Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File: 8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier: g/csGIitCMJ3VMzIPkaeUd7S25pBLnX5nAPScmTzuPA=
Subject key identifier: 78:63:D2:31:54:B0:8F:C2:AB:B4:6D:18:4B:83:B7:81:8B:F8:76:A1
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 01969ABE359F7A22654208391426252BA287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number: 1523
Signing time: Sun 04 May 2025 10:01:18 +0000
Manifest this update: Sun 04 May 2025 10:01:18 +0000
Manifest next update: Mon 05 May 2025 10:01:18 +0000
Files and hashes: 1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: HpAFAELz2Dkxkhx1fO0VUU62Ee5WLJB2xxXLmQa6o3o=)
2: fS7ilcusBx7RbV5l98s5It9Po4c.roa (hash: +tzJ2xKk0Wh2nHt9C5QqjNQ/SNVB0Rw0vsX3jkZV7rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:be:35:9f:7a:22:65:42:08:39:14:26:25:2b:a2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: May 4 10:01:18 2025 GMT
Not After : May 5 10:01:18 2025 GMT
Subject: CN=7863d23154b08fc2abb46d184b83b7818bf876a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:58:41:02:53:9d:84:5b:9d:6f:e2:85:8b:
20:6a:e5:f6:cf:43:97:bb:18:28:91:2b:99:4c:16:
02:94:0a:df:02:7a:5f:64:3b:01:77:bb:8c:47:27:
92:53:37:2e:e6:2d:c3:c0:3f:48:e2:14:24:9c:17:
a6:98:c8:f8:bc:b9:73:e5:4b:36:40:c4:04:5e:51:
4e:05:94:bc:46:81:a0:7d:5e:4f:a3:d3:29:13:3f:
1c:bb:1d:74:30:8f:57:28:3a:df:39:81:c6:06:9c:
4e:51:a3:73:f8:84:fb:17:e2:21:ac:2b:95:bc:4e:
89:1c:b8:ee:83:76:35:11:e4:59:89:f2:d6:ad:66:
b0:71:c4:99:f0:af:13:44:8e:b5:ed:3c:f0:34:a9:
a6:85:12:48:6b:d9:0a:14:96:af:87:6d:22:57:fc:
1a:b2:1f:ee:e9:07:6d:b7:48:57:c6:ec:1b:87:10:
73:e2:69:cf:b9:37:ae:b2:f9:81:b1:0b:93:cc:70:
bc:a2:2a:52:fa:8b:60:6f:ef:72:d2:ad:01:e7:e1:
eb:8c:c8:63:6d:fb:ef:f3:ce:df:a8:62:e5:03:98:
59:d0:17:e4:d2:51:07:88:94:e2:a2:a8:00:81:f7:
09:6b:97:68:11:f8:6e:05:c2:c5:a5:51:22:2e:45:
2e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:63:D2:31:54:B0:8F:C2:AB:B4:6D:18:4B:83:B7:81:8B:F8:76:A1
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6b:07:b8:8c:5e:53:6e:42:a6:51:5e:2e:95:31:2c:a4:d2:
86:03:3d:fc:60:ee:2d:fc:a9:79:b8:50:0f:3a:79:31:a1:fa:
23:3d:56:40:a7:e6:82:56:2a:bc:86:45:4d:e6:ee:80:7f:e8:
9c:14:85:97:ff:63:d6:7c:98:57:c1:66:39:a4:ca:fc:c5:d9:
bf:df:45:35:0a:6b:f8:60:b5:fb:0e:1a:36:2b:a9:8d:e5:cc:
aa:12:99:fa:9b:bc:0a:ef:fa:69:8f:ea:55:d4:4e:1a:0b:4c:
0f:06:ca:6a:f7:a9:30:4c:8b:4a:dc:8a:55:5f:06:6b:2e:2b:
53:5d:15:bb:df:df:78:9b:98:d9:f2:6a:90:58:60:e7:26:55:
ed:71:ad:3c:62:23:13:f9:a4:a4:d0:7e:cb:e4:a8:ab:8a:06:
e8:c0:a3:94:0e:61:e1:4a:85:00:3d:43:ad:41:7a:cc:e1:23:
08:60:bb:9f:13:49:85:ca:6b:14:c5:1b:e6:b0:12:2c:e2:1e:
91:76:eb:7c:ed:5a:79:25:2f:c3:c1:40:af:ce:be:11:eb:9c:
7a:77:a6:88:1e:14:13:95:6c:2c:69:bd:77:3f:17:74:7d:c0:
bb:03:f8:b4:4b:4a:ec:ce:76:a3:1d:81:2b:11:1d:94:1d:bd:
df:28:4c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:30:05 2025 by rpki-client