Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
File: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft (raw, json)
Hash identifier: bVC4aIcOWkdhBZ3amav/mpyDGycPKEU7Nsd71JJ4hBA=
Subject key identifier: 28:A8:90:E2:1C:0D:FA:58:5B:A4:5F:09:4E:9F:38:5D:DF:41:5D:92
Authority key identifier: F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
Certificate issuer: /CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Certificate serial: 01967AFB835BBDE9F7A5BA65D1A92E03C743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
Manifest number: CC
Signing time: Mon 28 Apr 2025 06:00:25 +0000
Manifest this update: Mon 28 Apr 2025 06:00:25 +0000
Manifest next update: Tue 29 Apr 2025 06:00:25 +0000
Files and hashes: 1: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl (hash: VQttuskI+f363BGhQ1qqEjS/MA8ni5IKuib2ocrRsH8=)
2: MDg3SGQivd4Gkhmi2ar9KtkbxPw.roa (hash: kp0L4LourZESQv5PNyUfmc/3RRGNdSH3s5Vl6lYig18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:83:5b:bd:e9:f7:a5:ba:65:d1:a9:2e:03:c7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Validity
Not Before: Apr 28 06:00:25 2025 GMT
Not After : Apr 29 06:00:25 2025 GMT
Subject: CN=28a890e21c0dfa585ba45f094e9f385ddf415d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e3:98:0f:41:ee:79:da:99:b1:73:6d:d1:6e:
f8:a3:53:4d:99:2d:ae:a3:d7:4f:45:5a:61:3e:2d:
87:81:9b:77:b5:fc:1d:4d:2a:5d:b3:37:3e:94:eb:
08:dc:35:fe:06:e6:33:90:ac:a9:c8:46:e1:10:61:
d5:74:5e:20:bc:94:85:9b:94:13:83:54:44:b4:00:
e3:79:8d:de:f7:cd:b1:9e:3b:15:ba:b1:89:e7:cd:
8d:92:a7:ae:0a:cd:76:01:89:9c:99:21:83:b8:2c:
70:a8:27:f2:21:a3:d9:f4:7c:41:c7:b2:1d:96:b7:
a7:88:ab:bd:47:f7:01:fc:04:c0:87:2b:f2:3d:bc:
63:b3:8e:e3:7a:62:fc:18:8d:20:a2:68:76:8f:38:
b7:5c:b6:1d:14:7f:2c:5f:89:04:70:3f:1f:b3:2b:
7c:3f:77:b1:93:27:39:84:6e:59:ab:85:cd:ef:53:
e5:95:f3:bb:e0:e7:8b:a8:76:b8:c1:51:96:47:5e:
20:86:f9:d4:53:0b:bb:5d:f6:b8:a6:8d:d3:9a:46:
b3:3d:16:fa:f9:d0:03:5b:a4:15:2a:69:7b:40:93:
ca:63:d8:17:3d:16:86:b4:28:82:c3:9a:c2:a3:39:
db:53:a6:a4:31:be:83:55:19:90:53:fc:81:50:a6:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A8:90:E2:1C:0D:FA:58:5B:A4:5F:09:4E:9F:38:5D:DF:41:5D:92
X509v3 Authority Key Identifier:
keyid:F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:25:e5:ab:2b:87:9d:34:67:b0:8c:c3:d2:ef:e6:94:46:ae:
e1:19:49:b6:e9:b3:5c:d6:98:78:d7:7d:f9:f6:5f:93:c4:1a:
b6:4b:3b:87:a0:da:65:89:a6:37:3e:7d:fc:84:b1:4d:71:a6:
55:9d:de:9a:93:70:2d:62:77:86:0f:17:6c:9a:f4:4e:b9:50:
99:13:66:9b:37:a5:a4:23:f7:3f:c9:76:63:cb:be:2a:96:9f:
58:2a:bc:a3:96:a2:9c:60:27:11:fc:3f:cf:27:bf:08:aa:80:
e8:7b:b0:aa:41:db:4f:7a:ee:4e:3c:8a:e1:67:64:dd:78:58:
4d:d5:ef:1e:2b:8b:a6:49:e6:fd:14:50:20:f8:c6:5a:db:53:
75:b2:0d:30:3b:9f:92:d8:5c:19:2b:cd:6c:bd:92:73:e8:20:
42:f4:a6:95:d8:03:b1:59:e0:42:86:7d:f6:f1:09:7c:41:fc:
7e:e2:3f:1b:11:0c:31:6d:be:42:af:71:0a:20:d8:56:be:e5:
17:f8:66:2c:c4:47:32:11:2e:79:75:2d:5d:c6:5a:09:cf:13:
6a:77:c4:50:41:ea:13:99:10:2b:d1:e2:3c:71:67:af:b7:54:
9b:7b:20:9b:82:f9:11:49:a4:f9:3f:cf:c5:ef:d2:ab:a5:47:
c3:41:67:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:39:58 2025 by rpki-client