Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: XmAGJQlPBrHL5mTW6kkMZ9yDLt/UBVwcrXvCNf16RjE=
Subject key identifier: 57:B4:F2:03:3B:49:A2:EB:52:10:5F:51:AC:4B:61:39:BF:1B:D9:F6
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 0196BC375D1D2F2319FADF0798A926F0A2E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 0F7C
Signing time: Sat 10 May 2025 22:01:07 +0000
Manifest this update: Sat 10 May 2025 22:01:07 +0000
Manifest next update: Sun 11 May 2025 22:01:07 +0000
Files and hashes: 1: 3xyNiwxMLt2FgnnzD8FWO0WnAhc.roa (hash: pOZz2o1zgseBlXSeMbMTXOoQ45eoVXgqdP67Uo4BTQg=)
2: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: dhrLZKmAiw6Amnn1VbFvRZAXd8X2aP7+j782pVIZMFU=)
3: I-Q-pMgCHQ9W_jpWDux3P7cZIcY.roa (hash: pAX53nRh4A+NdTng//otyGRQizgrDPu6+ERbaPVic0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:5d:1d:2f:23:19:fa:df:07:98:a9:26:f0:a2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: May 10 22:01:07 2025 GMT
Not After : May 11 22:01:07 2025 GMT
Subject: CN=57b4f2033b49a2eb52105f51ac4b6139bf1bd9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:77:d2:97:eb:40:13:0d:6e:4e:67:a5:a3:28:
ac:bf:94:8f:cf:5c:79:e5:12:d0:b2:1f:23:f5:8e:
58:94:15:67:d3:45:a3:80:cc:19:5a:7d:19:c3:04:
44:d4:e9:b7:cd:52:4e:4c:17:72:06:77:83:75:e7:
45:f4:19:15:3a:03:b1:56:9d:2f:96:44:b9:e6:a3:
1e:ae:b8:1f:5c:d6:36:fd:10:25:c5:b2:f8:7d:f5:
ca:2f:7f:84:c6:d8:48:5c:8a:ac:27:7d:87:3f:6c:
25:84:9d:85:00:01:52:ca:17:ce:8b:c7:11:30:76:
48:e7:08:fb:de:e8:07:96:72:23:2a:d3:a1:cb:0d:
79:81:1e:1c:24:bf:79:cd:59:f6:c8:9d:8e:00:d9:
ce:da:7c:40:39:8e:1f:67:de:6d:ba:bf:11:40:df:
53:b5:2b:c0:3d:da:01:12:d9:f3:6e:66:85:df:50:
70:79:7b:5f:10:cd:b4:59:ae:6a:2e:91:fe:07:67:
90:6a:fd:7a:84:2b:d2:53:ac:ae:3f:92:d5:07:b7:
f8:45:55:e6:c2:9f:fc:ec:42:64:1e:e6:cd:21:42:
38:5c:73:54:c3:7f:95:65:99:28:15:29:ca:c3:ad:
41:d5:1c:22:21:38:b9:aa:a1:36:99:74:c4:cd:6e:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B4:F2:03:3B:49:A2:EB:52:10:5F:51:AC:4B:61:39:BF:1B:D9:F6
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0d:90:87:48:0f:1e:61:f9:93:71:e5:05:cb:b2:c4:ad:50:
da:3e:fd:91:a6:7f:d5:b8:b6:f5:72:fc:85:32:b4:c5:ae:1a:
bf:85:3f:37:bd:50:51:7e:b6:f2:f3:42:d5:10:4a:0a:a6:b8:
71:c8:b8:64:84:70:63:78:ff:3a:db:9a:53:a7:74:c2:aa:42:
89:f2:d8:e6:e9:a3:16:88:f9:35:d2:20:6f:63:ab:ff:ec:54:
0e:d7:91:48:53:3d:97:0e:f9:45:55:30:f5:5b:7f:75:b5:d5:
f9:0c:27:e0:26:71:9b:84:3a:e3:79:d7:ca:c4:9f:35:16:21:
b6:fc:a0:e4:ad:b6:41:61:78:ce:ed:79:05:70:2a:4c:51:11:
0e:fa:d3:55:1f:d1:04:00:b4:6b:eb:72:9b:a0:15:58:34:77:
5b:e6:45:01:05:92:c1:98:10:ec:5a:6f:bf:7f:dc:8a:0a:05:
af:29:e2:9a:7b:61:2f:28:5a:de:6b:94:ac:77:45:0b:2c:bb:
7b:9a:de:8d:58:6b:71:50:06:a8:dd:b2:68:12:30:8a:d0:fd:
23:a3:4f:01:74:ee:1b:bb:aa:31:bc:31:a8:89:d7:4b:8f:d9:
d5:9b:67:81:fb:64:13:da:05:5b:ae:40:c4:90:71:8d:6d:35:
d0:d4:a0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:32:20 2025 by rpki-client