Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
File: t8jfPaM5OL8bJF8cRHn9JN2flPA.mft (raw, json)
Hash identifier: l06sdyBZ9lBHIEAKr60qbOp0BrNy3GZuAnE3iQIGmhM=
Subject key identifier: F6:46:32:47:7C:82:B7:28:49:C9:C5:EF:E2:58:A0:22:41:AA:9D:0F
Authority key identifier: B7:C8:DF:3D:A3:39:38:BF:1B:24:5F:1C:44:79:FD:24:DD:9F:94:F0
Certificate issuer: /CN=b7c8df3da33938bf1b245f1c4479fd24dd9f94f0
Certificate serial: 0196CE0630BE836E218AFFEED1D9708CCAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
Manifest number: 1509
Signing time: Wed 14 May 2025 09:00:34 +0000
Manifest this update: Wed 14 May 2025 09:00:34 +0000
Manifest next update: Thu 15 May 2025 09:00:34 +0000
Files and hashes: 1: rnBvIUiPG215g2G4TvJ3vJPLCJg.roa (hash: QymikogB0QXOb1awGtB0gQkLWC08JbHRqFZVMECKiDM=)
2: t8jfPaM5OL8bJF8cRHn9JN2flPA.crl (hash: izNGfkCUJJVkSYZKvPimNdSXfKLm8SKoVX1PU+vQ8KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:06:30:be:83:6e:21:8a:ff:ee:d1:d9:70:8c:ca:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c8df3da33938bf1b245f1c4479fd24dd9f94f0
Validity
Not Before: May 14 09:00:34 2025 GMT
Not After : May 15 09:00:34 2025 GMT
Subject: CN=f64632477c82b72849c9c5efe258a02241aa9d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cb:f7:6a:de:af:e1:39:94:c4:41:a7:ce:7e:
3c:f1:aa:34:5d:6d:d2:44:11:3b:7e:27:59:d4:cc:
5b:15:ed:f7:0d:af:97:03:22:2a:7c:05:52:80:04:
5d:6a:db:87:28:03:95:e0:b1:7a:34:8c:d3:8a:5c:
bb:c8:79:00:cc:7e:15:68:f2:50:df:09:db:c4:5c:
44:bf:a6:a7:1a:8e:4f:4f:2a:f9:b5:11:25:63:fc:
f5:65:8e:ec:e4:13:68:6b:a8:4a:27:02:3a:69:8d:
9b:e6:84:06:59:fa:fc:e9:57:19:95:30:c8:b5:0c:
50:da:a4:12:e0:3b:25:ba:d4:3e:e4:4c:fb:9e:cd:
d9:47:8a:25:0c:18:ef:25:7d:54:f8:6d:58:8e:ec:
81:8d:11:19:8f:a0:b9:40:c3:9c:e7:75:7d:c9:ff:
78:d7:ec:72:27:82:47:07:a3:81:ef:f5:88:04:51:
13:b0:45:59:0c:a2:25:fb:6b:9a:81:0f:2a:aa:6d:
c2:1e:e2:eb:a0:78:71:fe:c7:5b:18:c3:d4:88:60:
f5:5a:75:8f:95:a2:fc:24:31:75:8b:aa:3c:d2:8d:
ac:96:e9:87:5e:38:87:a2:97:33:ad:40:70:bd:27:
a6:96:02:38:09:29:f0:6f:30:1d:46:2f:25:c5:e6:
50:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:46:32:47:7C:82:B7:28:49:C9:C5:EF:E2:58:A0:22:41:AA:9D:0F
X509v3 Authority Key Identifier:
keyid:B7:C8:DF:3D:A3:39:38:BF:1B:24:5F:1C:44:79:FD:24:DD:9F:94:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f3:83:01:c1:3b:3e:b4:77:1f:d4:1f:b7:ca:e2:2a:32:9c:
19:c4:19:70:27:a7:a3:5c:a5:91:23:24:07:4c:92:63:da:47:
2c:38:78:43:46:4a:76:4f:f4:eb:35:59:f5:28:5d:97:6f:5f:
9a:53:d5:f0:5d:fc:8c:47:64:78:e8:c0:ee:88:f8:cf:74:7f:
a6:8b:a2:51:de:0f:bf:56:aa:12:73:43:d0:63:a4:4c:f4:0c:
82:84:e7:56:cd:a0:c8:4f:ae:dd:18:28:66:8e:77:68:a8:80:
68:b3:8f:1c:89:8a:a7:eb:9a:72:bc:32:6f:4e:56:61:73:a8:
40:c4:63:e3:26:df:bb:2a:3c:a3:3f:64:26:5d:03:90:f8:30:
dc:bc:40:54:72:40:47:85:60:41:6d:05:12:d6:8b:8f:5c:19:
ac:80:c6:13:2d:20:8c:26:9b:6a:4a:72:04:d7:f5:fd:ac:e6:
0d:93:d9:09:73:7b:4b:e7:71:05:01:dd:1f:88:4d:98:20:84:
50:20:f1:8b:51:21:2f:b6:56:69:fb:ed:29:de:86:a6:03:f9:
33:7a:bc:2e:c6:6a:ef:ee:c4:ff:fe:a1:c5:e7:85:e9:6a:b1:
dd:08:d4:40:76:20:71:0b:0f:e4:49:d5:9a:42:00:b3:a7:1c:
80:2a:13:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:31:41 2025 by rpki-client