Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
File: 8PY2_se1stGN43l-aYTAaVXnFtc.mft (raw, json)
Hash identifier: PoRKq7vnOwVq/iQuz4J+XKZLOjz2aAdz1i9uJeMJSWs=
Subject key identifier: 82:F8:81:04:29:9D:C0:9A:B8:CF:E1:8C:97:15:EE:8A:90:0D:01:F2
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Certificate issuer: /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial: 0196B4B4A73A327AA976CA72B72B96A7C974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 11:01:00 +0000
Manifest this update: Fri 09 May 2025 11:01:00 +0000
Manifest next update: Sat 10 May 2025 11:01:00 +0000
Files and hashes: 1: 8PY2_se1stGN43l-aYTAaVXnFtc.crl (hash: Ef1XuibLvVIiEpi8kViPa33Dhob8Rr7ev8CYzVr9WDc=)
2: rChpwrHAhzHtDWk3Wn4ou5CDTWY.roa (hash: rliHydAwaJdesMgVkjuoZQYXcZjxQiZ7KBN8WESMw/M=)
3: t92LD4JF1zzqhKIJX4gc4PGoZiU.roa (hash: QB9NxoH5XmIj8//Y6YIrgAvA3ml34TrM1hbyfS/v07g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:b4:a7:3a:32:7a:a9:76:ca:72:b7:2b:96:a7:c9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Validity
Not Before: May 9 11:01:00 2025 GMT
Not After : May 10 11:01:00 2025 GMT
Subject: CN=82f88104299dc09ab8cfe18c9715ee8a900d01f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:2e:48:ec:55:11:d5:b9:3d:91:9c:d1:2c:
23:35:0a:7a:2c:1e:17:29:d2:73:88:38:1a:83:17:
08:49:e3:a6:d9:62:21:40:19:21:cd:67:b2:21:23:
60:ed:49:15:14:af:8e:61:be:84:56:ec:4c:d3:24:
a1:c9:d8:79:cf:90:60:9e:a3:f0:10:5e:b0:9d:2d:
e9:f8:d2:fe:0a:ba:21:84:21:99:4b:d1:e9:a6:1b:
7f:cc:6e:4c:1d:d9:79:df:c3:92:61:22:ac:e0:ef:
4b:3a:6f:40:43:e5:6c:08:c3:63:61:e2:13:ad:89:
98:c0:6d:fa:91:15:fc:ba:53:51:b4:68:92:a7:2d:
c9:66:13:c9:a8:64:58:c7:22:1d:62:eb:97:15:d2:
6f:2d:c3:06:fb:50:da:1d:79:06:00:41:7b:4f:40:
2a:e4:c4:af:50:93:b3:eb:5d:ce:0c:dd:bb:d9:08:
15:aa:ef:79:1d:59:a8:e4:37:31:c0:1c:71:02:1c:
1d:d9:6a:b4:d4:c4:c2:a3:cd:52:ff:e1:2f:9f:c6:
72:0a:54:82:06:d4:cb:da:a3:fc:56:a0:f1:12:33:
f5:0a:c4:5d:6c:06:76:36:10:09:bd:1a:0e:dc:92:
4e:d9:c7:92:c8:13:bf:fc:1f:65:71:92:a9:ff:1d:
88:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F8:81:04:29:9D:C0:9A:B8:CF:E1:8C:97:15:EE:8A:90:0D:01:F2
X509v3 Authority Key Identifier:
keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a3:2f:fb:6b:30:94:1a:ce:c9:01:73:46:d0:69:5a:23:59:
b2:02:75:6f:5e:77:b0:48:c2:8b:a1:b3:a7:be:34:18:9a:87:
cc:e1:49:9e:29:d6:74:74:ef:0f:35:35:c7:4f:3d:d6:78:fe:
d0:f4:45:13:11:9c:5a:94:32:da:82:fb:7b:a8:0e:a9:0f:79:
c5:b6:4b:2b:65:34:f9:c7:03:01:26:c9:7e:49:a1:bc:70:20:
87:46:b4:d4:f2:30:5a:65:b0:c5:32:0d:52:fc:4f:b1:12:8f:
74:53:7d:19:35:57:5c:3d:91:5f:80:5b:c6:9c:46:a9:64:8e:
1d:83:e0:5b:d5:de:d9:94:4b:30:50:5f:ea:21:51:ad:0a:08:
f3:3e:a9:0d:27:99:4f:6f:7d:09:eb:10:18:29:bf:69:ad:e1:
92:94:f5:fd:c0:53:9f:2e:35:db:57:62:75:66:e9:4f:ca:fb:
46:53:7d:68:b6:17:43:78:62:a2:0e:e7:32:eb:6b:33:05:47:
f7:6a:d1:4d:bc:43:17:fd:0d:04:89:8d:51:d9:a2:da:6a:d1:
65:a8:47:76:72:66:11:af:de:73:9b:a0:33:8a:77:8b:ea:a3:
66:76:1b:88:81:95:98:e4:fc:ac:be:28:e9:ed:ae:ae:d3:2b:
ca:77:15:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:33:01 2025 by rpki-client