Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json)
Hash identifier: gs+sSJFbh/FUGveGG/+E7VJW9zt45GS1kURkLmNoQpU=
Subject key identifier: A7:5D:1B:E9:9A:AD:E2:29:EE:32:69:F5:AB:E8:62:E6:4F:79:D6:3B
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 0196BAB6149743AD173EAFADF52B57075C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
Manifest number: 0559
Signing time: Sat 10 May 2025 15:00:17 +0000
Manifest this update: Sat 10 May 2025 15:00:17 +0000
Manifest next update: Sun 11 May 2025 15:00:17 +0000
Files and hashes: 1: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: Jwa6b2Nm27i8wC213QaGHi0FZXcxFi7ay9XR+git5pE=)
2: pEP-pQhZiYbw0SOD31dKWiKIqmI.roa (hash: CfAhs6liLNKygVMpweyGMUtkUgPvkHCadlR7GSV9YRQ=)
3: ytXklMT7Qvg5G08MtY8lphgvXaw.roa (hash: r4Q3NQ10FfDyt/oO/SAMKogjYuHKvOwUOktQVJptRLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:14:97:43:ad:17:3e:af:ad:f5:2b:57:07:5c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: May 10 15:00:17 2025 GMT
Not After : May 11 15:00:17 2025 GMT
Subject: CN=a75d1be99aade229ee3269f5abe862e64f79d63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:93:bb:d0:bb:06:69:22:c4:94:23:12:c0:
56:47:72:a1:40:07:b8:cd:fa:f2:75:80:0f:e5:e6:
30:34:5d:d9:cb:f6:8e:84:fb:eb:bd:11:92:8a:49:
26:51:38:28:31:98:04:12:f7:87:03:92:a0:83:54:
a6:6c:93:4b:1c:52:6b:40:3c:78:6e:1b:d0:9c:b3:
ae:24:dd:20:d2:42:ed:94:65:6e:3c:c6:fb:e1:17:
66:6b:f2:17:f7:9c:5a:9a:17:d6:1c:4d:93:e5:71:
98:3d:01:42:e3:be:4c:9d:52:44:a6:04:68:3f:38:
a1:6f:40:c2:53:fe:87:a9:e0:51:dc:69:ca:53:3d:
56:96:45:3a:01:2a:31:26:03:8f:0f:12:b5:2a:6f:
58:33:62:16:de:25:cd:d5:d2:6b:84:33:2f:3a:9f:
a3:4f:f9:5a:be:ed:d0:cc:5b:d7:78:46:30:28:ce:
a2:6b:6d:b5:49:ef:9b:e8:af:63:db:25:64:27:14:
55:f7:2f:c3:63:51:86:e1:bf:bf:01:25:de:95:5f:
e0:77:c4:c1:9e:8e:f1:aa:84:ea:03:b5:98:78:d5:
43:9a:69:e6:c7:16:74:de:fb:ed:cd:29:72:80:1d:
d6:fd:55:df:f2:f8:4b:6d:c1:f9:20:1a:af:2a:49:
a5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5D:1B:E9:9A:AD:E2:29:EE:32:69:F5:AB:E8:62:E6:4F:79:D6:3B
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:13:cf:7c:38:5d:e2:3d:b0:b4:d6:3a:73:a9:2c:cb:c6:09:
a6:7d:7b:fc:e0:d9:e9:17:9a:3e:2d:6a:d6:9c:e5:57:dd:24:
2d:b8:46:80:36:79:4a:26:ac:01:ed:15:96:db:ee:d3:c5:fa:
e3:b9:41:f2:97:bd:99:2e:93:c5:b3:c1:70:4e:36:54:b3:bd:
d7:44:ad:1c:c4:1c:57:c8:46:4c:99:49:9c:96:2f:7a:0b:0d:
4d:37:7e:a4:60:c6:e6:7e:82:14:49:3a:5a:40:25:a3:1e:b6:
81:12:4a:80:98:8a:fd:04:04:93:0a:b3:60:7a:89:aa:bc:32:
d2:93:dc:19:b4:9b:2a:bb:92:f5:db:73:b2:ff:1a:84:f8:ab:
58:72:af:3b:9d:d6:5a:21:7f:02:cb:70:be:b4:2f:dd:2e:df:
f1:ee:49:e4:b5:98:1f:88:06:20:e7:8c:09:74:2f:06:4c:71:
c1:6d:4e:bf:ed:42:e0:ae:23:d5:57:db:33:4f:32:4a:d4:ca:
64:d9:eb:32:0c:fe:98:7a:d7:c2:b0:5b:00:d9:97:6a:30:90:
51:81:a8:c0:e5:67:22:fb:1e:1c:07:1e:3d:60:dd:70:8f:da:
2d:ef:f7:c3:ae:5c:7b:3c:47:fa:f4:5d:7f:ef:1f:b4:50:3e:
c1:81:7a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:25:47 2025 by rpki-client