Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
File: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft (raw, json)
Hash identifier: 8aNnpxfHHOHeaCmHidQTcZeJKJdeI1U58saB63catG8=
Subject key identifier: 0C:CF:4E:3F:5C:B2:0C:2D:C9:C3:8C:63:36:68:C3:28:FF:20:E0:45
Authority key identifier: F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
Certificate issuer: /CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Certificate serial: 0196B4EAF4F5E04A712FD3B3F6F67EE5B459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
Manifest number: EA
Signing time: Fri 09 May 2025 12:00:19 +0000
Manifest this update: Fri 09 May 2025 12:00:19 +0000
Manifest next update: Sat 10 May 2025 12:00:19 +0000
Files and hashes: 1: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl (hash: ItcT/ldLqntsqY8u/zvqwFjdGmCfkTrXDqFSm98xzXs=)
2: MDg3SGQivd4Gkhmi2ar9KtkbxPw.roa (hash: kp0L4LourZESQv5PNyUfmc/3RRGNdSH3s5Vl6lYig18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:ea:f4:f5:e0:4a:71:2f:d3:b3:f6:f6:7e:e5:b4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Validity
Not Before: May 9 12:00:19 2025 GMT
Not After : May 10 12:00:19 2025 GMT
Subject: CN=0ccf4e3f5cb20c2dc9c38c633668c328ff20e045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:f5:f9:77:32:46:a4:29:22:ef:af:f5:76:
87:d1:6d:5d:c3:32:02:e0:97:74:4d:49:a6:7b:7a:
b1:02:5f:be:0d:24:a5:6b:51:5f:23:a3:a2:47:94:
f1:25:71:d8:e6:c1:e2:a5:1b:6a:29:4d:4e:22:9f:
1b:a1:5f:c8:69:57:30:32:35:d8:e0:c6:04:48:5b:
0c:62:1f:1c:be:c6:2d:97:24:4f:b7:59:3a:c8:76:
46:74:01:81:3c:95:a9:0e:ed:b1:bf:03:4a:05:45:
97:03:5f:9a:59:a4:21:4f:9c:6f:19:8e:fb:e6:fc:
da:dc:0c:49:8f:82:6d:41:6d:70:d2:74:7a:19:4a:
89:c6:8e:d6:af:13:ca:89:d3:71:2a:07:db:52:ff:
b9:3f:f5:cc:dd:c5:3f:3c:95:9c:8f:29:58:2e:55:
a1:98:d1:d2:8f:2e:65:42:c8:52:a2:97:5f:df:13:
dc:e1:51:cb:57:f1:1d:db:79:b6:50:2a:cd:d5:f0:
58:c1:84:26:77:4e:6a:c3:54:8a:01:14:63:14:2d:
a0:e8:18:04:aa:a3:08:3e:3c:65:bd:33:63:cb:1b:
a9:66:96:92:30:6f:ac:74:7f:93:eb:ba:1f:78:e5:
13:ca:7e:90:11:9a:ea:8f:24:dd:6c:7f:69:61:e2:
78:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CF:4E:3F:5C:B2:0C:2D:C9:C3:8C:63:36:68:C3:28:FF:20:E0:45
X509v3 Authority Key Identifier:
keyid:F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:07:5c:2d:81:f7:6d:d8:91:ac:35:73:72:70:09:86:37:69:
c3:68:8d:cf:bb:05:fe:84:8a:a3:ef:b4:37:04:3f:b6:3e:b9:
64:fb:79:6d:0a:f9:b6:cc:ae:cc:d3:23:87:da:e7:a7:26:f0:
3e:58:27:da:61:96:ba:54:3c:c4:71:3c:61:4b:43:37:f5:0b:
50:e9:25:e6:89:c4:ce:da:b3:10:01:38:e1:e3:1c:cb:26:9d:
db:ad:45:56:44:76:30:54:fd:58:5d:16:2e:db:06:27:a5:20:
16:43:c0:73:b7:17:42:d8:a3:0a:2d:b5:16:29:aa:c2:a4:5b:
06:e3:e0:6b:ee:34:58:b1:16:7e:38:ab:09:ca:33:61:70:a0:
15:7d:1f:50:68:59:c2:93:b6:42:92:60:b1:7e:ca:e3:f3:8e:
81:8f:95:ef:93:12:e2:77:27:8b:2e:b7:44:1a:60:82:28:37:
b8:46:52:2d:13:0c:cb:c4:86:09:b7:ec:ec:6d:17:30:c9:a3:
6d:3e:bd:59:49:6e:af:d8:b1:50:f1:bb:0c:33:49:2a:a3:8b:
5c:43:a2:d4:a9:df:2a:e9:1e:32:15:60:0d:0f:41:f6:59:29:
12:ea:47:72:1e:f8:41:e8:48:b8:71:b8:2c:df:66:8f:72:20:
c6:94:5b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:52:24 2025 by rpki-client