Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
File: 8YBT6n86t5p16Ph1OGd1VR73Vzk.mft (raw, json)
Hash identifier: 6MXCnreuSfMqprwwng6L00FbRiBh823zywQlSnaeo0c=
Subject key identifier: 46:E3:D2:BB:27:3D:7E:39:81:53:D5:FD:9B:93:00:BE:38:A1:88:77
Authority key identifier: F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
Certificate issuer: /CN=f18053ea7f3ab79a75e8f875386775551ef75739
Certificate serial: 0196BF00E7B9E388F3F34E22D07B7A6DF070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 11:00:29 +0000
Manifest this update: Sun 11 May 2025 11:00:29 +0000
Manifest next update: Mon 12 May 2025 11:00:29 +0000
Files and hashes: 1: 8YBT6n86t5p16Ph1OGd1VR73Vzk.crl (hash: k+Ko0fK1cSujvjytU/iq3NIq1B/Yl5G3tFwVxmfOR+Q=)
2: yS5FI7nYjFnu1L1Am8Aua4oXXE8.roa (hash: LgnuacZQDPP2J60/EcJiQNzEwvS+wm94uYSyH+Ocir4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:e7:b9:e3:88:f3:f3:4e:22:d0:7b:7a:6d:f0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f18053ea7f3ab79a75e8f875386775551ef75739
Validity
Not Before: May 11 11:00:29 2025 GMT
Not After : May 12 11:00:29 2025 GMT
Subject: CN=46e3d2bb273d7e398153d5fd9b9300be38a18877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:69:c4:ce:23:99:10:96:83:34:fc:6e:3e:
fd:55:22:4c:bb:71:57:08:14:4b:ff:cb:6d:aa:dd:
48:06:b7:88:bf:01:6f:18:f8:d1:92:9a:ae:9f:f0:
a6:e2:5d:03:5f:7b:2d:70:cb:6c:0b:c2:8d:6f:05:
8e:59:56:c8:05:d0:83:5f:dc:2f:43:a0:eb:04:cb:
37:89:08:5d:b8:f7:de:9e:1d:6a:a9:c6:3e:28:e1:
bb:95:2c:f5:25:45:80:e4:4e:d4:c5:e0:41:b2:4f:
9f:e8:8d:a2:e7:94:1a:6f:f9:04:99:e7:3d:58:4c:
50:f8:cf:0a:63:db:92:cc:47:c2:ab:2c:cd:ce:7c:
7d:55:a8:a6:de:2a:b1:18:25:01:67:ab:f0:97:1c:
43:38:4f:03:69:8b:a9:54:b3:35:8e:d8:b7:4b:5d:
e4:cb:1b:ab:2a:6b:a1:02:f7:2c:51:aa:57:41:0a:
5d:16:62:70:5f:55:42:90:fc:6a:24:53:93:f0:07:
c4:8c:5f:9c:dd:5c:f9:e5:56:3d:76:7f:bd:fa:55:
6d:d8:c7:11:a9:28:e7:27:bb:90:e8:4a:7d:29:c6:
32:fa:fe:e0:b3:2b:c3:3b:8c:42:c6:4c:9a:05:d6:
b0:75:32:30:0f:5c:7c:e5:43:0b:08:62:de:3f:7e:
e7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E3:D2:BB:27:3D:7E:39:81:53:D5:FD:9B:93:00:BE:38:A1:88:77
X509v3 Authority Key Identifier:
keyid:F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7a:2c:2c:e4:f6:92:9b:5e:79:24:00:7e:2e:2c:f7:e7:5e:
e8:8f:71:08:c8:e7:e5:14:08:e1:66:9b:b9:46:be:b9:2c:a5:
e4:62:67:fa:75:09:1b:ea:45:c1:a4:a8:2a:05:f0:3d:5b:6c:
5c:fb:e1:16:c6:d9:09:ea:a3:37:30:13:48:62:08:52:13:07:
59:83:97:2c:68:96:3c:a3:91:63:4f:ac:fa:4a:8a:9a:bb:16:
cb:9a:f3:61:3f:09:f8:1e:ee:44:13:e8:a2:e2:a8:c2:e5:81:
d7:c3:f5:8c:28:45:19:9b:5b:de:90:a9:b9:1c:6d:eb:96:b1:
6b:29:cb:3c:df:bd:e3:d9:f5:43:29:c5:d3:98:09:6b:67:9e:
b8:14:30:3c:de:81:f5:60:a6:02:63:58:ca:ea:7a:80:4e:66:
0c:ff:23:1d:42:45:0b:1f:dd:f6:47:cd:f5:8c:e3:6d:5a:30:
ca:60:c6:7b:6d:5c:c6:b8:9c:cb:b8:6e:d8:97:bf:15:de:f3:
68:8b:49:63:a6:b7:54:4d:4c:c1:67:06:7b:d3:9f:f1:24:8d:
95:a5:ac:de:1c:51:99:8a:b5:d4:05:5b:1c:10:97:6c:09:21:
48:bd:cb:33:aa:82:97:0f:98:03:75:6b:49:10:f2:4f:f9:59:
e8:17:90:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:52:14 2025 by rpki-client