Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
File: 8phZtw6kUOE62ockwOtr7syNqpE.mft (raw, json)
Hash identifier: eijYf38sMDplguEb/Pz0TUMgE5eXO++HLQTZf6iKBsU=
Subject key identifier: 4A:57:E2:2F:22:FE:58:8B:70:88:A4:08:86:04:82:40:E0:CB:B5:02
Authority key identifier: F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
Certificate issuer: /CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Certificate serial: 0196C2DD9C563FCE5B7B5A4B0E4EF07C6119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
Manifest number: 0598
Signing time: Mon 12 May 2025 05:00:25 +0000
Manifest this update: Mon 12 May 2025 05:00:25 +0000
Manifest next update: Tue 13 May 2025 05:00:25 +0000
Files and hashes: 1: 8phZtw6kUOE62ockwOtr7syNqpE.crl (hash: 469kdDNX6AT+xEj0R0pPlQFgkR5Nl38JPbszWPBJXVw=)
2: ieIY7b0KhvQU4QgMPfI50NN4QnY.roa (hash: 5XIl/Vpt8manbA7AG4mG7L9mNTT0fdofSZrC08n/ke4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:9c:56:3f:ce:5b:7b:5a:4b:0e:4e:f0:7c:61:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Validity
Not Before: May 12 05:00:25 2025 GMT
Not After : May 13 05:00:25 2025 GMT
Subject: CN=4a57e22f22fe588b7088a40886048240e0cbb502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b0:ad:32:c1:66:d4:04:21:3a:55:3f:2f:94:
aa:6c:80:94:b0:b2:a6:69:6c:db:1c:26:66:47:34:
4a:84:c6:33:87:58:c9:59:cd:3c:46:6a:2f:de:2a:
04:94:aa:06:60:b8:c0:9f:31:bc:b3:73:72:52:f1:
e5:68:e0:b9:90:3b:57:b3:fa:9a:94:f2:67:4f:87:
31:0c:86:32:3b:b0:3a:d2:2c:81:c8:4e:92:29:a8:
b2:e2:37:c6:26:fb:4a:15:cc:13:8b:7a:f5:b3:0d:
6d:b2:cd:03:b8:65:a2:67:52:eb:5a:98:ee:5b:eb:
f9:53:90:47:fd:a2:26:09:d3:9a:ef:ae:f4:12:81:
f3:36:42:95:5f:18:2c:4f:0d:bd:95:67:6e:15:c3:
d0:ce:08:e8:65:91:ae:1d:05:47:f9:5c:54:af:f8:
29:4f:e6:e6:20:f2:54:22:e4:f6:bf:c3:d8:b2:8f:
5a:39:91:82:50:17:ce:30:87:e2:8a:f4:b2:60:a6:
3b:81:84:5e:84:c7:58:a4:61:30:6b:75:bb:e4:03:
44:71:36:c7:8e:57:a7:fa:e3:57:0e:e2:93:91:4f:
87:22:7a:cb:0d:d9:7b:4a:1d:9a:85:4a:c9:34:f6:
33:5b:94:53:76:c3:b0:b2:f6:19:77:6f:4e:da:a8:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:57:E2:2F:22:FE:58:8B:70:88:A4:08:86:04:82:40:E0:CB:B5:02
X509v3 Authority Key Identifier:
keyid:F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:8c:64:55:12:e5:4d:b6:97:01:e0:88:a6:1a:84:b7:5d:b0:
6f:e1:5d:ba:25:ce:b9:a3:30:97:be:e3:0a:43:9a:5b:93:a3:
07:2a:e5:67:94:01:11:02:47:c3:44:18:6c:b0:72:4a:9d:07:
5b:e3:81:bd:a7:2e:9b:bd:8f:2f:21:e4:6a:69:83:9d:0c:5a:
ca:5f:ab:9e:d6:6d:53:fc:f5:0c:86:59:86:be:c2:a0:ac:bd:
22:cf:be:4b:98:b9:7f:da:25:72:e5:a9:9c:6d:f4:66:54:94:
85:8b:50:bd:73:7f:60:a2:4c:10:10:9c:3b:53:af:94:8b:a0:
43:1a:89:ef:d9:1a:d0:04:0d:ff:dc:77:32:ab:52:69:e6:de:
93:c0:26:01:4c:2d:bf:42:60:7b:7d:b2:a8:4a:38:4c:9b:67:
84:02:67:76:7d:d4:e2:cb:21:72:70:4e:63:a7:aa:4e:90:ca:
28:7e:8a:68:c7:66:1b:51:0b:33:80:d6:ae:bf:e3:fa:a5:6e:
78:84:b3:20:1d:00:e3:bc:10:65:ec:a4:be:8f:b9:86:82:5b:
ed:12:9f:a8:3b:a3:e3:ca:9a:a9:9d:ea:9c:f8:d0:fc:2a:db:
c8:8b:05:55:53:d3:77:11:f3:9b:47:ed:a3:a6:56:f0:6b:99:
36:98:df:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:31:51 2025 by rpki-client