Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
File: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft (raw, json)
Hash identifier: u6UNgJGOrbzV4L1eQ2uaovV06zpY7QyB5FsIMe+A7nQ=
Subject key identifier: C0:63:15:A5:C1:16:F1:7E:4E:70:D1:AD:1C:F5:25:E0:85:C9:6D:F1
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Certificate issuer: /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial: 0196C916C8CC2660474EB8EF85EB621328D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
Manifest number: 0B3F
Signing time: Tue 13 May 2025 10:00:35 +0000
Manifest this update: Tue 13 May 2025 10:00:35 +0000
Manifest next update: Wed 14 May 2025 10:00:35 +0000
Files and hashes: 1: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl (hash: xoNcFi07aseJLojksO8JZiObzEyph/sGN6vlVsTMaf4=)
2: ViytvvvqRpbhZ8khzk-URy1_cok.roa (hash: GO9E5IMUAfx38THMM6EhNHK1/Vpo8T9/VGp4F+NJQF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:c8:cc:26:60:47:4e:b8:ef:85:eb:62:13:28:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324d0f47297680535eb2799189db888b4066782
Validity
Not Before: May 13 10:00:35 2025 GMT
Not After : May 14 10:00:35 2025 GMT
Subject: CN=c06315a5c116f17e4e70d1ad1cf525e085c96df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e5:ea:ed:75:51:6a:0e:d6:55:dd:76:fb:a1:
6d:3b:ba:c3:81:90:94:e3:5e:46:38:05:93:ee:ff:
9a:2a:4e:2b:eb:b9:9f:90:a4:1c:2a:cc:8d:14:dc:
08:04:06:30:db:db:88:82:a1:9e:c8:11:46:10:3e:
08:7a:14:9c:fa:34:da:3f:f2:eb:c9:25:a5:ea:ea:
35:4f:e3:33:3d:b0:7c:c1:94:15:cc:7b:55:9d:b5:
be:8c:ae:f7:28:07:ac:fd:5c:2d:8a:7e:76:c8:47:
e5:f8:ba:3b:b5:d4:f5:76:62:65:1d:af:2b:c9:dd:
db:75:27:37:08:43:dd:9a:0b:38:56:d2:4e:28:95:
ea:1f:c8:d5:fc:7d:76:fb:7a:87:98:40:74:da:e2:
19:a5:b9:00:ce:c4:f6:c8:4e:b1:32:e7:d7:7f:49:
30:4e:a9:92:cd:6d:02:12:7b:4a:dc:21:ba:f3:1f:
22:66:20:df:9a:6f:78:dc:a2:c2:37:aa:64:01:2a:
97:36:d3:67:6e:9a:27:e1:01:69:95:49:70:d9:68:
8f:15:95:22:5e:4c:40:56:5c:14:e9:d8:3e:5d:b2:
99:fe:15:ce:7f:8a:bd:d7:07:c9:1b:21:95:65:a9:
3b:94:de:74:6b:3e:82:34:c0:58:ac:b8:05:04:cc:
da:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:63:15:A5:C1:16:F1:7E:4E:70:D1:AD:1C:F5:25:E0:85:C9:6D:F1
X509v3 Authority Key Identifier:
keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:13:31:61:d4:67:a6:07:4c:f4:90:f2:be:1a:b3:54:e3:eb:
2e:84:9e:f0:75:a0:dd:96:bd:b8:f0:e0:b7:35:f8:45:c0:f6:
e9:57:5c:27:0e:d3:bf:ed:0e:e2:3d:92:b2:72:5e:d4:aa:d6:
48:f2:a5:2f:a9:44:c9:a9:8d:21:dd:1a:0f:7f:bc:d0:b2:d8:
b3:5d:10:fc:92:79:e7:94:de:90:18:b0:e9:63:9c:05:8f:78:
f0:30:05:c3:3f:b9:e3:65:41:a9:73:5b:52:b7:67:10:66:f4:
73:e0:e8:c6:12:99:ef:3d:87:e0:0e:2f:1c:6f:bd:bd:d0:65:
b6:d7:c9:21:b3:b7:d2:42:2a:0f:35:18:2e:1e:24:8b:e1:25:
89:20:55:14:c6:74:bc:b6:60:4b:95:5e:fe:58:de:1e:98:d6:
67:10:bf:9c:32:a7:1a:b3:f1:84:15:35:fc:3c:85:76:60:fa:
34:7a:24:f2:99:0a:f5:23:3a:03:b8:13:34:92:52:8c:9c:ec:
e7:1c:59:e0:7c:01:6e:fa:56:1b:6c:f1:49:17:17:bd:5b:57:
e0:28:59:ff:8a:2f:10:a5:48:06:0b:55:2f:48:6e:d1:b5:a7:
8a:06:39:7d:25:8f:2f:38:7d:cf:40:5a:6f:a5:fd:64:2e:6b:
58:ba:a8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:31:34 2025 by rpki-client