Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
File: yOx8SlcVXOjexbHNYv-oQBexb1g.mft (raw, json)
Hash identifier: kKYfRVvFHoiOe9fHkRqRa26PHW6fcKjSg3WBeSdc7F4=
Subject key identifier: AF:44:44:C1:C6:30:90:88:F8:B1:5D:C5:18:15:29:D0:A0:45:37:84
Authority key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
Certificate issuer: /CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Certificate serial: 0196741DC312FE0AAF1B7E623F28EDC6D5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
Manifest number: 0431
Signing time: Sat 26 Apr 2025 22:00:29 +0000
Manifest this update: Sat 26 Apr 2025 22:00:29 +0000
Manifest next update: Sun 27 Apr 2025 22:00:29 +0000
Files and hashes: 1: PkfIS5G435_5emRi_COnc1WyLBs.roa (hash: IOA4UWzzxA3Jqfg26gD/3jtgnYFnAYPzln5ueD/sEOk=)
2: yOx8SlcVXOjexbHNYv-oQBexb1g.crl (hash: lUUokHH/yfns2khEEXG+iu5y9C4vBbJk0+mOWnIUncc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:c3:12:fe:0a:af:1b:7e:62:3f:28:ed:c6:d5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Validity
Not Before: Apr 26 22:00:29 2025 GMT
Not After : Apr 27 22:00:29 2025 GMT
Subject: CN=af4444c1c6309088f8b15dc5181529d0a0453784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:08:6f:6c:d6:27:d7:fd:09:42:79:b2:8a:
85:76:cf:53:38:f4:1a:4a:45:5f:80:2a:ec:c8:fc:
d3:27:ef:8d:33:4e:61:7f:48:d6:fe:bd:87:5e:13:
13:27:cc:93:a0:f4:6e:c8:f2:07:ae:1d:3b:1c:6c:
c0:82:f1:5b:52:ff:aa:22:dd:14:46:79:56:f5:0f:
0a:8c:01:10:ae:1b:8a:d6:03:b2:4d:fb:fe:e7:c5:
12:b6:44:70:9e:ff:7b:ba:d9:2b:bb:c8:cd:8a:5d:
f7:09:43:23:c1:60:3d:2a:f6:cc:50:2c:14:c3:7a:
12:09:0c:20:10:30:ee:29:47:d2:bd:f5:8d:52:97:
e4:e7:7e:d2:f1:54:95:ce:cc:eb:b7:95:54:fb:d5:
a3:b0:c0:94:de:49:8f:f6:df:43:16:83:2d:57:d9:
7f:71:31:7c:2c:7f:2c:9e:c0:64:68:26:0e:70:44:
8c:3f:f8:76:3c:96:d3:c4:89:02:ff:e9:b2:39:33:
b4:75:2e:09:63:86:ef:cb:fe:e8:7e:25:b6:a2:b0:
1e:a8:15:99:8a:b8:a3:fc:fa:78:e4:92:1e:5a:6f:
d4:2b:97:e2:14:d2:ee:8c:3c:3b:27:e2:11:c0:da:
a3:00:d6:63:8f:f9:2d:11:68:af:95:bc:e0:af:0e:
c1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:44:44:C1:C6:30:90:88:F8:B1:5D:C5:18:15:29:D0:A0:45:37:84
X509v3 Authority Key Identifier:
keyid:C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:32:09:77:7f:ce:64:68:ee:fe:be:11:9d:0b:d7:b7:e2:4b:
58:b5:ed:9e:dd:cd:ad:01:c3:be:0f:4d:11:65:e8:a7:75:ee:
07:57:98:0b:48:1c:8a:d8:2b:bc:24:17:51:2c:86:58:78:2f:
a5:a1:dd:b4:bd:de:fc:03:a3:ab:4e:e7:a2:72:c6:64:b9:2a:
b2:5d:59:84:31:41:fe:7f:5e:1c:89:1a:7f:14:0c:0e:57:12:
27:5c:4f:f6:93:50:c5:b9:09:24:74:58:a7:58:f3:f7:6d:ea:
ea:1a:31:33:85:74:b9:cd:61:23:8d:bf:3c:a6:5d:5d:2d:4c:
d5:f4:dd:60:72:e9:88:dd:72:92:fd:dc:a9:c4:05:0c:ae:b3:
61:30:25:82:b8:4c:52:3c:a5:6b:1b:fd:ac:08:23:f5:b7:56:
0d:f1:1b:49:38:18:85:4a:95:29:52:3e:7d:7f:52:f9:ff:d6:
b5:75:4f:fd:00:f0:c9:96:fc:90:ce:47:6f:77:38:31:12:ba:
f7:d9:d4:22:89:c1:32:a7:80:d2:bd:4c:3d:56:7b:ab:f8:36:
d4:d0:68:ab:10:a3:50:e5:6b:8e:2c:32:95:b7:04:bb:4e:01:
6b:3c:25:23:04:55:4c:b5:8d:bc:74:6d:0b:8c:ee:79:8f:c0:
c6:8f:23:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:08:38 2025 by rpki-client