Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
File: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft (raw, json)
Hash identifier: Vf/QYLSjlHoflptmjGWAEOSbR7HznIbFSJfhhMryX98=
Subject key identifier: D3:11:C5:2F:2C:C4:62:BD:1D:AA:ED:6E:11:68:C6:82:F8:E4:D2:B0
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Certificate issuer: /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial: 019696E168FF59F662BF30D8FA5644437DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
Manifest number: 0B25
Signing time: Sat 03 May 2025 16:01:16 +0000
Manifest this update: Sat 03 May 2025 16:01:16 +0000
Manifest next update: Sun 04 May 2025 16:01:16 +0000
Files and hashes: 1: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl (hash: ccmyOcey1fNHFTsEHFhuIpirSRq0+RnXB/H+ceT8hN8=)
2: ViytvvvqRpbhZ8khzk-URy1_cok.roa (hash: GO9E5IMUAfx38THMM6EhNHK1/Vpo8T9/VGp4F+NJQF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 10:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:96:e1:68:ff:59:f6:62:bf:30:d8:fa:56:44:43:7d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324d0f47297680535eb2799189db888b4066782
Validity
Not Before: May 3 16:01:16 2025 GMT
Not After : May 4 16:01:16 2025 GMT
Subject: CN=d311c52f2cc462bd1daaed6e1168c682f8e4d2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:80:93:30:1d:56:4b:dd:89:71:a1:55:a4:
88:4f:65:83:d7:6f:9c:8b:b8:46:fc:d4:31:ec:4a:
6a:1e:c7:99:76:f4:f0:33:ce:4a:f1:78:97:69:44:
9e:c7:79:6b:a1:8d:05:c8:7c:5d:df:05:c0:4e:4d:
62:d8:10:bb:cf:1f:68:4b:1b:0c:74:65:f6:a6:ce:
9c:36:38:93:6c:41:fb:87:1e:a6:72:99:6c:9f:c9:
a0:fe:a4:de:0a:46:0c:df:ed:b5:41:f1:57:96:fc:
70:9b:43:07:2f:2f:b4:f0:6b:3c:55:15:f8:34:92:
48:7d:41:4b:e9:d7:ae:14:7d:c6:0a:18:76:98:d8:
56:32:01:38:87:20:9e:62:37:df:64:01:30:cb:00:
65:cd:53:63:45:30:3e:d9:7e:e4:82:9b:b7:2c:9f:
da:74:a4:e1:5b:03:ab:af:22:a9:be:d4:1b:fe:9a:
d3:3a:f6:ed:1f:17:92:e8:f8:7d:9d:bd:24:06:01:
5e:0f:e2:32:29:dd:5c:2c:4d:98:cd:1f:0f:c0:d7:
39:5a:de:b4:3a:f4:05:02:00:62:a1:29:b7:46:02:
7e:2c:51:93:75:ec:58:bc:60:ab:d3:87:0f:4a:26:
75:b5:f6:ff:af:f2:6b:85:28:82:90:60:c1:94:7e:
f0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:11:C5:2F:2C:C4:62:BD:1D:AA:ED:6E:11:68:C6:82:F8:E4:D2:B0
X509v3 Authority Key Identifier:
keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:80:e3:0b:e9:62:ed:06:5a:21:1d:78:b1:8b:d9:b8:07:48:
da:70:c8:c7:d6:c0:56:e0:15:84:37:a2:e1:a2:75:db:56:eb:
d5:79:7f:e3:9c:a1:0c:6f:21:75:d4:4b:be:91:a5:52:1c:b8:
1d:c1:bb:d1:c7:1a:9f:a2:ec:bd:51:e8:23:61:e8:03:96:5f:
e3:cd:55:b4:e3:a9:85:e9:22:66:d8:02:58:73:79:ff:5e:1a:
f1:0f:32:3d:27:ff:29:11:d0:eb:f6:a6:e9:c1:2e:cf:11:c5:
9c:f8:4e:4d:ea:08:c4:34:dc:cf:93:58:76:3e:90:e4:f6:d6:
f4:71:df:ab:c3:1a:d3:01:c8:11:00:09:bd:40:82:ef:a8:12:
88:e1:6f:b3:9a:8f:2e:b4:93:89:65:e5:f4:04:99:13:d1:64:
1a:ba:bf:2c:b7:40:c4:22:90:1a:44:86:52:9e:29:ab:f9:62:
89:17:22:6f:57:1c:7f:04:7d:ed:dc:3c:08:17:6e:22:ab:65:
15:6f:44:1b:c3:d7:20:5c:41:ea:48:69:ed:f1:36:42:95:ce:
f4:6e:1f:26:e3:e4:62:fc:22:58:0c:80:94:d4:92:89:ed:62:
54:2e:d5:65:e0:49:09:b7:6e:e7:98:77:9a:ed:a0:b1:ed:e0:
8b:04:9e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 18:19:40 2025 by rpki-client