Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json)
Hash identifier: nta1Z7fhzYmlM0RCrHoMXYJRmLvuN0Mb1Hu8LXwbxUI=
Subject key identifier: 6E:4C:6D:71:75:90:4D:49:01:07:BD:CF:00:15:13:2A:E3:21:44:82
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial: 019678D674CC5FA244C85B52F0F68E3438A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
Manifest number: 0106
Signing time: Sun 27 Apr 2025 20:00:42 +0000
Manifest this update: Sun 27 Apr 2025 20:00:42 +0000
Manifest next update: Mon 28 Apr 2025 20:00:42 +0000
Files and hashes: 1: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: 8hf/yRZSrzfik0qHe9n6peHEn+WEWPfsaoEXHyCBXPo=)
2: J84DjEhi_gEyD8-a87brecsYsNM.roa (hash: A66a3xMstZT0T3ni5nfFwwrP4QVYA3zVnvHKSfI3TDI=)
3: yitip1-kJD5dQRdS53t4KfkARHM.roa (hash: cgy9OckdIOJNSQ5+HtqFQg4ACHdIPiP47DMcF7GV8yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:74:cc:5f:a2:44:c8:5b:52:f0:f6:8e:34:38:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Validity
Not Before: Apr 27 20:00:42 2025 GMT
Not After : Apr 28 20:00:42 2025 GMT
Subject: CN=6e4c6d7175904d490107bdcf0015132ae3214482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7c:f9:f5:57:de:4e:8d:f5:85:5b:85:a4:5a:
f2:c0:57:c2:d5:31:ee:f0:28:d7:b5:64:95:f4:87:
09:b1:99:0d:af:90:3c:55:d9:42:d9:0c:93:05:40:
15:32:b7:85:9b:b7:31:68:3f:1a:a7:8e:bd:5d:0e:
9f:bb:43:41:64:5b:9f:a4:5c:3c:d7:d4:16:d7:96:
98:23:a0:13:f2:0a:b3:8f:4d:7f:27:b0:b0:77:f6:
83:cf:13:bf:bb:c0:6f:e8:f9:89:98:53:5a:87:8f:
b6:31:42:24:7f:45:6e:49:56:93:24:d5:fd:78:2a:
c9:15:0a:f1:03:11:7e:42:68:e6:82:34:df:43:30:
c6:61:9e:90:d7:94:94:d2:f6:ba:7f:ed:a9:1e:df:
60:ee:df:62:83:d9:06:98:ae:86:86:72:8e:8c:89:
29:52:65:15:29:1f:e4:40:a8:3e:a5:93:aa:74:c1:
1d:4d:c6:2d:70:98:1a:8c:eb:7b:46:77:3e:f8:52:
2e:71:37:57:83:74:a8:d9:19:4b:4c:3f:15:1e:b0:
18:fe:ea:f4:51:9c:11:b6:98:b3:e7:63:cc:bc:d3:
a5:bd:c8:e8:6b:92:fb:03:55:81:eb:65:37:c0:db:
25:fb:40:7b:e2:e2:4f:93:af:11:2b:54:a8:5b:02:
3d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4C:6D:71:75:90:4D:49:01:07:BD:CF:00:15:13:2A:E3:21:44:82
X509v3 Authority Key Identifier:
keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:5c:97:77:fc:96:fd:0b:a6:31:31:af:1d:2a:71:1f:55:74:
3e:43:3d:b7:6c:ca:b5:89:0a:1b:57:4d:80:0e:c4:88:6d:09:
1a:54:54:b5:99:38:84:6a:a3:33:bf:ae:84:ec:a5:af:88:7b:
43:3b:2b:48:7c:a7:60:3a:f7:1b:be:e0:59:f8:32:70:51:f3:
7c:eb:8b:01:29:08:9d:01:df:47:c8:58:d8:5a:67:7b:57:c3:
61:36:79:66:3c:59:c3:84:d2:6c:03:c5:28:a9:fc:cb:a5:9e:
5d:38:d2:81:39:17:b6:19:72:0b:86:65:e2:3d:f6:d6:16:0c:
13:99:ea:b5:22:09:18:7f:c4:45:e3:2e:40:64:6a:91:33:bc:
c6:dc:74:c7:c5:2e:b7:ea:8e:9e:8f:ce:44:b3:d1:5f:82:c3:
8d:84:47:b8:1d:00:dd:b9:92:46:a2:56:05:e0:32:b5:97:d1:
60:09:68:2a:b0:0b:de:51:a7:6b:34:e3:ee:2d:e6:67:9f:d4:
35:66:88:ae:c3:22:ec:9a:07:1e:56:eb:5e:61:84:3d:b9:d4:
c6:2d:9e:a8:0b:00:ed:1a:6b:c7:a6:91:7b:b2:79:10:4a:00:
4f:d8:4e:d2:7f:f2:70:a5:5c:63:3c:04:78:d3:06:ac:40:e7:
73:7a:e0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:45:33 2025 by rpki-client