Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: xRgqsyXtoxySoN5qoxQ/E5/BuZXGm0ZrZMr2wwhOWa4=
Subject key identifier: FC:F0:19:E9:F9:7A:0A:9E:6C:3E:86:41:01:44:14:E6:15:CD:93:CF
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 0196C985242485B99F81521888C4ECC87ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 10BE
Signing time: Tue 13 May 2025 12:01:08 +0000
Manifest this update: Tue 13 May 2025 12:01:08 +0000
Manifest next update: Wed 14 May 2025 12:01:08 +0000
Files and hashes: 1: eYEds7FDx_xUoPL2I316_VuKY8Q.roa (hash: 6jycAZRy3tzHGHbqvOTBaF0biLwY1IgSfYJO3j2HlNo=)
2: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: VIzCYrn0azvrJOYmDlKSxDYGpGVFRsgKvQBPJcFv66c=)
3: zDK4uAw5mPfAHDc_-CPlpx-pNLs.roa (hash: FqisInA8WAgK5pDKePE9gltA7tZisv2Ptzza8Sx9lYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:85:24:24:85:b9:9f:81:52:18:88:c4:ec:c8:7e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: May 13 12:01:08 2025 GMT
Not After : May 14 12:01:08 2025 GMT
Subject: CN=fcf019e9f97a0a9e6c3e8641014414e615cd93cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:16:6a:3f:d0:0b:6f:ef:98:f8:16:a4:3d:
5e:ec:ab:51:e1:7b:f7:2a:c7:69:2c:66:5f:49:3d:
4f:91:e3:d0:d2:5c:50:28:55:52:ff:b8:4c:35:bb:
82:4a:f5:7f:27:ee:97:da:66:27:ee:71:b1:16:33:
19:df:f9:a4:92:5d:a7:db:ef:2d:e9:5e:c8:61:b9:
9d:88:b4:3d:1c:d1:74:7a:24:6b:d1:35:90:2d:96:
25:f7:f2:cc:b7:5e:87:a9:6b:40:a9:9d:24:3a:45:
5e:92:35:84:e1:94:e1:9a:91:81:82:da:9d:9c:b9:
b0:5b:4c:9a:ec:4a:21:21:ce:bb:be:38:4a:26:78:
13:b3:f4:c8:6f:c0:e8:ba:84:fd:c7:7f:d7:ad:46:
38:2b:3b:9e:43:2e:c5:89:5c:93:16:92:a5:bf:25:
5c:d1:48:4d:95:ad:3e:e7:af:12:f2:ef:29:a9:e4:
b1:d3:6b:a3:a4:d5:8f:56:7e:3e:a4:8e:14:3e:12:
5e:d0:27:d5:e8:db:ae:dc:f0:52:3b:d5:a6:72:ae:
ce:34:2d:40:2c:8f:2b:ad:ac:49:0c:b0:d8:7a:40:
8f:e3:17:f9:2f:c6:41:0d:37:90:ef:92:7a:b0:20:
9e:ea:b7:92:60:b7:da:a3:c0:be:91:78:fd:2c:f8:
4f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F0:19:E9:F9:7A:0A:9E:6C:3E:86:41:01:44:14:E6:15:CD:93:CF
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8d:84:8d:c4:cd:e4:1f:41:f8:c0:38:92:7b:c8:1c:68:cb:
ce:ee:f0:2e:f2:51:63:97:b4:e2:f1:aa:4f:91:92:c5:99:c4:
04:34:ea:94:98:4d:63:b1:cf:46:a1:49:12:79:31:47:d6:68:
08:cc:04:bf:fa:6c:b5:18:03:36:0d:10:1c:74:04:0f:1c:6f:
91:ba:00:24:b8:ba:0d:cd:1b:9d:bd:f0:d7:23:f9:b9:ec:a1:
2c:74:9c:bf:47:3a:84:d3:0e:41:09:2e:11:41:5b:6f:b3:13:
ee:54:e6:5a:4c:da:2d:bc:d7:9b:15:e9:41:57:4d:4b:b8:03:
54:df:d3:76:b7:c5:ea:08:c1:15:d6:ee:b6:60:73:5d:07:dd:
14:bc:bd:86:26:fe:77:e1:6c:7f:4a:f4:eb:8b:0b:f8:06:06:
b6:d2:f0:65:fe:86:fe:10:c8:93:de:4f:41:27:3d:10:23:d5:
2f:af:7e:0d:e2:c6:46:e2:ec:1b:ee:d2:44:99:1f:20:36:71:
a7:5d:8a:80:ff:35:4f:a7:75:59:e5:5e:54:cd:e2:4f:0c:1e:
f1:ce:61:4a:8e:97:a5:9c:78:b1:f7:4e:6d:17:39:f2:ed:f6:
82:54:20:03:28:2a:3a:52:d7:c3:d2:dc:23:43:75:e9:ad:51:
cc:ba:09:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:17:30 2025 by rpki-client