Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
File: n8IY9nJDtH2gIf2j_rRBR0s865Q.mft (raw, json)
Hash identifier: 6yMv4UxPhrhfAvDiOps78tBDs94nFJnLiQE8vK4+mGI=
Subject key identifier: 24:9D:A1:F4:4F:99:8A:23:42:EB:D1:E6:09:90:87:59:76:71:65:18
Authority key identifier: 9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94
Certificate issuer: /CN=9fc218f67243b47da021fda3feb441474b3ceb94
Certificate serial: 0196A088A93D08EA5972FBDE794AEF7D0A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 13:00:32 +0000
Manifest this update: Mon 05 May 2025 13:00:32 +0000
Manifest next update: Tue 06 May 2025 13:00:32 +0000
Files and hashes: 1: n8IY9nJDtH2gIf2j_rRBR0s865Q.crl (hash: KEKSpoi7ZbQgrmFRZS4O+IoajJTsytUpkT1D73g4n4I=)
2: sYA6KeIU16Bd58c84OvJJaCKPKU.roa (hash: tX4ZljxiPaFmNoY3hS/p0i7eqE1TuxWDswzU5ZDhiFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:a9:3d:08:ea:59:72:fb:de:79:4a:ef:7d:0a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc218f67243b47da021fda3feb441474b3ceb94
Validity
Not Before: May 5 13:00:32 2025 GMT
Not After : May 6 13:00:32 2025 GMT
Subject: CN=249da1f44f998a2342ebd1e60990875976716518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:3b:4a:a1:27:9f:4a:b5:26:02:bc:46:bf:
ea:e9:2d:d9:ed:98:61:33:5b:32:51:38:04:ec:0b:
9d:bd:3a:d1:15:3d:a6:1b:1f:ff:3d:ff:f9:91:1b:
7f:26:f5:22:f7:75:b6:ae:19:e8:03:71:c0:93:93:
79:a1:72:7a:c5:b3:e8:03:47:b7:5e:84:99:c2:3a:
d7:96:16:84:cd:00:59:a6:47:41:37:e4:a2:fd:f7:
70:cd:01:47:84:6b:e1:e6:e4:ce:bc:de:70:f6:22:
c8:56:a6:5a:a6:c5:c0:30:c5:5d:92:eb:aa:af:66:
14:fe:01:58:09:2f:4b:b4:77:4c:bf:7d:34:9f:b8:
3c:0a:00:93:2d:f7:38:2a:f7:06:b3:83:88:40:90:
de:f2:50:8b:32:2e:01:b8:c3:f6:51:a5:b5:bf:36:
c4:e5:4b:2a:18:d5:1f:54:d1:ad:d4:dc:cb:4c:01:
83:ce:aa:b8:d2:7b:14:c0:12:a1:b5:73:65:35:0d:
df:3b:70:ef:1a:1a:44:11:c5:b7:05:e0:03:8f:22:
53:e8:c2:bb:fd:3a:c6:92:4a:5d:77:f9:09:4b:44:
24:e6:12:7d:28:39:bb:82:cc:37:75:91:0c:f8:0a:
48:f5:06:22:07:14:ac:d3:1d:6b:0a:70:35:ee:43:
6b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9D:A1:F4:4F:99:8A:23:42:EB:D1:E6:09:90:87:59:76:71:65:18
X509v3 Authority Key Identifier:
keyid:9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:0d:3f:5a:13:86:50:26:2e:13:23:af:a4:0c:fd:42:9e:d2:
57:cc:b3:b5:a4:2b:8d:4e:98:42:39:30:d9:75:0d:89:fa:6a:
5e:67:5c:5b:06:c0:78:48:62:ef:9d:e2:98:e5:cc:fb:a2:f3:
df:bf:4b:65:10:b4:76:a8:2f:ec:c7:0b:ba:2a:24:71:26:6b:
b4:c4:67:2d:3b:50:d8:6f:20:3b:2d:e1:2f:f0:b8:f2:64:3d:
ee:fd:1f:81:ac:eb:f7:91:c2:42:92:73:1e:c4:a5:6c:8d:42:
b6:a0:b4:4d:c6:1b:f7:3c:8b:c5:71:67:97:e6:e8:c7:5e:1c:
01:1a:d1:50:8c:9a:50:c3:4a:d9:e3:83:8b:00:57:6f:7a:65:
08:a1:3e:01:e1:98:8a:7b:f4:fd:34:5b:b4:83:cc:fa:d8:03:
a2:20:ef:d8:45:4f:df:2d:c7:47:0b:96:0d:fd:e2:34:e7:75:
01:ba:15:5c:97:3e:2b:32:45:f0:c7:a8:39:a3:a0:d1:40:55:
57:ec:4e:65:52:ba:2a:df:d2:39:f1:9c:7e:36:15:35:08:26:
65:11:d7:7a:30:66:74:e4:67:de:ed:9e:6b:bc:27:7e:8e:e2:
b3:93:1f:a0:84:c8:2b:92:32:a4:5f:d5:f7:cc:67:e7:40:f2:
3f:1e:6f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:06:11 2025 by rpki-client