Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
File: 82BUCSXbyxoJ-2XzspAD1o8j3ms.mft (raw, json)
Hash identifier: moz6nP/86TqJoa9uk26YwmVo41ZB/tNllvwp2iFl90s=
Subject key identifier: 3E:B8:5B:9A:F4:13:53:E9:C8:5B:72:FF:2F:64:0F:76:7D:91:87:F0
Authority key identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
Certificate issuer: /CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Certificate serial: 01969E638030D0867DE9D477CC0E2D6E598C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
Manifest number: 08D0
Signing time: Mon 05 May 2025 03:00:43 +0000
Manifest this update: Mon 05 May 2025 03:00:43 +0000
Manifest next update: Tue 06 May 2025 03:00:43 +0000
Files and hashes: 1: 82BUCSXbyxoJ-2XzspAD1o8j3ms.crl (hash: +7yvTSt/hworEmswrYj0vA0XSwaeRe2fygpwmxa4tuU=)
2: WO4Lx-SRYYsLgDA8d_7YHDSf7BI.roa (hash: nMdj6H5AmHScUq7iFK7ub3BJ0X174BqxH7J5lRBxaFk=)
3: oI7kOSiG8h1OQh9w777ujGQ8d5c.roa (hash: 7bzozQwhPvIcjtgW8D6KNMw02ktIJKUDIRXI6dPZ7uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:80:30:d0:86:7d:e9:d4:77:cc:0e:2d:6e:59:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Validity
Not Before: May 5 03:00:43 2025 GMT
Not After : May 6 03:00:43 2025 GMT
Subject: CN=3eb85b9af41353e9c85b72ff2f640f767d9187f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9d:1c:d1:53:8a:c5:ef:da:ce:ba:38:64:fe:
7a:88:64:35:06:ec:6f:b5:d3:1d:f6:b8:4e:08:49:
1f:55:6c:fb:c1:fd:74:e5:df:53:52:49:a3:95:e4:
d4:85:a8:59:ec:77:ef:20:ee:0c:23:e6:75:58:3e:
e8:23:30:0f:20:a3:c5:5f:3a:89:d9:8d:0e:a1:d8:
57:1d:10:6a:c6:98:b3:8c:63:7c:cc:db:7a:6f:bf:
13:a4:b1:8a:35:10:3f:fd:63:c9:11:4d:3a:cc:63:
58:05:d6:d0:e5:62:04:4e:95:2e:24:b3:41:56:d5:
5f:c2:48:ff:00:c1:ce:6d:2f:04:c5:c4:20:34:55:
b7:2d:b1:a4:90:36:67:47:1f:72:95:52:c8:0f:c3:
9c:53:ff:aa:6c:6c:24:57:a9:e3:e6:24:1d:a8:b1:
a3:5c:df:80:64:ef:a7:eb:51:62:98:d1:8f:aa:ff:
08:eb:f1:fc:9b:34:8a:cc:9b:26:d8:d3:66:0f:82:
35:46:d3:ac:65:c5:56:54:40:ee:6d:bd:90:1c:0a:
09:de:32:39:3e:90:6f:c2:8f:b6:8a:b6:98:37:8a:
bc:11:b9:79:0f:70:c2:2a:18:0e:05:06:96:13:9d:
7b:33:0b:4f:30:d6:ff:44:43:87:e4:33:42:e0:0b:
6f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B8:5B:9A:F4:13:53:E9:C8:5B:72:FF:2F:64:0F:76:7D:91:87:F0
X509v3 Authority Key Identifier:
keyid:F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2f:dd:6a:e3:d5:a1:5a:f8:57:70:d5:65:aa:bc:cc:22:23:
18:04:64:d8:2c:dd:32:d3:b5:a2:eb:86:fe:f3:61:67:42:75:
c3:52:ae:dd:6a:59:5d:30:89:ea:42:f3:15:e7:d1:df:a3:5b:
bc:52:4c:d2:c8:1a:6a:80:f2:c6:59:ac:85:b1:f4:84:2a:0c:
48:cd:2f:69:bf:4e:96:56:51:32:e7:2b:65:60:16:ef:6a:4c:
fe:b3:0a:e5:e8:e9:c8:35:29:d2:33:35:c4:2d:f9:b7:19:a3:
d8:17:cf:3f:b8:97:74:e5:f7:11:38:dc:8f:1e:b5:e2:3b:2e:
0e:21:a5:c7:e9:bd:5f:b6:c9:1d:01:d8:2a:a6:64:c2:6c:38:
58:72:d1:16:22:38:18:ed:26:3c:bd:5e:6e:5b:91:a5:42:71:
a3:1d:d2:b8:58:8d:30:84:ea:0e:bc:1b:e6:81:8b:40:dd:3a:
ed:5a:dc:c1:5c:c8:27:58:bd:0c:06:0d:8a:5d:7a:cb:e3:31:
3f:c3:9e:7c:03:72:a6:47:d5:41:5f:74:fd:33:3b:e9:95:8e:
e2:49:d5:4f:8e:43:cb:0d:4e:dd:6d:97:a4:6a:99:5c:b9:27:
63:51:23:d5:f6:0d:f8:2c:66:e3:71:64:77:3c:82:10:86:69:
18:b7:6f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:57:17 2025 by rpki-client