Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json)
Hash identifier: HQj52bQqOxvhydGOg+LEccgBlqD7LMH23WqUVlqDEH4=
Subject key identifier: 43:FC:F4:0D:CD:B8:E5:04:28:E2:E3:93:33:4A:67:00:4B:BE:29:B5
Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae
Certificate serial: 0196C64C64C52A5EACABBC06AEBDC9606C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
Manifest number: 04B7
Signing time: Mon 12 May 2025 21:00:17 +0000
Manifest this update: Mon 12 May 2025 21:00:17 +0000
Manifest next update: Tue 13 May 2025 21:00:17 +0000
Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: ZRyPXoByP1ffyemjsxGX+eyV2zfOn/h+htJnfJRaIDg=)
2: yze2rcJ637RL8GZo48PGt4d8nY8.roa (hash: H8OFKVxMCjsZaNXr8DPY/I8jq0ZMaggP4bkjrXxk6OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:64:c5:2a:5e:ac:ab:bc:06:ae:bd:c9:60:6c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae
Validity
Not Before: May 12 21:00:17 2025 GMT
Not After : May 13 21:00:17 2025 GMT
Subject: CN=43fcf40dcdb8e50428e2e393334a67004bbe29b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:b8:56:2d:09:da:d3:73:26:9a:e5:58:f3:
17:a9:cf:55:d2:81:3c:ba:9a:72:43:5f:aa:3a:be:
af:03:1b:16:4a:58:f2:76:58:35:61:ff:0d:4d:ad:
a6:ad:5a:d7:5d:66:5d:a9:1e:d3:7e:a5:c9:55:56:
78:72:6d:e3:18:62:cb:01:35:2f:72:2e:b0:64:60:
17:70:d4:cd:0f:0a:f0:18:18:3c:4a:23:7c:6e:42:
7f:62:65:47:30:6f:7a:69:43:f4:2b:5c:4b:57:63:
f1:60:f0:ce:70:3f:85:b8:e9:31:20:bd:c9:6a:b5:
6a:7e:07:6f:51:dc:e0:8e:ad:07:0f:1a:5d:d7:27:
10:bb:cd:61:cf:fe:b6:7d:09:f7:16:68:74:71:23:
eb:32:fb:c6:94:69:62:d2:20:78:ab:9d:02:ea:86:
ea:06:7a:1c:84:ae:fa:2d:37:bc:77:49:2a:3f:8c:
5c:0e:ff:4e:89:ed:39:c9:76:eb:44:fc:ee:3c:08:
a3:d1:f4:f4:8d:60:80:a9:7f:38:80:74:23:6f:9e:
22:e3:80:8d:70:f5:8d:3d:f1:e2:b4:3c:44:1e:90:
4e:cd:be:a2:9c:b6:66:0a:76:81:38:fc:41:be:41:
f2:c2:bc:74:89:95:53:9d:43:b5:8d:e7:0c:78:25:
02:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FC:F4:0D:CD:B8:E5:04:28:E2:E3:93:33:4A:67:00:4B:BE:29:B5
X509v3 Authority Key Identifier:
keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d4:8d:f7:6d:f9:1a:ad:bc:52:63:70:e4:a8:10:af:4c:1a:
b5:42:d9:75:4e:4b:1a:4a:ff:cb:66:61:fa:b8:6b:b1:48:fb:
45:d8:45:5d:4c:b9:4a:3a:ad:73:e7:7c:bd:46:ab:3d:fe:ff:
c1:e6:73:30:e2:a2:84:78:0c:e6:25:36:1b:fe:77:c5:ba:25:
51:6d:07:11:19:56:f8:58:8c:cd:44:50:d5:f9:2b:9b:01:ca:
af:67:2f:11:fe:58:38:66:07:36:ee:08:52:7d:f1:05:5b:e2:
d3:2d:ef:c6:6e:3c:dc:13:21:d9:7d:38:af:7a:35:4a:c5:5c:
d6:60:2b:fe:d1:ff:15:9e:61:7e:64:8f:aa:b8:11:a6:bc:61:
25:04:a5:93:03:5f:d2:0c:81:45:e4:29:b7:65:dc:86:49:f7:
1f:46:d1:5b:8d:c4:e3:9d:14:4f:ed:88:d3:49:04:1c:0e:e3:
c8:0c:4b:c8:bb:15:b7:92:51:3e:dc:1d:83:a3:51:bd:48:5d:
54:bb:ba:01:f3:48:0a:a9:0d:ea:fc:3c:d6:61:3b:a7:af:fd:
b0:f1:8e:4a:f5:d8:f4:4a:b6:59:f1:b0:29:84:39:5b:a8:bb:
8c:ab:62:a5:8c:7d:d1:18:ba:22:7e:c8:60:f1:2f:48:91:4b:
ba:45:db:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:04:13 2025 by rpki-client