Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
File: 84Yn42pOFr3DnwtVDXT9ceRC0sI.mft (raw, json)
Hash identifier: a0FQOZO2zht3SABEqURoX26eWknua4Zk6ZJokQ9cYKo=
Subject key identifier: 16:EE:5E:6A:83:71:56:7A:94:D0:30:58:79:C8:78:F4:47:B6:27:82
Authority key identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
Certificate issuer: /CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Certificate serial: 01969E630D3E8CD8CF94DC560CBC13EE4B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 03:00:13 +0000
Manifest this update: Mon 05 May 2025 03:00:13 +0000
Manifest next update: Tue 06 May 2025 03:00:13 +0000
Files and hashes: 1: 84Yn42pOFr3DnwtVDXT9ceRC0sI.crl (hash: s3pcksmJUrMUaE3Lc6IVqNU69xowR3LerEdi+RvppUY=)
2: lIHvPze8MhW65ATICPZrXtfvWLg.roa (hash: bg+JonT/EML15sUdW/ANznJHTOv/3C3HqVEO6q5ovAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 03:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:0d:3e:8c:d8:cf:94:dc:56:0c:bc:13:ee:4b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Validity
Not Before: May 5 03:00:13 2025 GMT
Not After : May 6 03:00:13 2025 GMT
Subject: CN=16ee5e6a8371567a94d0305879c878f447b62782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:9c:32:2b:84:01:4b:94:16:79:45:63:93:
50:88:9e:85:00:d3:d8:d4:03:df:08:e9:8a:76:9e:
d8:c5:22:55:65:0e:48:73:bf:53:f3:a8:56:d1:cb:
25:f9:65:c7:b5:df:84:83:9c:2c:55:bf:44:56:fc:
6c:95:57:a0:c0:50:95:ef:47:ab:03:0e:54:5c:4a:
41:90:5e:91:13:6f:89:56:e8:e6:43:b6:8d:8c:7f:
ba:29:bb:50:01:e1:b6:57:4b:5a:3d:d5:0b:1a:43:
1a:36:3c:bb:cd:70:b9:7a:fd:2d:10:09:20:c9:ee:
81:d9:85:bf:7a:ff:e1:df:ee:e5:cd:08:95:04:66:
da:58:da:a2:48:89:13:28:38:e7:c4:2f:be:59:02:
76:c8:ce:71:c4:f1:83:9b:ba:40:49:31:4e:57:dd:
8d:f4:c5:ef:13:94:c2:a2:e1:1b:06:ee:cd:f9:88:
24:c6:f7:75:cd:f2:9c:64:34:75:1d:ca:a5:ab:67:
c7:5d:46:9d:3b:4e:c0:7a:1c:4b:a9:bb:c1:f7:3e:
45:75:c5:2b:f5:3e:fd:cb:cc:7e:02:25:85:1a:24:
3d:d6:cd:85:32:5a:ea:c2:36:a5:f9:af:c2:3a:79:
9b:1e:94:21:da:e4:3e:a0:f5:a7:f9:1d:c0:a0:85:
14:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EE:5E:6A:83:71:56:7A:94:D0:30:58:79:C8:78:F4:47:B6:27:82
X509v3 Authority Key Identifier:
keyid:F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3c:4f:62:b5:6b:00:17:45:d9:eb:c1:af:61:29:14:23:06:
98:c1:29:ff:87:80:56:2b:11:c6:0b:66:b3:e6:85:fe:2a:c2:
66:1e:07:6e:63:95:f1:10:cc:ae:d6:70:ba:75:be:3e:09:2c:
11:8d:7b:c2:6f:b5:50:ad:e6:e8:40:59:4b:32:9d:05:b8:7f:
4d:e4:70:1e:43:ca:3f:55:b5:f9:71:87:df:4a:08:1c:43:10:
65:37:32:c5:6f:99:65:46:da:3b:86:5a:f4:07:56:08:f9:dc:
04:56:d6:4b:da:47:bb:54:71:26:a8:f1:26:13:68:75:cd:c7:
39:31:63:5d:1f:c6:cf:24:48:2c:75:77:ed:07:93:75:bb:0a:
73:84:51:a4:88:81:96:10:e2:e4:48:e1:14:17:f7:e1:19:5f:
40:fa:67:c8:12:2e:b6:66:3c:45:af:7b:8a:d2:d0:fd:f9:33:
0e:65:eb:78:d3:49:b9:40:90:11:b7:8e:ae:fe:f3:1c:c3:98:
be:e0:ab:0f:4a:69:77:01:c8:13:97:7f:1c:15:4b:b5:74:e2:
2e:1e:5b:c9:2e:e1:45:8c:e5:82:bd:66:50:f7:8b:4f:23:41:
5a:22:f2:e8:65:18:d1:ba:12:4a:b0:96:1e:3f:90:c8:56:a7:
83:00:db:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:34:53 2025 by rpki-client