Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
File: j8Yziy6SHZEmxTYwPweMnruah1I.mft (raw, json)
Hash identifier: LKNmbDTpdMeXBhPITovNEapLesShF/xsC9GQkTSIMaI=
Subject key identifier: 03:34:6C:70:39:A5:C5:D6:CE:D9:A2:2D:11:F4:7F:EC:90:FC:04:20
Authority key identifier: 8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
Certificate issuer: /CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Certificate serial: 0196C0B8A0D781075F882983600269815A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 19:00:47 +0000
Manifest this update: Sun 11 May 2025 19:00:47 +0000
Manifest next update: Mon 12 May 2025 19:00:47 +0000
Files and hashes: 1: E9E2NhUKJP_3TXPCgDM1hcFl3-A.roa (hash: aBze8FprGa3p4/CGvI/TFD3mAyVwA/i5ic5RvbopQHs=)
2: j8Yziy6SHZEmxTYwPweMnruah1I.crl (hash: 5Mlqm9GHN5jZTyCQFdK4Nn14wCbJZZN+GdEuWdwjPiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:a0:d7:81:07:5f:88:29:83:60:02:69:81:5a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Validity
Not Before: May 11 19:00:47 2025 GMT
Not After : May 12 19:00:47 2025 GMT
Subject: CN=03346c7039a5c5d6ced9a22d11f47fec90fc0420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:85:f4:e4:b3:63:6b:12:f5:da:e1:e5:90:
6b:7d:4e:cd:7f:2d:ec:6c:c9:43:8e:e6:f0:ca:2c:
2c:45:cd:db:23:8d:58:c0:87:1b:1b:04:e1:1d:f4:
f7:d8:4b:91:50:fe:2b:b6:2f:7e:8d:83:3a:5e:05:
c0:b3:d5:46:93:d9:df:57:82:06:39:f5:9d:a2:c6:
e5:ca:21:46:b1:1a:5f:9f:5e:96:b3:c0:2b:bf:ef:
5c:51:a6:4f:29:d8:61:e6:5e:95:9c:d7:14:fa:c5:
43:59:dc:e3:40:91:4e:71:5a:98:e7:75:da:ac:3a:
53:24:ea:cb:34:3b:6a:ba:26:b2:8c:fc:98:43:24:
70:f7:3c:8b:27:50:62:40:28:c1:a3:31:23:30:4a:
4f:70:ab:fb:84:53:c5:42:68:24:ed:d4:a6:c2:12:
96:85:3c:53:87:07:9d:e2:16:b5:06:b1:83:c1:c8:
9a:c5:5c:ef:dc:6f:d1:e4:26:88:3f:43:f6:66:27:
69:4f:14:16:38:9e:66:51:e9:23:18:3a:58:02:41:
77:1b:ad:51:74:ae:0d:64:80:fd:07:45:1d:55:c8:
d5:3b:1c:60:99:89:10:0c:ac:dc:2f:09:3b:72:36:
cb:39:11:b6:7a:04:9c:85:d5:31:0a:49:d3:07:e0:
01:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:34:6C:70:39:A5:C5:D6:CE:D9:A2:2D:11:F4:7F:EC:90:FC:04:20
X509v3 Authority Key Identifier:
keyid:8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e6:f9:7c:ba:e1:e1:73:cd:5b:14:26:6a:68:e7:e2:0f:54:
9b:03:a0:ae:70:18:d4:3e:4e:fb:69:15:43:2f:43:eb:7d:f3:
e8:ec:ea:11:60:19:3c:bb:04:aa:ee:45:46:a8:35:c1:9a:98:
9e:54:95:fa:7d:8d:86:07:22:b8:29:4d:71:ab:18:c7:4a:50:
80:e6:8f:cf:5b:62:92:bf:3f:f9:f1:a1:b5:51:a1:da:ee:79:
7e:a1:f6:3e:7e:5a:2b:92:9e:66:ae:df:b2:6e:5a:7f:8a:ae:
37:a2:85:29:a5:80:44:e3:51:72:66:a9:d3:5a:51:9c:17:e6:
89:89:c4:e9:6e:2b:5e:c7:bb:3a:d7:8c:98:7f:a7:da:41:d4:
da:11:6f:fe:fb:97:e2:06:2c:2f:03:3c:94:69:aa:3b:5e:d2:
b3:88:20:b3:b5:25:93:5d:54:f2:1e:5a:30:a3:7c:c4:ce:29:
04:72:9a:c8:2f:84:2d:ec:a5:21:db:a2:51:4a:32:4e:4a:58:
15:d1:aa:3c:f0:2d:87:29:b0:61:21:ad:4a:a1:04:63:c9:e2:
d0:b7:db:90:4b:ae:9d:e9:63:1a:01:f9:7e:06:6a:87:63:6d:
c9:f5:9f:c7:98:45:e9:70:60:ed:03:e6:72:e1:26:44:ae:6b:
f7:60:9a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:01:22 2025 by rpki-client