Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
File: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft (raw, json)
Hash identifier: DnxjJLdJlX7zyRAQSmpu+jrm3Y4KaPAGaza+29FVVNU=
Subject key identifier: F2:3A:C3:6D:3B:76:6A:67:20:0F:93:02:E3:92:25:88:54:99:38:8E
Authority key identifier: AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
Certificate issuer: /CN=ae7f187c12782fc4d844762235993329c4563a0d
Certificate serial: 01969F76255CE065A676F0659726392919C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
Manifest number: 0B41
Signing time: Mon 05 May 2025 08:00:42 +0000
Manifest this update: Mon 05 May 2025 08:00:42 +0000
Manifest next update: Tue 06 May 2025 08:00:42 +0000
Files and hashes: 1: ArXM7RJDnDKHHLBE21eoL2lE76c.roa (hash: n1+IHvUCKe6KRZXjngvQSrArHwaB9mNvliy4XN3wMhA=)
2: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl (hash: +U6YrkHXYTU6CXnxdVpVOT0OPpmwcQOUXAJULy2m0Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:25:5c:e0:65:a6:76:f0:65:97:26:39:29:19:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f187c12782fc4d844762235993329c4563a0d
Validity
Not Before: May 5 08:00:42 2025 GMT
Not After : May 6 08:00:42 2025 GMT
Subject: CN=f23ac36d3b766a67200f9302e39225885499388e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:e1:21:d5:23:95:a5:6c:c3:7a:a1:ab:43:
43:e4:2f:47:e7:80:67:99:ab:ea:c8:83:42:dd:b9:
9b:bc:7f:a7:da:03:2a:fd:f2:f0:89:58:c6:68:5b:
60:b5:ce:50:89:64:61:fc:d6:c0:0b:c6:60:70:fb:
4c:97:36:0d:66:6f:e6:f9:96:5c:73:1b:0a:6b:fa:
4c:14:58:0d:f8:92:a6:fd:aa:fa:98:23:aa:82:e1:
76:55:74:ed:00:92:02:b3:1a:12:86:bf:5d:b0:4a:
b4:da:3d:b4:53:39:8f:f3:e7:c3:1a:0f:45:f1:e0:
02:e8:50:1c:4c:95:c7:8d:4f:a4:85:16:5d:ae:e7:
a3:2d:a1:d1:9f:bf:68:6a:fd:13:0d:a2:c7:1a:ab:
c8:04:3d:9d:27:4c:6c:d2:39:f6:dd:26:a7:eb:38:
68:3f:d0:55:d7:f7:71:01:f5:8c:62:24:48:f2:8b:
3a:1f:d6:9c:18:d0:83:02:35:94:ca:83:49:27:38:
ce:03:76:b4:26:21:73:4f:c4:ad:30:31:84:84:e7:
00:af:cd:72:32:3d:3e:f0:15:c6:6f:72:97:2f:18:
ab:8a:87:a4:a0:30:09:86:ee:95:a6:e3:6c:88:2d:
87:69:4f:3b:85:5f:26:b1:d2:b0:13:cd:3b:6a:9f:
d3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3A:C3:6D:3B:76:6A:67:20:0F:93:02:E3:92:25:88:54:99:38:8E
X509v3 Authority Key Identifier:
keyid:AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:71:f4:5a:94:27:c1:06:88:d2:5a:75:e4:9c:dc:9c:9c:51:
eb:f5:8c:56:eb:fc:6c:bf:c1:59:8b:e7:26:f9:c5:e3:48:91:
ad:f2:0e:32:d2:8c:ee:98:60:4a:60:99:03:13:41:34:93:32:
59:ca:fb:98:11:b0:36:b9:4b:3d:eb:74:eb:ce:db:d0:a8:81:
dc:2a:ee:1c:1e:8b:ae:43:85:74:a2:b9:f6:8f:ff:b8:19:35:
60:af:04:21:96:7c:14:cc:69:68:24:4e:0b:05:f4:58:9c:64:
75:a8:96:a5:ae:20:98:0c:30:f9:06:a7:cc:c1:71:ec:55:5b:
21:59:43:0a:86:6f:c6:ee:58:1e:d4:f9:c8:82:16:ef:cd:62:
49:ef:41:86:d2:a2:7c:b9:cd:08:ed:6e:36:3a:a5:07:2e:f2:
64:e0:b6:da:76:6b:02:3a:65:8b:41:f1:c8:fc:7e:e6:cf:10:
f5:5a:dd:18:59:86:6f:b4:27:ae:2e:1f:fc:a0:c1:13:03:22:
9c:b4:79:2c:2a:2e:64:f4:a1:5d:bf:c8:01:b4:9b:47:24:f6:
ca:b6:97:a8:12:12:ce:0d:57:3c:e1:1f:a5:94:8e:3a:88:5f:
15:fd:a0:4e:15:78:ff:da:91:65:e2:10:af:11:43:ea:ca:f1:
dd:f0:30:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:29:37 2025 by rpki-client