77:e1:d0:a2:ac:97:
70:5a:0e:a0:dc:c6:3d:0e:f4:57:09:13:e4:21:bb:
26:c2:1d:fa:88:6c:37:91:37:65:38:d9:17:2f:32:
7f:bb:f4:ff:e4:74:46:db:ea:11:dd:d7:9a:78:50:
ca:91:7c:3f:a0:80:7c:e7:c8:1d:6b:91:f1:36:4f:
ac:ff:0d:71:99:87:ad:69:b5:40:ad:59:23:26:90:
03:0a:e9:f1:ec:dc:0c:a8:31:61:d8:10:50:f1:06:
d4:0b:d3:44:90:53:43:b5:e5:b6:f0:dc:4c:11:8e:
26:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:34:A1:6B:E4:00:0B:5D:0D:DB:41:EB:25:B9:7D:2C:16:CD:01:EF
X509v3 Authority Key Identifier:
keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3c:52:fa:03:0e:46:3f:4a:6a:33:c2:5e:42:a4:dd:54:da:
19:fc:e3:68:9b:69:65:5c:08:81:be:e2:cc:42:6f:aa:99:3e:
bc:e9:b7:a8:35:5c:55:d2:6a:58:4b:f6:c6:bd:b5:56:31:1a:
98:1b:3e:f1:1f:a7:18:ce:2a:31:e4:d5:3a:0b:6c:8c:05:64:
97:12:bd:67:a3:fa:e9:c6:4b:52:1b:88:01:4a:df:12:ed:7a:
8e:ac:52:d9:c8:09:e6:06:42:07:d6:53:3b:6e:19:b6:54:67:
31:f0:06:7a:37:79:b9:2f:3f:1e:b7:ac:77:0f:97:ba:10:77:
d0:93:43:dc:a0:37:34:11:c3:7d:cb:98:29:55:63:63:b2:09:
f8:4f:a1:b4:33:20:81:68:3e:c2:82:f0:6a:05:14:bb:97:46:
47:b2:c5:78:b8:df:d6:43:9f:15:61:8e:65:dc:de:56:a3:c7:
5a:e5:c7:be:0e:a1:e8:9e:8d:93:59:92:50:d9:4a:f3:35:07:
d1:5e:e6:37:ab:a6:c2:17:2e:5d:87:9b:f8:e2:00:ae:b3:b0:
dc:94:76:98:a2:a8:e3:62:94:ed:05:c3:24:4d:c9:33:d7:f5:
9e:2c:c7:d1:9d:d0:b3:46:3d:e5:0f:2d:d2:e8:ca:65:df:4e:
7d:19:88:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:51:43 2025 by rpki-client