Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: 0Al6IVmsnM8ReE0v+tPmUUw/wxbSNSZPkSaSUrr2skM=
Subject key identifier: 6F:3D:E0:1E:08:E2:33:52:10:0B:14:D3:77:10:9B:4D:E0:46:59:36
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 0196B9A44910299DB52ED86C28317E68A763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 10:01:13 +0000
Manifest this update: Sat 10 May 2025 10:01:13 +0000
Manifest next update: Sun 11 May 2025 10:01:13 +0000
Files and hashes: 1: 5eRiGQx5boAqRAuznUmYz2xfqMQ.roa (hash: zDFWtpJ7+CfToiZs8AAMHmyitJykUodCcfEyyz3iDfc=)
2: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: sxfZhgFV+fm65EUdTTRir1LEIiRGHEIKpKPD4IpaJmk=)
3: FuRu0xLu2HvckUxx6CKawcRdyGM.roa (hash: X0KwYGhpxludEjFHlw9/03BXtRT7Yd1fekWuVBjCvVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:49:10:29:9d:b5:2e:d8:6c:28:31:7e:68:a7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: May 10 10:01:13 2025 GMT
Not After : May 11 10:01:13 2025 GMT
Subject: CN=6f3de01e08e23352100b14d377109b4de0465936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:1a:b6:30:ee:9c:34:da:13:8a:42:82:fb:
06:95:88:f4:68:ae:89:3f:5a:da:32:0c:8c:8c:83:
21:30:58:1c:59:bf:6a:f9:3d:81:64:f0:f9:38:c9:
b4:45:1a:c7:a4:ad:55:d1:6c:1a:fa:c9:50:11:f0:
84:ca:93:9e:6b:ed:8d:00:84:b3:15:83:4b:ad:b4:
77:68:52:1b:b7:96:cc:51:de:14:27:65:62:d7:20:
91:9e:3c:04:0a:38:80:b4:65:f0:c9:6b:4f:60:b9:
fb:3a:f2:d6:63:48:1f:46:79:cc:0e:50:5a:e8:dc:
95:14:b3:b6:e0:59:68:db:51:0b:84:2b:fa:82:f6:
e5:d2:49:a5:82:0f:90:a9:42:0c:17:ed:65:1b:ac:
d7:1d:9a:20:49:51:ee:27:a8:8a:be:c9:21:78:6a:
01:d3:a6:2d:3d:fa:60:5f:9e:d6:64:c9:3b:27:d9:
11:02:42:04:cd:44:95:3a:e9:99:3d:2a:33:fb:d6:
b6:96:a6:79:c8:ea:f0:46:8d:b9:53:65:f5:fb:f4:
28:f8:a6:33:d2:ee:69:84:c9:78:56:f7:cf:58:e7:
fe:3c:93:cf:cf:6b:ed:95:7c:8d:97:52:04:92:cb:
f7:b2:fe:5c:3d:eb:ae:6f:be:6e:f2:a7:1d:e8:54:
26:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3D:E0:1E:08:E2:33:52:10:0B:14:D3:77:10:9B:4D:E0:46:59:36
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:df:05:8c:e2:56:b0:e3:87:c8:28:db:d8:9a:ce:f1:b4:7e:
89:b4:ec:65:e2:38:8a:45:22:de:d6:d5:c2:91:02:fb:9e:d5:
61:12:d4:45:95:69:d3:7f:2c:42:72:d5:5d:a2:db:d5:c7:a7:
40:58:02:ab:ab:a1:d5:60:21:69:85:dd:9f:97:4a:18:0e:13:
53:9a:e7:88:1f:7f:92:57:74:ec:41:aa:93:d2:fd:89:d1:f5:
2d:3e:9e:f8:36:82:f4:43:9f:b5:77:52:a7:93:63:93:1a:de:
0a:b8:97:4b:6a:ce:9c:1f:a9:9f:55:92:8a:e8:b2:81:7a:4c:
1d:0e:dc:52:86:8b:ce:0f:7f:b6:5d:b8:67:0e:e0:92:af:aa:
db:60:96:a4:c8:b4:67:f7:a3:75:95:fb:b4:26:f0:f5:4b:3f:
90:87:e9:a8:25:bc:8f:79:57:c5:8f:ac:2f:91:42:3d:aa:27:
7f:be:53:8e:bc:b9:4e:96:94:4d:22:fc:b4:bd:38:8c:79:3c:
05:2c:e8:15:fd:5c:fc:09:c3:1e:bd:f3:a7:88:75:30:fe:51:
e1:5f:69:1d:dc:97:94:c0:fa:18:48:0d:c4:b6:f4:60:80:4b:
7f:b8:69:c4:6a:ba:8d:c6:47:37:c1:40:52:29:5d:8a:41:91:
20:a7:75:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:48:40 2025 by rpki-client