Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
File: 8phZtw6kUOE62ockwOtr7syNqpE.mft (raw, json)
Hash identifier: 76TFDjfq4mm2y7h342uggXryU5wm8LKc7eO/gW0kEGo=
Subject key identifier: 5D:C0:25:F6:93:16:34:E3:FC:49:C4:FF:06:8D:41:76:3E:6E:6A:BB
Authority key identifier: F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
Certificate issuer: /CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Certificate serial: 019686FFF6B4ECD1A0EA5D087C83FE8CCA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
Manifest number: 0579
Signing time: Wed 30 Apr 2025 14:00:43 +0000
Manifest this update: Wed 30 Apr 2025 14:00:43 +0000
Manifest next update: Thu 01 May 2025 14:00:43 +0000
Files and hashes: 1: 8phZtw6kUOE62ockwOtr7syNqpE.crl (hash: Mn4Te57sZFFxFLRSIvYn/Q2PxlvmfFbFh+m1QdT9X4g=)
2: ieIY7b0KhvQU4QgMPfI50NN4QnY.roa (hash: 5XIl/Vpt8manbA7AG4mG7L9mNTT0fdofSZrC08n/ke4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:f6:b4:ec:d1:a0:ea:5d:08:7c:83:fe:8c:ca:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Validity
Not Before: Apr 30 14:00:43 2025 GMT
Not After : May 1 14:00:43 2025 GMT
Subject: CN=5dc025f6931634e3fc49c4ff068d41763e6e6abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:8d:ea:81:89:9f:b9:ac:21:df:fc:86:65:
f5:12:bf:ea:7d:c4:a4:26:73:a6:89:82:7d:0f:b9:
5d:8a:4b:cf:d1:3f:d4:2e:3f:e0:c5:42:b4:47:87:
0a:ce:91:ad:4f:74:a6:b6:05:a2:46:8b:95:55:1a:
58:b5:d3:cd:15:5e:73:45:f8:73:7d:5b:0b:dd:7c:
87:a8:db:03:05:95:19:c7:8d:93:16:72:48:dc:11:
60:b2:cf:67:3b:d8:46:e0:dd:0d:0b:8d:3a:4c:71:
ec:9a:ca:23:30:da:24:c2:ce:60:f9:48:9f:b5:40:
03:d4:df:e2:64:c7:53:4a:37:c3:6d:cb:58:cb:55:
c0:d8:14:75:5d:9b:d8:a6:8b:a6:e9:ff:1a:e9:74:
82:fa:88:a4:5a:a4:78:4c:6d:40:9d:18:f7:0b:56:
30:b1:b6:fd:65:75:e6:c2:77:2f:e4:5a:66:e2:17:
2f:96:d8:ec:10:19:5a:fe:97:ad:49:fc:1b:1a:a1:
62:0a:26:9b:d9:e5:25:40:7a:59:21:c9:7c:f7:6d:
a7:8c:1a:7e:af:99:33:05:c0:f3:c6:b1:c6:aa:67:
30:51:90:23:58:45:4f:dc:fa:c1:ff:f8:d3:9a:c3:
91:56:d2:c3:c7:54:e3:db:1e:3a:1d:d2:37:44:76:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C0:25:F6:93:16:34:E3:FC:49:C4:FF:06:8D:41:76:3E:6E:6A:BB
X509v3 Authority Key Identifier:
keyid:F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ec:61:26:c9:60:a8:93:1b:f6:12:af:a6:13:61:77:0d:12:
9c:13:2e:55:2b:44:5d:59:14:00:22:fe:f5:ec:2b:bc:f4:c8:
6a:97:85:2e:cb:cc:e3:b6:ca:f8:e6:76:87:44:c2:2b:b6:af:
5f:f5:2f:53:97:1a:d3:91:33:05:2d:2b:e3:5b:65:b8:01:90:
05:82:e6:da:a9:ce:f1:c2:bf:18:c4:9b:b1:93:2c:18:19:71:
58:65:9a:ab:a4:a4:11:e9:cb:a7:dc:41:4c:0b:81:1e:75:94:
be:7e:2f:56:40:e2:f3:3b:7e:fd:7c:ce:09:1b:ef:15:f5:58:
1d:65:97:74:14:84:59:74:70:e6:ce:31:e7:41:88:81:44:65:
2d:17:87:73:69:d6:7b:21:86:85:87:8b:53:48:ee:da:f4:d0:
c5:e3:d1:b0:a8:53:76:d5:6b:dd:d5:c9:6e:78:68:6d:d8:96:
6f:92:a3:49:bc:33:c2:bd:fb:01:e4:e4:82:19:af:cc:05:4f:
94:a6:de:2b:09:f0:f1:f0:9e:d0:42:cf:e9:a9:e0:b5:a3:5b:
30:fa:42:eb:ee:26:4e:a8:7d:44:6c:63:30:75:f9:a3:79:01:
3a:67:16:d2:6e:bb:4d:e0:f4:09:2c:bc:8e:9e:21:be:0a:8a:
21:e1:12:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:28:15 2025 by rpki-client