Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
File: 8bv5vuUx897i0Du_Tmnvgu7bma8.mft (raw, json)
Hash identifier: 2Jhc4PX9uCt5cF7AbFh2EigQlXYUkCYIRJhaknTXZQo=
Subject key identifier: 19:93:8C:50:00:C8:43:1B:2D:A1:76:B3:CA:A0:36:6D:CD:62:40:0F
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Certificate issuer: /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial: 019657262D043E2B3A828A2F3BE1AE4F8721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
Manifest number: 10A9
Signing time: Mon 21 Apr 2025 07:00:41 +0000
Manifest this update: Mon 21 Apr 2025 07:00:41 +0000
Manifest next update: Tue 22 Apr 2025 07:00:41 +0000
Files and hashes: 1: 0tRdpRIVKa8GC5rndgVUBjWyq_0.roa (hash: zQ8BfDuwqWf4BKhuE29aPhx2YBI5m36iLFxsbczWouw=)
2: 8bv5vuUx897i0Du_Tmnvgu7bma8.crl (hash: 6JmVaz/XSqwjQ818Aou5fIBZzm00BsFCUhqlCsZyRl8=)
3: MkYvLYpqbrY1k1hziBPcgNzDk5A.roa (hash: 9jZ4rUSHtTJBWwTiSaqDWjUP8V/ZrhGAYaJndS1KB3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:2d:04:3e:2b:3a:82:8a:2f:3b:e1:ae:4f:87:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Validity
Not Before: Apr 21 07:00:41 2025 GMT
Not After : Apr 22 07:00:41 2025 GMT
Subject: CN=19938c5000c8431b2da176b3caa0366dcd62400f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7e:ce:2e:33:e2:31:17:fe:d5:42:e4:d0:9c:
12:2a:05:db:1e:ab:22:74:a4:0c:ab:3b:2a:ac:e7:
0c:f8:89:0b:4c:30:07:c3:cf:89:f7:c5:c8:37:48:
f3:d2:6d:22:54:5b:86:0b:58:de:16:a1:2f:08:b6:
8e:26:84:5d:dc:f8:80:0e:c9:02:6c:06:5d:94:b5:
d8:5b:53:10:1c:a3:04:af:97:31:cb:14:33:fd:fe:
69:93:79:52:b0:81:ba:8e:a9:3e:9f:b5:8f:f0:37:
14:6a:3d:ae:7c:39:ed:e0:03:ad:5c:63:ea:99:df:
db:4c:71:40:fe:81:05:49:8f:77:95:d7:9f:3d:77:
3e:f0:02:f6:06:d1:ae:e3:96:ae:b9:59:df:74:e2:
db:16:2a:a1:f6:a3:42:bf:51:01:b0:0a:98:51:c4:
05:a9:43:3c:56:d4:33:10:83:e6:55:b4:f7:ef:bc:
e1:d6:3f:68:52:68:99:74:ea:79:71:4e:01:ee:82:
44:8d:3f:7b:a7:21:79:d0:4d:c6:c7:27:d1:dc:48:
df:ec:7e:0e:aa:ea:f2:3b:8a:70:9f:95:b1:bc:37:
ac:2a:7a:01:a2:70:1f:f8:b9:2b:7f:6a:4c:5a:34:
99:4b:0c:04:15:ce:77:90:2a:63:fc:6f:ce:35:f7:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:93:8C:50:00:C8:43:1B:2D:A1:76:B3:CA:A0:36:6D:CD:62:40:0F
X509v3 Authority Key Identifier:
keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e1:b2:bd:38:4a:ee:5e:c1:dd:e8:fe:64:2b:5f:ca:5f:a6:
b8:0f:60:76:43:b3:bb:d5:b6:d3:07:f2:ca:48:4d:bf:59:f7:
5c:12:14:00:fa:f1:58:23:a4:28:4a:2f:32:90:4f:e9:42:8c:
cb:86:a5:c2:47:37:07:fa:22:2d:1f:2f:1f:d1:49:29:3e:51:
e0:b2:1f:19:b6:9c:a3:90:4c:12:71:7c:96:45:7a:50:e9:91:
66:b9:80:9a:18:99:3f:30:c2:e7:b5:48:77:61:90:cc:fd:75:
85:0f:e3:9a:2b:c8:60:ab:76:a2:bd:3b:00:ff:11:80:ec:38:
04:61:8f:bc:f4:ce:58:ea:50:1f:b0:fc:4b:ca:cc:1a:03:ff:
88:57:8c:fa:d2:13:5f:71:a5:cb:42:49:c4:cd:ad:d8:91:4f:
a4:83:20:7e:42:f6:f1:91:b7:d0:e8:c2:2d:7d:d9:99:9f:f8:
00:ce:e6:a1:26:d3:72:e2:9e:58:f0:71:a3:e2:66:fe:cc:c9:
75:eb:5a:48:e9:f2:13:22:8d:ac:8f:36:17:3d:96:77:27:a4:
42:ee:f8:84:9f:ec:16:be:eb:2f:1a:fc:7d:95:d4:76:78:20:
7b:d5:c0:46:29:cb:00:ef:22:0f:fa:d7:b0:da:e2:d7:b1:06:
ce:63:e1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:40:07 2025 by rpki-client