Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
File: p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft (raw, json)
Hash identifier: 0fRVvuI5tryOcfafXpLNIWYMddwHjmqNMI9kx9cvnIo=
Subject key identifier: 89:A8:A0:67:3C:E5:76:08:7A:EC:B6:E9:62:AE:61:31:34:84:E4:42
Authority key identifier: A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
Certificate issuer: /CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Certificate serial: 0196AF1FD4006C94BEFFC88D81AD014149C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
Manifest number: 1267
Signing time: Thu 08 May 2025 09:00:20 +0000
Manifest this update: Thu 08 May 2025 09:00:20 +0000
Manifest next update: Fri 09 May 2025 09:00:20 +0000
Files and hashes: 1: BzSGdKXS_5WRE8i4u-1soKeFtzM.roa (hash: vrT1E18BTpX1mS9gu66zvt/nerXMjovuRA/4FT5P190=)
2: p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl (hash: KvwKPQIYK58FxDYmsHjdEYDcPsFvCKojTt7mtPwwZw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:1f:d4:00:6c:94:be:ff:c8:8d:81:ad:01:41:49:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Validity
Not Before: May 8 09:00:20 2025 GMT
Not After : May 9 09:00:20 2025 GMT
Subject: CN=89a8a0673ce576087aecb6e962ae61313484e442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:2a:23:1e:1a:ef:3c:41:0f:31:9f:de:d5:
b9:8e:41:27:40:23:f6:8f:9b:74:48:90:5a:86:a3:
5e:fe:17:d4:4b:cb:2c:9a:d0:7f:cb:00:67:ac:2c:
8a:93:c3:cc:a0:9b:15:cd:32:d5:eb:c3:69:fd:92:
92:26:15:f7:2e:db:e5:70:1c:89:32:ad:4d:06:d6:
13:02:96:46:1a:e1:03:50:61:10:8b:1a:c4:ba:3a:
ca:f3:31:58:4d:ab:cd:e3:bf:7a:38:e9:c6:cc:16:
1f:61:d2:5c:69:5a:bb:f9:0e:86:33:4c:fe:6c:83:
62:71:3a:af:60:12:58:53:61:30:df:ad:a0:a2:78:
98:22:7c:cd:45:1d:ed:72:99:17:dc:23:9a:46:02:
0d:65:ba:2d:f7:24:1c:9c:ae:1c:c2:36:e6:84:ec:
d9:8f:af:b8:d7:b2:e2:4f:16:27:94:10:cf:24:a6:
13:8d:1e:ee:93:a5:64:99:82:42:84:0d:fe:e0:cc:
0d:0d:db:f3:dc:a8:ee:e6:bd:29:ea:04:6f:10:38:
f5:20:ee:02:a6:4b:ba:85:b1:ab:8d:50:81:1b:33:
0c:1a:ea:66:96:cf:3c:a4:f8:2c:4d:9d:29:18:54:
35:38:45:8d:87:cb:c3:6c:69:87:ee:21:e3:26:da:
d4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A8:A0:67:3C:E5:76:08:7A:EC:B6:E9:62:AE:61:31:34:84:E4:42
X509v3 Authority Key Identifier:
keyid:A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:82:1a:2d:24:89:8d:59:79:57:c9:25:3a:8e:87:a5:0c:df:
3b:99:f9:06:9b:45:fe:2e:df:ff:e6:a6:ce:52:2d:2c:a2:f4:
49:23:70:5d:53:16:4f:cf:74:a6:19:91:22:dd:d7:f4:b4:f6:
49:2e:70:9e:f7:ea:0a:4b:4f:f2:2b:66:00:30:3e:ca:4e:4e:
8e:9b:eb:fd:fc:1a:20:02:9a:42:bd:34:e4:4b:8d:d8:19:84:
b8:34:88:3d:fe:a7:d3:39:f0:84:92:27:6a:37:09:5e:b8:10:
82:5e:91:9c:8d:64:83:ff:6a:20:43:d0:a0:7c:fb:8f:00:ea:
07:c5:c6:33:35:0c:53:71:3f:af:6c:2f:cb:ad:af:8a:d1:94:
d3:49:68:ba:1d:a7:aa:be:c8:33:15:53:87:1b:fb:56:ff:49:
9b:37:b6:ad:0e:2e:f5:8c:5d:6f:96:b5:0d:5c:5c:19:5e:5f:
85:2e:4d:84:68:13:3e:b3:48:42:e9:ab:db:fa:8d:33:05:c4:
1d:67:4f:2f:8a:d2:18:50:eb:2f:fb:8e:7e:78:28:c0:95:37:
f9:e5:0d:0d:1e:79:dd:2d:a4:69:c6:5b:0f:28:b4:56:77:11:
5d:ab:cf:56:72:ee:e4:59:b4:4b:21:14:35:e0:8e:7d:4e:ae:
98:bd:17:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:17:49 2025 by rpki-client