Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File: 8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier: VJzSUCojZptibVJaBxYazDlQ88tB9hF2TEwTr0XvXKQ=
Subject key identifier: 32:B2:37:20:87:FB:02:88:6B:BE:DF:2D:FF:6A:CC:7E:26:04:8D:4F
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 0196C3B928AA0CB4096BF2938DAEF10B8B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number: 0622
Signing time: Mon 12 May 2025 09:00:13 +0000
Manifest this update: Mon 12 May 2025 09:00:13 +0000
Manifest next update: Tue 13 May 2025 09:00:13 +0000
Files and hashes: 1: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: ITOQWkVNCQJgiHkraaVkGn5d9T/vQBhY2ykUHPgTMK8=)
2: FwjOhi182_59p8dwQga5XgkbJ0s.roa (hash: Mc8kDGGDUHY1tIZcCKRSsVLGZ6kIEWbGczkswWitHog=)
3: tFuBusypscfP0op8t0fbvhVLTp0.roa (hash: pms99WF44PQkWw+lLwCckChT1mv5Etpr0MeX5NnHJWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:28:aa:0c:b4:09:6b:f2:93:8d:ae:f1:0b:8b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: May 12 09:00:13 2025 GMT
Not After : May 13 09:00:13 2025 GMT
Subject: CN=32b2372087fb02886bbedf2dff6acc7e26048d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:52:a5:23:0b:16:b6:97:2f:18:2d:6e:5f:
da:96:42:65:fd:5c:08:93:a0:41:ac:fd:41:a2:47:
57:ea:86:42:79:d1:0b:f3:6f:69:65:91:20:bb:c2:
46:75:ff:15:3c:4d:01:af:b2:be:17:bf:60:d1:79:
9c:8f:99:ca:2c:07:7d:a4:12:ac:c4:a1:29:a3:1d:
cc:c7:03:9d:55:17:5f:11:e5:3b:57:c7:3f:96:e7:
8a:e6:8b:c3:f8:68:46:5a:2b:86:f9:ab:f9:7b:46:
4e:64:f3:7b:50:1c:14:3d:f7:0b:d2:de:f9:aa:b0:
91:29:82:d1:50:a4:b8:0f:5d:8b:99:71:b5:de:7b:
99:79:0b:d3:84:ad:3f:43:3b:47:08:7c:fb:eb:f8:
1a:8c:d5:02:0c:99:8d:79:5f:ce:ba:7a:7f:77:a4:
5f:75:e5:b7:07:05:f9:8f:f4:02:3d:5e:ed:b8:94:
c8:77:28:4d:cb:f9:3c:12:f3:2e:9b:3f:ce:5a:47:
48:fc:bd:3f:5b:67:14:ec:01:88:b2:cb:ca:6b:90:
f3:73:a5:09:ee:ba:64:bd:e7:d7:f1:31:dc:7a:04:
80:b7:87:5e:6b:4f:b3:97:67:1e:42:e0:8d:bc:a8:
8f:1b:9e:f9:a1:56:8a:fc:ee:24:38:bc:28:24:c3:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B2:37:20:87:FB:02:88:6B:BE:DF:2D:FF:6A:CC:7E:26:04:8D:4F
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0f:df:77:96:6a:42:95:19:ef:c9:51:6c:f6:87:ad:6a:65:
c1:96:f8:ea:14:62:a1:33:46:f8:bd:77:f0:7f:47:eb:f2:81:
b9:b7:5a:d2:00:d8:af:dc:c8:00:e5:d9:15:9b:39:f0:88:58:
23:44:0c:98:87:b3:0f:c1:64:7e:c6:ed:bb:62:56:14:96:ad:
08:2b:42:8b:e8:ab:b0:e2:4b:ef:2c:d3:00:56:c3:77:23:37:
3e:53:b1:b6:cc:9e:d4:71:dc:68:9e:a0:c8:b7:44:76:41:d0:
00:b8:7c:b8:6e:da:87:95:b2:2f:ec:f0:ff:45:25:c4:98:56:
a9:bd:35:84:4a:2a:51:a0:36:f2:5b:d5:2d:52:fa:98:3c:e6:
36:85:92:f3:36:b9:53:ca:b2:b2:1d:98:2f:58:ba:99:32:e6:
2b:a5:31:e5:2e:89:98:f8:85:f1:14:56:02:00:3c:66:b8:a8:
bb:9e:d4:3b:e4:f6:5d:09:b7:30:37:8f:7a:e8:c5:0f:30:4e:
5f:e3:e5:d7:fb:b3:b9:45:b5:1b:e3:cb:f3:d9:09:d8:90:1c:
89:50:3b:15:50:56:33:91:ef:99:22:6b:6c:e9:a9:71:31:26:
6e:86:f9:c1:2a:34:ee:d5:e4:cb:60:eb:55:5b:71:bd:2e:70:
9b:e7:a2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:33:20 2025 by rpki-client