Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
File: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft (raw, json)
Hash identifier: dNoCCUIFQUBHwOuvpmz88Y8Ck9KsOKBiWhxxRJX8Ajw=
Subject key identifier: 2C:50:B6:36:54:27:72:BB:F0:0A:0B:9B:3D:D6:77:D7:CB:E8:54:65
Authority key identifier: C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD
Certificate issuer: /CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
Certificate serial: 01969FACA7174C9DBE938CA42D9C763F1888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
Manifest number: C8
Signing time: Mon 05 May 2025 09:00:14 +0000
Manifest this update: Mon 05 May 2025 09:00:14 +0000
Manifest next update: Tue 06 May 2025 09:00:14 +0000
Files and hashes: 1: bh_jxWLWM4ERu-tO2W_vtiAaR34.roa (hash: q67OJI4bSTnxGyWpXxOC2jeYAfoLHFvQvpzctzRe0VE=)
2: sibHr2FGPjo5CfPD_x82IFZOyjI.roa (hash: 5o3OHC/8KmGr6JnUosFKoE0TLY9c878SbcJe1V+5e/c=)
3: tthzNj1Ph4KhPBGu_Ij-vA_jDKI.roa (hash: dYA2gqzlNnRY/+Z83i04orn08vaFeOTWTefS4wKcEJw=)
4: yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl (hash: HZDOq4YAeRng9tInZHMq2ea5/fFUIbIpZY4rRn1H4Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:a7:17:4c:9d:be:93:8c:a4:2d:9c:76:3f:18:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
Validity
Not Before: May 5 09:00:14 2025 GMT
Not After : May 6 09:00:14 2025 GMT
Subject: CN=2c50b636542772bbf00a0b9b3dd677d7cbe85465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:1c:26:51:70:37:27:fa:86:2c:b0:20:b8:
6e:c7:0c:ae:91:95:dd:5b:51:94:0c:9e:34:44:e5:
c7:bc:85:c5:51:1f:34:24:9a:bf:e0:4a:59:e4:a7:
03:54:d9:9b:f4:e3:1a:e1:6a:0d:94:cd:70:6d:1b:
ef:9c:17:d3:10:86:6f:b8:d6:40:f6:06:eb:17:e8:
75:5b:b6:a1:e2:13:53:5f:10:6b:d4:0a:53:ef:b2:
1d:49:02:3f:a3:65:38:48:de:09:01:09:47:8b:ca:
d7:6c:e8:ff:24:21:a2:90:9a:bb:50:59:6d:05:f4:
49:8a:1e:1f:bd:e3:f4:45:b3:ed:6b:92:30:4c:9f:
5d:b1:fc:58:17:86:40:a2:5a:fb:f7:39:36:f7:95:
ca:b1:cb:1a:27:f1:be:22:bc:fc:f3:fb:7c:25:ac:
d9:b5:f9:53:27:21:42:08:05:65:ae:f4:e1:74:90:
77:5b:f6:af:65:f2:15:86:0f:e3:ce:69:35:1e:4f:
6b:7e:1d:53:f4:b2:2e:5b:46:eb:5c:73:6d:0e:15:
89:96:92:ad:4d:5e:6e:6d:75:11:59:d9:ce:23:a6:
32:7b:d1:53:07:e4:59:31:7d:f7:9b:bd:43:fc:de:
3f:03:38:15:cc:e5:7f:dc:55:9c:0f:0e:d6:e1:2b:
73:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:50:B6:36:54:27:72:BB:F0:0A:0B:9B:3D:D6:77:D7:CB:E8:54:65
X509v3 Authority Key Identifier:
keyid:C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:21:38:8d:a4:0b:11:ab:01:33:eb:97:d5:78:5a:d8:26:d7:
9e:20:eb:cb:81:ce:23:ff:99:35:43:ac:f6:76:74:67:b8:5a:
b1:46:db:95:11:d1:a4:dd:14:a0:5c:e5:85:97:b9:87:a4:bd:
f9:8c:3f:ce:30:af:a9:c3:d6:d5:a1:c0:e1:60:44:96:d9:c3:
b3:d3:6e:e4:f1:7b:73:0d:8e:12:7d:98:fd:06:87:8e:52:fd:
f4:6d:b1:d9:58:34:a2:dc:28:c0:75:66:83:41:a7:f3:86:0a:
c1:9c:f7:e1:fd:68:9f:77:53:0e:78:45:bf:8d:06:b9:eb:0f:
3b:b3:35:13:ae:43:1c:c9:65:df:42:a8:bb:bf:6e:68:62:2d:
d9:8c:fa:1f:3c:25:61:df:c3:70:7d:dd:63:9e:95:92:87:3c:
5b:94:54:f7:79:98:70:c7:f4:d7:7c:ef:51:dd:13:34:cb:d0:
f7:59:2f:89:b6:90:ac:07:8f:38:d4:81:f8:6d:43:95:2b:ad:
52:95:7b:f7:ed:24:f0:9d:db:87:08:6a:d9:48:b3:a1:9d:36:
9b:65:33:49:8f:37:b5:f3:d0:4c:ba:b7:d3:f4:37:82:d0:cb:
b3:a0:b9:ef:1c:fc:2b:e7:25:5e:87:24:1c:90:ba:7a:dd:ce:
18:6a:f8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:04:42 2025 by rpki-client