Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
File: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json)
Hash identifier: gyRAvZyBIrvaY8TjOe50AF661uvDatdw1sRZ4QQIsc8=
Subject key identifier: 4A:D1:F9:32:DD:76:CE:A0:1A:EC:62:CC:47:44:92:59:3A:E8:E5:0F
Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5
Certificate serial: 0196BF6EC3D0375CC43813F1FC879482DBC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
Manifest number: 0214
Signing time: Sun 11 May 2025 13:00:29 +0000
Manifest this update: Sun 11 May 2025 13:00:29 +0000
Manifest next update: Mon 12 May 2025 13:00:29 +0000
Files and hashes: 1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: s0wqeyNf/DYHgX64DFgUeUAvTa72E3jPNTlEla0BSJw=)
2: I-0idQ-x8b_iuF_AN1e-P1ZFsto.roa (hash: J959UKPkKfG7mGSEhJQ4lp0ApYm6t4BNil0ibX/rnJ0=)
3: clXhyQe-LLckpLARmE4B09fLjyw.roa (hash: pbecPMSxuQ5FNWz7fJjCuWiZFYFozOnGtUYlmUh0qZA=)
4: qPGRMvVV9D12GpMqxd32m_M15uY.roa (hash: zbnCieZ4y7AssABSg/FYAGzsgezJ4sWU0T/sVn6kdZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:c3:d0:37:5c:c4:38:13:f1:fc:87:94:82:db:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5
Validity
Not Before: May 11 13:00:29 2025 GMT
Not After : May 12 13:00:29 2025 GMT
Subject: CN=4ad1f932dd76cea01aec62cc474492593ae8e50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:35:74:91:19:92:b1:08:d3:f3:c5:0d:73:
8e:98:2f:de:d3:8d:05:3f:fa:d9:ee:b1:46:ea:71:
ef:08:af:8b:b0:25:ad:46:f6:87:a4:94:5a:a4:72:
c7:e0:39:1a:d3:2b:b9:43:bd:df:5c:9f:b1:a2:cc:
9f:d7:0f:46:3f:9a:4c:58:9c:83:c1:15:62:b4:90:
4a:8e:cb:56:71:34:c1:75:a0:ba:a4:78:79:72:cd:
0f:6b:f8:8f:37:5b:3c:ba:52:5c:40:0f:df:38:3e:
7a:a3:ce:83:60:a8:86:39:c5:fb:84:b4:e5:bf:11:
1a:42:9c:f0:6c:3d:18:f6:58:7d:61:b4:cb:86:8c:
d5:60:3e:04:4d:50:aa:30:37:58:dd:21:16:65:b5:
13:ab:0f:91:6a:9b:72:07:c8:97:a9:e2:7b:24:5d:
d2:94:b7:9d:31:a2:a0:05:d4:37:ae:d1:63:27:60:
85:80:18:8a:a3:b2:a0:50:1c:7d:41:59:ac:45:88:
09:7d:69:18:a2:84:69:dd:53:80:a7:7a:9c:d2:fb:
11:43:11:ba:83:29:41:dc:2b:0a:e5:ff:bb:b7:6e:
c4:5a:2c:7b:ab:ab:58:f5:a9:8a:50:76:d0:1e:7b:
99:f6:00:3c:02:3f:4e:4a:d6:6f:32:ba:29:fb:f9:
51:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D1:F9:32:DD:76:CE:A0:1A:EC:62:CC:47:44:92:59:3A:E8:E5:0F
X509v3 Authority Key Identifier:
keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:95:61:24:4e:4a:ff:f8:dd:98:af:41:1a:a8:00:75:95:b8:
be:0a:12:a2:f4:20:35:85:c7:60:bd:17:93:8c:92:13:44:4d:
37:82:ee:9b:5b:c5:69:31:22:38:7d:12:ca:0f:9c:2a:19:f9:
be:1f:d0:a4:ad:39:2a:97:dc:2a:04:6e:41:c9:cc:8e:45:aa:
18:94:3c:da:7a:f5:34:3a:46:9c:59:1a:65:aa:98:15:13:28:
d0:96:7b:3c:61:ef:b4:39:4e:f5:41:4b:df:fc:f3:4e:df:7d:
3f:6f:9a:41:23:b6:d6:db:a7:c2:9c:05:4f:55:12:48:fb:79:
b5:76:d2:9a:09:b0:4b:ec:23:48:ac:60:8c:0a:5f:31:fd:2f:
51:0b:62:d0:c7:43:26:a4:68:fe:c1:2a:f1:42:68:3d:3c:61:
de:cc:1b:30:b6:f7:7d:bb:01:40:9e:f3:02:18:a1:69:f6:c3:
fe:1d:4d:5b:41:de:28:49:5d:f4:e6:f5:06:ab:4c:92:f0:fa:
b1:89:cb:ab:f5:84:73:c5:0c:2f:00:be:52:a2:ee:f4:f8:7c:
7e:be:5d:22:11:1c:ad:ba:09:d2:4d:5d:cd:36:a8:ee:73:50:
e4:97:71:9f:e0:26:ca:bf:a0:c6:e8:59:7d:d4:cd:a4:54:4f:
c0:bb:74:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:25:04 2025 by rpki-client