Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json)
Hash identifier: yxQKl/8A1XCTORYR8MhzhOBjlpo2KBO/uylGHQRAUw4=
Subject key identifier: FC:C3:F4:B2:84:1C:3B:B7:AA:E6:4F:73:44:1A:32:A4:E4:1E:74:8E
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial: 0196BCA4701507B05884F5F560C04997D3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
Manifest number: 14C7
Signing time: Sun 11 May 2025 00:00:15 +0000
Manifest this update: Sun 11 May 2025 00:00:15 +0000
Manifest next update: Mon 12 May 2025 00:00:15 +0000
Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: ZBS6fcI9iGlmPaORTTN5vkNGx/keACpPbzGh0Ii+b6o=)
2: yT1Jx8Ou-jYtMpuKi40cHf-H83c.roa (hash: Lx4YPLeLSMnJ3NGAZ4PST+Ci/ylYMYy1Z+vRgBl8ZqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:70:15:07:b0:58:84:f5:f5:60:c0:49:97:d3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
Validity
Not Before: May 11 00:00:15 2025 GMT
Not After : May 12 00:00:15 2025 GMT
Subject: CN=fcc3f4b2841c3bb7aae64f73441a32a4e41e748e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:22:43:62:f7:15:00:c1:14:4a:94:92:62:00:
cf:11:22:90:3e:17:38:ef:b5:45:69:c1:42:d0:68:
2d:14:ec:de:03:9f:54:7a:37:05:0e:ae:f2:78:51:
1c:32:fd:17:0c:a0:0b:e9:8b:8e:d1:02:96:09:6e:
ad:c6:af:11:2b:82:f5:d4:4e:51:a5:82:e3:53:f6:
bd:c9:73:56:a0:09:24:b7:6a:09:8c:a2:3f:0b:c1:
52:c3:3c:ab:67:52:98:7b:75:a9:07:83:4a:0c:54:
8d:36:e6:6e:36:5b:c0:91:af:66:ae:db:5a:03:2d:
c2:07:3c:96:9f:70:cc:2e:b4:4d:ac:f8:02:d6:0d:
d1:19:8f:2f:42:58:f4:ca:fd:7d:ef:08:03:ef:f8:
83:98:7a:0e:9d:10:1c:bd:c0:d0:68:eb:b1:a6:62:
1b:76:2b:10:33:d4:4c:54:46:90:f8:8e:ec:0e:a4:
69:27:1c:fb:03:f1:70:c4:43:1e:b1:93:83:cf:2f:
b3:cb:10:99:16:fa:40:d3:7d:47:40:c1:3d:d5:02:
ad:8d:3b:ba:ad:12:83:70:1c:21:38:00:af:0c:a1:
78:70:9c:ea:f9:f4:70:8a:d0:9a:77:9f:53:e3:a5:
56:4d:52:a6:18:78:bf:c9:d8:0a:f0:be:ea:02:51:
b0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C3:F4:B2:84:1C:3B:B7:AA:E6:4F:73:44:1A:32:A4:E4:1E:74:8E
X509v3 Authority Key Identifier:
keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:26:65:ea:0c:1e:96:fd:30:17:ca:05:01:f2:44:05:88:73:
f4:ae:b0:54:12:90:60:9e:a1:f5:f2:3a:e4:9d:28:8e:ff:00:
09:f9:2b:b8:65:0f:44:6c:4d:76:49:3d:07:15:7b:aa:d0:40:
1a:5e:06:cd:1a:1f:4e:7e:28:ab:16:bf:1f:07:2d:c5:50:c3:
30:26:34:c9:f1:45:05:44:54:95:0e:a9:cb:2d:10:8e:86:e4:
0a:30:f5:95:46:0d:f7:cc:85:e8:62:4a:22:b1:31:92:c8:33:
a7:6a:7f:8f:28:8d:28:ca:52:f2:5d:ef:11:16:6c:d1:77:33:
bb:fe:88:f0:82:d2:d2:12:0c:c9:61:bd:90:4e:6d:ae:31:06:
82:77:28:eb:25:ae:b6:17:b6:09:af:50:a8:ae:7e:ab:74:b6:
18:e3:40:15:c0:bb:a5:b6:87:a9:88:dd:ec:c9:bd:7b:9b:d4:
11:3b:5d:cc:78:81:48:0e:3b:b8:dd:56:75:e2:b8:e6:38:3c:
ff:67:a3:0b:5a:1c:b4:89:fb:08:29:ef:a6:e6:a7:82:d6:fc:
a8:49:80:68:23:1a:06:89:1f:e5:3b:41:86:78:ec:f2:48:44:
2a:77:a7:8e:85:8f:03:f5:03:cb:2e:e1:2d:9b:67:0e:0f:1d:
87:74:98:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:04:35 2025 by rpki-client