Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
File: j8Yziy6SHZEmxTYwPweMnruah1I.mft (raw, json)
Hash identifier: cPe67heh02SC9qVukIz0eaMuw5A8lFFJS+m4wkP5w8g=
Subject key identifier: 95:D6:AC:8F:44:BF:12:9C:AB:F9:40:F3:8E:DA:BA:64:DA:08:91:4A
Authority key identifier: 8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
Certificate issuer: /CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Certificate serial: 0196756785427E4EFBFAD1C1E52392010EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 04:00:40 +0000
Manifest this update: Sun 27 Apr 2025 04:00:40 +0000
Manifest next update: Mon 28 Apr 2025 04:00:40 +0000
Files and hashes: 1: E9E2NhUKJP_3TXPCgDM1hcFl3-A.roa (hash: aBze8FprGa3p4/CGvI/TFD3mAyVwA/i5ic5RvbopQHs=)
2: j8Yziy6SHZEmxTYwPweMnruah1I.crl (hash: p5GJzQ9CnV7Z4f+kLj3rGxF5jE7vbpm0YfOTdtzXIak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:85:42:7e:4e:fb:fa:d1:c1:e5:23:92:01:0e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Validity
Not Before: Apr 27 04:00:40 2025 GMT
Not After : Apr 28 04:00:40 2025 GMT
Subject: CN=95d6ac8f44bf129cabf940f38edaba64da08914a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e3:a3:f4:e1:aa:7d:18:95:7f:4b:58:1f:08:
92:0a:82:35:54:a3:52:1a:c1:02:a1:65:7c:20:29:
a5:9b:fa:d5:09:8b:81:ef:6d:5a:88:5e:83:a9:f6:
74:a4:6a:ea:41:72:fa:b0:23:83:68:74:16:8e:ed:
b5:11:08:b6:ef:35:2b:f1:ef:f4:35:46:d6:04:f4:
a8:4f:da:b5:0e:b2:c3:4e:21:35:a5:5e:64:35:32:
87:e8:25:10:8a:01:f9:a7:76:4a:2c:b7:7a:4c:32:
fc:c7:f8:6a:4a:55:33:6d:19:3f:6c:a2:80:ce:7d:
fd:87:38:2b:9a:14:2d:f4:32:b3:e4:bc:7a:a0:51:
2c:c8:60:20:98:68:28:cb:80:20:8e:e7:b9:b9:8e:
d6:fc:e3:72:eb:95:6d:b2:78:99:98:e4:a3:a0:71:
d8:4c:2f:fc:1f:c8:f2:3e:f8:a1:51:b3:ad:58:93:
59:a2:e1:ac:42:3f:6f:a1:f8:1a:0c:8a:f7:e5:62:
98:ac:b4:e5:25:dc:39:ea:0a:9b:cb:8e:9c:b8:4e:
a7:ba:28:1d:45:4d:13:e2:18:c7:a0:33:06:0e:3d:
29:b4:db:f4:42:d6:05:ff:07:e7:68:61:1c:ba:58:
03:0b:6e:24:ad:dd:01:69:b0:98:da:5e:dd:67:48:
7a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D6:AC:8F:44:BF:12:9C:AB:F9:40:F3:8E:DA:BA:64:DA:08:91:4A
X509v3 Authority Key Identifier:
keyid:8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:78:b5:ab:e3:6a:6e:27:1f:26:75:aa:17:c2:85:bc:5d:5c:
96:17:bd:29:37:d0:c5:1f:ba:3c:45:9a:73:bf:5e:ef:70:e3:
a2:6e:43:53:8a:c9:5b:0e:11:30:54:95:a8:dd:ab:2a:4a:c7:
66:8a:1e:aa:c7:25:61:9e:56:a7:a6:28:3b:21:93:91:49:45:
71:b2:1b:4d:16:4a:97:03:b7:27:f9:d4:b5:6b:e8:bc:24:15:
1f:04:21:05:13:8c:ac:54:05:f3:ee:d2:ba:b6:fc:c5:f5:c1:
ce:d3:0a:a7:07:b4:39:61:0c:bf:d9:c1:58:65:06:0b:19:3a:
92:48:f9:81:bb:65:b1:23:32:85:50:64:ea:cd:d5:d0:a1:ac:
ab:98:bb:f4:f7:ad:4c:ed:e9:e8:f7:a1:9a:21:0f:b7:ef:6a:
61:0b:8b:ea:55:50:da:ed:6f:7a:fa:fe:0e:d4:f6:63:49:49:
7c:f8:0f:31:11:c0:4c:84:6b:58:58:96:3c:93:d0:a3:d0:89:
27:04:3d:7b:b2:40:5c:35:18:50:eb:8a:e7:9d:a3:0f:2d:66:
76:97:4b:a6:c5:9b:e5:a5:07:f4:c4:71:d8:59:69:56:28:1f:
eb:24:83:56:46:7c:4c:8f:d8:cc:9b:30:3a:f4:f0:aa:83:75:
bc:fb:72:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:07:52 2025 by rpki-client