Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
File: 8PY2_se1stGN43l-aYTAaVXnFtc.mft (raw, json)
Hash identifier: GmjI41eP2lSGZN2VuqwIzxaFyUjxeTAzGR9eor1VY8w=
Subject key identifier: 9A:17:92:A8:B4:82:A2:05:49:2C:55:71:D1:B2:C6:EE:25:79:EC:CA
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Certificate issuer: /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial: 01964E59CBFDD887D7D1886787D2310E22BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 14:00:29 +0000
Manifest this update: Sat 19 Apr 2025 14:00:29 +0000
Manifest next update: Sun 20 Apr 2025 14:00:29 +0000
Files and hashes: 1: 8PY2_se1stGN43l-aYTAaVXnFtc.crl (hash: mHt+ZZgBgTSqyjSENwxcXlgUPpNleW6+KA0vRRnX5bY=)
2: rChpwrHAhzHtDWk3Wn4ou5CDTWY.roa (hash: rliHydAwaJdesMgVkjuoZQYXcZjxQiZ7KBN8WESMw/M=)
3: t92LD4JF1zzqhKIJX4gc4PGoZiU.roa (hash: QB9NxoH5XmIj8//Y6YIrgAvA3ml34TrM1hbyfS/v07g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:59:cb:fd:d8:87:d7:d1:88:67:87:d2:31:0e:22:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Validity
Not Before: Apr 19 14:00:29 2025 GMT
Not After : Apr 20 14:00:29 2025 GMT
Subject: CN=9a1792a8b482a205492c5571d1b2c6ee2579ecca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:85:08:39:c5:c8:9b:a3:af:c8:f6:be:f6:
25:67:35:06:d4:d4:09:43:a5:d0:cb:34:8a:82:94:
a6:17:d8:45:81:d9:01:e6:6a:c7:68:ab:65:b4:ba:
fd:37:a3:1d:6f:a9:39:93:ef:48:45:88:65:fb:65:
f5:c3:cf:d6:92:2e:de:f3:58:0d:33:c8:96:46:b9:
a4:be:f0:25:51:55:6b:4b:24:58:cb:ff:b1:84:30:
72:3c:16:db:ed:38:7e:fc:de:ab:ef:54:a6:09:ef:
e9:cf:95:0f:3e:b2:57:67:d9:9b:4e:ec:91:e9:32:
07:9e:a5:e8:9b:b4:3c:d2:3f:58:cd:92:d4:3f:05:
f7:1e:d5:89:22:47:dc:4f:c2:74:56:2e:d2:22:66:
99:23:77:d1:94:6b:2e:5a:04:a5:b7:dc:7a:89:3d:
70:83:eb:a3:34:53:e1:ee:fb:c6:7c:63:a9:4a:61:
76:46:2f:82:24:4a:ee:25:d7:00:ca:88:d2:54:ed:
0a:e0:17:34:28:26:8c:96:ce:9c:f5:66:ef:93:5a:
39:76:11:f3:28:01:71:19:fc:fb:34:84:13:26:6f:
6c:20:2e:e1:cd:bd:dc:28:d5:cb:65:95:d4:2d:d2:
20:0b:12:88:11:b9:9e:56:42:72:91:d6:27:74:b3:
5e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:17:92:A8:B4:82:A2:05:49:2C:55:71:D1:B2:C6:EE:25:79:EC:CA
X509v3 Authority Key Identifier:
keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0c:41:d7:a8:65:93:ea:c0:33:91:13:c8:d9:aa:58:fe:fc:
9c:60:a8:af:34:7f:d5:90:9d:b0:22:2f:5f:9f:2c:df:84:e0:
0b:fa:cb:e2:bb:06:c6:c7:f5:87:82:83:d7:09:68:42:8a:00:
4d:df:3b:97:0f:8e:af:54:64:d5:2a:59:fe:38:85:bb:e0:41:
4d:92:7a:69:f1:bf:b4:d6:f4:aa:93:77:0e:77:59:3d:10:5d:
e7:eb:55:50:2b:97:52:cf:67:26:0f:14:e7:4d:1a:0d:b4:10:
1d:99:00:d2:da:ca:b8:97:b7:84:71:a0:d2:6c:90:4c:ff:9a:
dd:9e:f9:a6:dd:2e:9f:4a:4c:1a:d2:be:db:0a:c2:95:ee:1f:
32:c5:16:3c:c2:39:35:f6:3d:f8:07:47:09:a4:47:c8:5e:8c:
26:8f:83:c2:9b:8c:e0:9f:4c:fd:fd:da:6f:bc:61:e9:b1:bc:
5b:2b:7d:f9:43:9e:e8:f9:77:41:f7:95:d4:63:2f:f7:c3:e9:
87:b8:93:c6:c1:fa:f0:89:54:98:45:54:08:ca:22:37:cf:ed:
9b:98:e3:e7:8c:a0:aa:8d:1d:fa:cb:23:93:f6:d0:55:3a:1c:
14:c9:0d:12:07:5b:1f:1d:30:5e:8f:d7:02:ef:1d:cc:14:0f:
10:ab:4e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:16:54 2025 by rpki-client