Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
File: _byekQMWvi8EM6qVOSzWc53Ca4Y.mft (raw, json)
Hash identifier: NdwvxecS+1VtLZIuHYX8WbB2CEXyunsrkSNgj7vv0b8=
Subject key identifier: 8B:5B:E2:C5:AE:DD:4C:83:02:FF:2B:46:F7:AE:CE:5E:37:93:41:03
Authority key identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
Certificate issuer: /CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Certificate serial: 0196A12D48D9C4E8BB07D9E85670C3CE7A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 16:00:21 +0000
Manifest this update: Mon 05 May 2025 16:00:21 +0000
Manifest next update: Tue 06 May 2025 16:00:21 +0000
Files and hashes: 1: _byekQMWvi8EM6qVOSzWc53Ca4Y.crl (hash: z5qwIEeiXgi97mNGGMLTR/SL6537MwMDRVFuDzq7MTo=)
2: yxRSGJfki1mfuRlitSEOgfKdMqI.roa (hash: T4WCtISFCRzOuyE0OUo1rNu8VMdZMXWp/avFZYHhGtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:48:d9:c4:e8:bb:07:d9:e8:56:70:c3:ce:7a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Validity
Not Before: May 5 16:00:21 2025 GMT
Not After : May 6 16:00:21 2025 GMT
Subject: CN=8b5be2c5aedd4c8302ff2b46f7aece5e37934103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:90:99:f7:54:1c:8a:5b:48:6c:60:d5:09:4d:
9c:47:c7:f2:e6:03:10:de:a5:9a:d9:0f:99:6d:89:
a5:b3:f1:93:98:c3:62:54:29:cd:db:5f:6d:15:d6:
75:27:4c:a7:45:e4:cf:53:40:bf:a8:a3:ce:20:81:
d3:48:c8:00:5d:c5:96:53:55:67:49:69:fb:74:69:
5b:71:6c:41:6c:1b:d0:5d:35:d1:04:c0:f6:45:01:
54:c5:52:66:52:06:36:a2:40:72:e6:9f:cf:e3:16:
66:99:b3:85:30:b1:a2:27:74:f2:e6:cc:2c:8d:5b:
7b:7c:06:4e:ca:de:e0:89:78:50:4c:0e:10:1d:e8:
04:69:bb:98:cd:fd:dd:01:a2:7a:db:25:46:82:2b:
86:9c:93:88:84:17:40:93:06:27:95:47:b3:cc:24:
a1:e9:1c:a2:1c:da:34:e7:0a:9d:a3:19:eb:26:4e:
e6:20:25:d2:81:02:a5:09:97:d4:b1:11:ac:31:a0:
59:4f:24:ca:0e:68:cc:f4:11:02:ed:f0:1b:e5:e5:
26:b5:7a:a8:f7:ef:7f:da:db:64:a7:b5:6e:c5:ee:
0f:59:b8:2f:6b:72:73:3f:85:07:c4:b1:43:0d:89:
1a:39:18:1f:08:d8:d1:6f:e7:9d:f1:d0:d7:6a:83:
cf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5B:E2:C5:AE:DD:4C:83:02:FF:2B:46:F7:AE:CE:5E:37:93:41:03
X509v3 Authority Key Identifier:
keyid:FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:95:d3:e6:14:0a:c2:f5:ad:ab:6f:c3:18:df:33:63:d8:72:
59:b3:fc:b4:cc:1b:10:70:92:fb:ab:d3:14:84:4d:bc:c7:aa:
33:b3:e2:1a:a5:9d:8b:a2:60:c2:3e:32:0d:a5:db:46:c4:f0:
69:87:f3:53:b7:46:ea:95:72:e3:0e:a0:05:eb:3a:82:b0:72:
4f:5d:db:f3:3f:aa:70:4a:57:08:af:e3:1c:e8:7a:77:59:48:
02:c0:4c:99:84:c8:13:19:e8:b7:62:fc:41:8b:32:a4:c9:7f:
cb:ab:25:0b:a7:6c:14:6c:1f:3a:d6:7a:12:6d:36:80:36:15:
cb:bf:71:46:ad:17:ea:eb:ac:d6:dc:94:4c:ef:0b:d2:e8:c0:
1b:16:c5:9d:de:22:45:73:33:84:1e:f2:7d:09:2b:92:e6:25:
19:34:fd:61:55:df:ea:eb:7d:4a:e6:82:a1:ed:7c:00:f0:79:
96:e4:43:13:f5:eb:71:30:39:8b:db:88:56:fe:ed:a4:f6:ce:
78:a5:e7:76:63:f0:01:dc:87:b3:14:46:33:28:a8:a4:de:0f:
15:f7:f2:ec:b1:dc:4c:b9:90:a8:7e:48:4c:ce:b5:09:e2:ca:
3b:87:de:42:d5:3f:4b:5e:53:62:79:56:c1:fb:dc:63:86:7e:
71:e0:33:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:33:34 2025 by rpki-client