Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
File: irYGzqebWr6BaDpjN5s5KJssq5M.mft (raw, json)
Hash identifier: DNsI+kbEGe2/sK3xmFSUKgU2o4eiaYFKy5Eakix3nms=
Subject key identifier: FC:C7:8B:03:8E:A6:C6:DC:79:0A:93:98:8D:84:C5:C7:3C:69:8C:A0
Authority key identifier: 8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
Certificate issuer: /CN=8ab606cea79b5abe81683a63379b39289b2cab93
Certificate serial: 01968A6E95E6E01ADB442C129B395E20C1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
Manifest number: 069D
Signing time: Thu 01 May 2025 06:00:25 +0000
Manifest this update: Thu 01 May 2025 06:00:25 +0000
Manifest next update: Fri 02 May 2025 06:00:25 +0000
Files and hashes: 1: Ol66WOHM5O0qZSOG9y7yOIgJsCo.roa (hash: tBXkTjKhKw+qp8WtoR3ZkzeeWQpNfDqudYVdDHWc62c=)
2: irYGzqebWr6BaDpjN5s5KJssq5M.crl (hash: X0pEnAxvcgx05UBZQNQ8o5O2YuusQBMPZF5XbyHUh2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:6e:95:e6:e0:1a:db:44:2c:12:9b:39:5e:20:c1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab606cea79b5abe81683a63379b39289b2cab93
Validity
Not Before: May 1 06:00:25 2025 GMT
Not After : May 2 06:00:25 2025 GMT
Subject: CN=fcc78b038ea6c6dc790a93988d84c5c73c698ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:08:5b:ba:80:d4:92:b2:73:40:fd:6b:0f:63:
99:37:32:45:f3:0a:a1:47:6b:4e:d0:68:5b:1a:e3:
09:f1:52:86:74:96:2e:1c:20:ba:66:df:df:e0:83:
b0:93:6b:be:26:ef:b3:9b:b0:f0:65:07:a7:24:c2:
23:20:ad:9a:93:52:72:36:c8:af:5f:53:1e:7b:03:
8e:65:dc:03:33:72:37:f1:8e:a2:23:3b:5d:82:99:
91:84:f7:43:cc:4a:09:25:b1:cd:a8:ea:99:c7:1c:
50:30:0f:68:77:7a:45:e7:07:8b:c8:29:2b:8a:ab:
8e:b8:f9:73:df:ff:00:3f:54:fe:bf:22:ed:da:80:
79:52:22:32:c0:c6:da:03:bf:ed:6c:a0:36:e3:93:
6e:ee:82:23:ce:d0:08:6e:84:bb:8d:ed:49:30:bd:
c8:92:29:ef:06:cd:d5:b1:cd:f4:52:d3:bb:2d:f2:
8f:f3:82:c1:cf:88:bf:a5:d1:eb:89:3b:62:81:27:
cf:fd:cc:65:e8:5f:bb:14:c0:50:b4:a7:22:88:ca:
2a:91:32:26:ca:65:57:ae:92:83:db:bf:8d:2b:ba:
2f:b4:39:68:f9:d6:14:4d:71:3a:3d:7b:ab:bf:a3:
d5:ba:79:db:5c:a6:94:bd:2a:9d:c6:33:a4:fb:23:
57:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C7:8B:03:8E:A6:C6:DC:79:0A:93:98:8D:84:C5:C7:3C:69:8C:A0
X509v3 Authority Key Identifier:
keyid:8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e1:25:ab:db:84:64:55:7c:db:ee:79:e1:dd:e4:b8:f9:3d:
53:93:44:f8:83:67:51:07:c3:ea:2d:8e:89:64:70:d0:4a:bc:
77:4d:80:d0:16:6d:4e:e5:aa:12:50:94:07:5f:60:13:d4:82:
09:77:bf:36:bd:69:5c:a7:73:f9:39:29:f3:04:05:17:ea:06:
4b:96:cd:87:bd:c9:b3:31:14:e8:c2:ce:6f:bc:37:67:6b:b4:
03:59:60:20:3f:ea:c0:cc:d2:42:53:df:86:2b:db:6a:db:4d:
51:b0:7a:19:f4:ff:39:62:93:5f:1d:15:48:c1:1e:bc:8a:7a:
8b:cd:b5:e7:40:18:13:23:b3:4b:9e:fb:d1:b1:67:b8:6e:8b:
fd:f8:ea:bf:bf:99:bb:4d:d6:8c:6a:79:20:85:2d:c4:e6:e0:
54:fe:f7:c7:62:91:df:b1:0d:d4:d5:e3:dc:24:e8:c3:aa:cd:
b1:5f:c4:a6:36:95:45:68:61:62:6c:36:44:bb:64:b7:8c:e3:
1d:37:fa:34:52:14:8f:b6:3b:50:bd:5e:f9:0c:96:27:8f:71:
93:28:f6:dc:44:b8:25:92:b8:0f:4d:34:12:28:9b:5d:4d:74:
3b:4b:78:8a:f8:04:bb:32:80:87:6c:1b:45:53:06:48:1e:92:
d7:61:11:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:52:41 2025 by rpki-client