Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: llgHcb8OutlAbtTeG5QVAqtIFjNeUMiqh34qkIrMMqA=
Subject key identifier: EB:8D:65:2E:35:3F:BC:82:A6:EA:50:94:AF:09:1C:8C:20:A8:77:2E
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 019686922F551F4E547BBEE898237FC7B545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 0B73
Signing time: Wed 30 Apr 2025 12:00:49 +0000
Manifest this update: Wed 30 Apr 2025 12:00:49 +0000
Manifest next update: Thu 01 May 2025 12:00:49 +0000
Files and hashes: 1: 4eZ-orLf3Sw1i9FoVC_BgUuV6yY.roa (hash: Hm2QNZ0IWwgkGkpS2MI3Rx4rLkOrxRzbQrRfD6XRt60=)
2: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: U+64u/GWgNT7meC+oRAAHEVCnsr0Wcu42Ey1YyU6lQY=)
3: PvG7RaoFWA1C7HlDkfB4Ix4UWSE.roa (hash: 3vQKjjJTEuiCPTgwApvaXGsOiHre5b8+kVP9FzsOJUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:92:2f:55:1f:4e:54:7b:be:e8:98:23:7f:c7:b5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Apr 30 12:00:49 2025 GMT
Not After : May 1 12:00:49 2025 GMT
Subject: CN=eb8d652e353fbc82a6ea5094af091c8c20a8772e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:05:9d:c2:8a:5e:29:43:b2:66:01:a4:20:4b:
34:1c:35:61:f4:c3:89:bc:58:ef:db:b8:e4:92:bb:
31:f8:95:6d:55:c1:60:eb:98:67:bb:02:eb:bb:d5:
27:e5:c2:eb:57:6d:98:8d:30:5d:7b:a0:d6:ae:23:
9b:02:eb:5b:b9:02:67:00:6d:3f:ce:43:72:3b:92:
68:fb:9e:a2:ac:e9:a7:51:aa:17:3a:f6:f6:6f:c8:
19:a1:7c:80:69:ee:56:a9:bd:b5:71:73:99:19:6d:
fd:28:a0:d0:01:88:33:ee:34:6b:94:76:14:b9:2b:
b5:1f:b2:b8:b6:1a:a7:54:ff:2b:b0:05:88:12:e6:
6b:92:92:6d:f7:bc:1b:16:b0:9b:21:c4:47:89:b6:
48:b3:63:8e:e2:99:b2:ce:6c:b9:52:e8:78:50:dd:
b7:79:29:ef:be:d1:c3:90:19:dd:e8:a7:37:ab:7a:
fe:4d:7f:d3:b1:82:4c:22:66:5f:ce:9a:f5:8b:f8:
9b:9a:0c:c1:9e:00:14:00:51:eb:54:5d:d4:e3:88:
b9:31:bb:ed:ff:e3:b9:08:aa:c6:9e:53:a9:bb:a0:
df:26:0b:f0:aa:58:49:16:55:ea:85:0b:9d:35:65:
20:7b:f6:7f:c4:09:e1:8f:6b:b8:9c:8f:93:33:f5:
81:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8D:65:2E:35:3F:BC:82:A6:EA:50:94:AF:09:1C:8C:20:A8:77:2E
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8b:f8:b2:09:90:52:d2:3e:b4:19:d5:f3:fb:e3:0d:91:db:
a7:50:2c:77:a8:42:ea:9e:11:66:42:9b:22:91:ce:96:e0:5b:
01:5c:50:85:02:80:fd:dd:6e:bf:14:dd:76:60:90:cd:28:e4:
dc:53:50:c5:93:e3:4b:89:8c:40:a8:6e:a4:15:f1:a6:94:ab:
8a:1e:89:46:ce:5c:89:cd:4d:61:e9:9e:9d:2a:90:02:83:b1:
38:e6:3b:67:5a:20:5d:0e:6c:df:a9:05:e9:19:8c:1c:df:61:
86:46:10:42:48:21:1f:a1:75:16:61:ed:ed:db:b4:58:8d:76:
94:0c:4f:63:2e:ec:ad:ab:a6:82:78:f1:e9:46:21:0f:18:b9:
9e:ee:8a:97:8b:8a:36:3d:ed:60:9d:fa:78:ea:d7:cd:8b:57:
83:73:ef:4f:b4:98:a2:85:d6:95:4b:35:7f:79:8d:a5:e3:80:
0e:a4:bd:fc:f3:5f:ba:40:18:b4:7f:9a:99:39:83:19:09:d6:
2d:3b:7c:47:ea:cf:4f:d4:d4:eb:70:59:05:20:59:7b:2c:a5:
ee:ac:aa:8e:26:e4:09:41:a3:87:e8:fe:af:76:91:1d:d1:52:
43:13:cf:9e:ab:fe:17:57:9b:15:cc:7a:b6:82:ff:5a:8f:6e:
20:85:cf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:36:35 2025 by rpki-client