Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json)
Hash identifier: MdGcltCHIi7Dc/SdaxiwE7Gdb0s6jHqMGUDxMSTYEcc=
Subject key identifier: 7D:13:C7:80:EC:AD:3A:B2:80:3B:52:C8:9A:3B:EB:C8:95:C4:66:3C
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial: 0196C239AB0A29181D7581A5A2EBE4EE198B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
Manifest number: 012C
Signing time: Mon 12 May 2025 02:01:21 +0000
Manifest this update: Mon 12 May 2025 02:01:21 +0000
Manifest next update: Tue 13 May 2025 02:01:21 +0000
Files and hashes: 1: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: Oz8UUHHd+ZMAO4PRonGUo+yiFMHIsB9L1BILp0939BU=)
2: J84DjEhi_gEyD8-a87brecsYsNM.roa (hash: A66a3xMstZT0T3ni5nfFwwrP4QVYA3zVnvHKSfI3TDI=)
3: yitip1-kJD5dQRdS53t4KfkARHM.roa (hash: cgy9OckdIOJNSQ5+HtqFQg4ACHdIPiP47DMcF7GV8yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:ab:0a:29:18:1d:75:81:a5:a2:eb:e4:ee:19:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Validity
Not Before: May 12 02:01:21 2025 GMT
Not After : May 13 02:01:21 2025 GMT
Subject: CN=7d13c780ecad3ab2803b52c89a3bebc895c4663c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:f2:12:9a:a9:5e:65:a4:bb:42:5b:ae:05:
43:0c:19:ae:b8:34:9d:f1:de:c4:17:3c:31:42:68:
4e:34:0f:6a:8a:e4:24:cd:3e:f4:1a:02:64:53:9d:
52:02:89:a2:40:76:e4:75:5b:87:38:3c:ce:50:c8:
ce:c1:c0:de:1b:1f:06:e9:bf:b3:04:b4:d5:ba:27:
71:98:08:9a:91:7e:5b:1d:d2:54:37:7b:4f:03:a1:
40:4b:db:2d:79:d8:23:30:22:35:61:9d:9c:d1:54:
8d:76:00:a7:5a:f3:cb:26:b0:17:94:99:42:97:35:
a1:0e:f5:05:0d:05:8c:e7:9c:bf:71:ef:d7:f5:09:
84:5b:06:2f:02:27:17:ed:00:c1:9f:46:b5:e3:74:
88:70:4f:fb:c4:29:f2:98:eb:ef:53:26:15:0e:0a:
0d:3a:03:4a:f6:ca:3d:34:5b:da:cb:04:52:5e:7f:
97:43:59:af:55:db:0b:51:7a:fc:15:aa:b0:fe:89:
4e:07:8a:5d:52:25:6a:12:96:62:ab:e1:44:2a:67:
71:c3:59:6f:2d:be:72:f7:bd:0f:bb:9e:94:37:29:
9f:6d:d0:38:c9:44:8d:1c:b2:16:2c:62:52:c9:67:
88:c1:35:04:57:2c:83:a8:28:ea:ef:e7:7c:f7:f3:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:13:C7:80:EC:AD:3A:B2:80:3B:52:C8:9A:3B:EB:C8:95:C4:66:3C
X509v3 Authority Key Identifier:
keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:98:e3:bc:be:ec:87:0a:50:c4:bf:e9:18:54:d0:01:31:80:
7f:8b:78:4c:63:c9:64:b6:6c:98:35:43:0f:12:5d:94:7b:26:
5d:f4:da:dc:e6:d7:80:19:4d:77:c7:7b:e7:d2:81:30:e6:f6:
97:1f:7c:29:cb:00:32:a2:83:b5:22:42:3b:b7:53:fb:77:e6:
4c:ed:d9:c2:2e:a5:a0:b1:4e:a9:47:81:1a:62:47:ed:34:f1:
72:f7:d8:81:a8:38:86:52:2c:f3:e4:9c:ee:1a:3e:29:b8:e3:
8a:0e:82:17:7b:e4:cb:b0:73:60:ff:2a:1d:d5:48:09:07:31:
3f:a0:ee:aa:e0:8a:37:72:dc:1c:84:f3:87:82:b6:dc:c3:14:
c7:33:77:5a:fd:c2:7c:57:25:4e:f1:90:7f:e0:bf:d2:59:d1:
c4:65:18:fe:d0:1d:15:fc:bd:bf:86:b2:69:2a:f0:1a:7a:dd:
a4:4d:79:ae:37:38:06:98:b6:cf:51:3d:b6:2c:bb:8a:77:0e:
1f:05:a3:89:17:77:55:5c:52:c2:be:1f:5c:71:eb:c4:62:c2:
9c:e1:8e:51:a8:d8:8f:5c:60:57:ea:5f:53:db:56:72:97:05:
8e:0b:e7:01:a2:99:63:d1:be:7a:6c:b5:59:29:e4:50:4c:8e:
ef:74:c0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:44:59 2025 by rpki-client