Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
File: 8NWfEh_H76DBC33WFNlah1bVNgY.mft (raw, json)
Hash identifier: x5BiGyP+9F4pX7GTKprp9bc5dfNpAjyp41HOnGeuNnw=
Subject key identifier: F0:83:63:68:EA:E3:83:41:58:D5:0C:27:53:B4:F5:16:B2:45:79:FE
Authority key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
Certificate issuer: /CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Certificate serial: 0196A1D27C2F9771DEF3F15DFA6D13B5DFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 19:00:48 +0000
Manifest this update: Mon 05 May 2025 19:00:48 +0000
Manifest next update: Tue 06 May 2025 19:00:48 +0000
Files and hashes: 1: 8NWfEh_H76DBC33WFNlah1bVNgY.crl (hash: JT+J+dDPLl2C//8jJqzNSPRn/9/Bmb7ZSjgedb7T7Fg=)
2: bExl4A_tLBAbX-OeFCCRrL9Dsyk.roa (hash: MMmRyVv8bOvPQ4JoDHNxbF0lksG8UDkMZAPsWlNfgRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:7c:2f:97:71:de:f3:f1:5d:fa:6d:13:b5:df:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Validity
Not Before: May 5 19:00:48 2025 GMT
Not After : May 6 19:00:48 2025 GMT
Subject: CN=f0836368eae3834158d50c2753b4f516b24579fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:c8:41:29:bb:8a:0d:6d:8c:dd:3b:8b:0b:
af:26:ea:96:04:3a:d3:24:27:2b:35:d2:64:13:58:
67:ec:47:f3:8c:ae:1d:ab:f7:ae:32:c2:7e:89:7b:
66:8f:4e:71:97:e5:9f:fd:0b:1c:0d:dc:55:83:33:
10:ea:18:e7:e0:b3:d8:b5:67:55:ba:27:49:96:46:
f7:b0:b8:c3:aa:c6:a5:2c:d3:e6:47:d8:3d:4e:95:
1c:ad:20:a9:51:08:a8:e9:62:fc:6b:7f:2c:53:6c:
c2:b6:51:b8:35:cc:55:79:e3:47:0d:09:ea:64:38:
1c:2f:0d:40:79:64:4c:f6:9d:ca:50:d6:d5:d7:7f:
c4:bd:ba:86:2e:cf:84:c3:d5:c6:e4:34:1a:94:1c:
06:8c:08:d9:d7:91:58:f2:c2:9c:35:d4:ab:45:85:
1e:21:6f:0e:4b:ba:3f:45:72:26:d8:ea:5f:06:61:
de:fa:df:63:5c:1a:ec:f3:24:96:1d:b8:45:02:17:
67:de:2d:17:e4:60:bb:6e:84:cd:ce:2b:d1:08:67:
28:69:71:a0:b6:c5:ea:20:da:57:de:98:7c:7c:ef:
6c:b7:7e:17:29:cd:8b:73:53:88:27:07:a5:7f:07:
d9:b8:17:56:0d:5c:9d:11:03:84:08:db:ee:70:8f:
e2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:83:63:68:EA:E3:83:41:58:D5:0C:27:53:B4:F5:16:B2:45:79:FE
X509v3 Authority Key Identifier:
keyid:F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:30:ca:d9:5e:25:45:02:7c:97:40:5d:a2:3c:45:5a:0a:cc:
a5:24:e6:ae:17:2e:44:d5:ba:eb:23:e8:21:7f:76:68:48:bc:
07:aa:6f:61:08:b8:31:10:96:3b:22:f8:2c:02:6f:af:c6:22:
b2:bf:b5:1c:f7:7c:17:42:1f:28:2d:84:cc:25:a1:9d:85:fe:
af:e3:2f:fb:1f:ec:9d:c7:eb:33:2d:9b:05:e8:98:68:e5:57:
9d:8e:99:59:a3:ef:55:b8:6a:8a:d5:99:85:bb:80:44:17:66:
8f:fa:6b:f5:d6:1c:04:e8:5d:b5:a0:37:5f:f3:11:99:70:14:
99:b9:61:a1:18:8a:08:40:1d:5d:41:2f:d9:47:ee:27:00:8f:
c8:79:b4:45:13:64:88:11:2f:10:2e:1c:75:41:15:84:dd:9e:
0c:be:8b:e0:c0:b6:18:e9:55:25:41:f5:76:a1:4d:b9:62:fa:
a0:65:d3:77:8b:e6:f0:5e:b3:f5:55:5e:7e:d3:7f:71:67:34:
b4:a8:7f:5e:dc:53:b6:eb:66:35:bb:b2:43:36:4d:dc:79:96:
34:c5:64:50:41:f2:4a:30:ee:e2:51:42:c7:11:d3:95:e8:ea:
8f:2e:75:23:3f:e0:0e:60:a1:46:a7:a8:e8:53:20:50:19:bd:
d9:ce:99:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:24:38 2025 by rpki-client