Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
File: 8yf6fhlHLlg7cgk2w50P0kJmGf0.mft (raw, json)
Hash identifier: YkuiO7wIzpnQMj4AGZDSpPcl+DXA3z0gKov5ENzaZWI=
Subject key identifier: 76:17:A4:CA:20:42:49:38:71:F6:BA:75:CF:4D:AB:8B:F2:A9:11:63
Authority key identifier: F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
Certificate issuer: /CN=f327fa7e19472e583b720936c39d0fd2426619fd
Certificate serial: 01965CB9FE2B1280B9314EF71AF1BAC8A7E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
Manifest number: 08AC
Signing time: Tue 22 Apr 2025 09:00:15 +0000
Manifest this update: Tue 22 Apr 2025 09:00:15 +0000
Manifest next update: Wed 23 Apr 2025 09:00:15 +0000
Files and hashes: 1: 8yf6fhlHLlg7cgk2w50P0kJmGf0.crl (hash: KJ2DAaBTpwu4C5pjMu/kRdFYqGKMLFdmaoXxH6i8xeY=)
2: jteACDbaYC2GMTFvAHtj6JRaDvo.roa (hash: FyyB216euYUAYG4P0lTXHk9/k4BDveAtrAV0IpAsB3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:b9:fe:2b:12:80:b9:31:4e:f7:1a:f1:ba:c8:a7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f327fa7e19472e583b720936c39d0fd2426619fd
Validity
Not Before: Apr 22 09:00:15 2025 GMT
Not After : Apr 23 09:00:15 2025 GMT
Subject: CN=7617a4ca2042493871f6ba75cf4dab8bf2a91163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:79:e3:12:fc:b5:5d:f0:cb:2b:2f:ef:6d:
d8:a3:85:2d:9a:9d:04:9f:a0:a2:bc:4e:70:6e:8d:
94:04:43:25:5a:be:5b:20:d3:80:12:91:31:5a:60:
b5:7a:56:a4:1c:4c:1b:c8:11:90:d7:1a:8f:55:8d:
48:5a:73:9c:06:d0:60:3e:d1:97:4b:a6:b3:0d:8b:
4e:b2:f2:bc:03:ac:7d:99:00:87:de:1e:12:9f:35:
60:6f:f2:07:6b:ab:d6:f9:61:a2:e0:e7:91:d8:45:
b6:26:29:a6:f0:fb:b4:45:bd:97:56:71:1b:d7:0b:
67:6f:19:b4:77:d2:0f:c4:8c:ae:b5:8e:a2:cc:29:
df:e8:03:ac:4e:ce:e5:5b:7f:5f:8c:e4:eb:ae:07:
e4:a2:48:09:5a:5c:25:ff:90:31:b4:11:e7:a6:3f:
ad:5b:a2:44:41:19:2b:8c:44:34:11:9b:5a:aa:89:
fa:27:c2:57:96:28:b9:5c:8e:a8:9a:93:36:da:93:
46:8b:88:16:f1:91:1d:57:66:70:3d:38:f9:34:3e:
8d:b0:09:17:70:0b:7e:dc:84:31:f1:d1:e8:f3:82:
09:9d:7b:57:95:d5:ba:e8:0a:ed:f3:d6:e4:3c:10:
01:22:3b:75:a7:a9:9d:8e:1b:86:0e:57:5f:50:b2:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:17:A4:CA:20:42:49:38:71:F6:BA:75:CF:4D:AB:8B:F2:A9:11:63
X509v3 Authority Key Identifier:
keyid:F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7a:a7:37:19:40:ad:36:fc:52:33:82:15:78:0d:9d:bc:b3:
61:11:e7:23:bd:67:02:3b:96:a2:20:93:2c:8c:11:c4:a8:c6:
38:33:4a:c5:9f:32:7a:70:e4:3e:3d:b2:8d:b9:c6:f2:4c:40:
4f:17:e2:42:9b:bd:66:7a:ed:4b:96:64:4a:0b:bf:c8:c3:7e:
f4:59:3a:e8:1f:f1:66:79:f4:22:76:fd:75:c7:55:f0:fe:82:
46:c6:0e:cc:8a:d3:fc:bd:1b:0d:02:13:6a:27:9a:31:a4:16:
d7:f1:b7:7a:d6:bb:85:de:3e:c5:a8:65:ef:6d:95:36:31:e2:
15:e2:ee:56:b0:ce:f2:1d:6e:78:c3:92:51:d5:c9:d4:a2:9b:
9d:50:ad:cf:92:83:aa:b6:c3:8b:25:78:47:14:97:dd:2c:4d:
da:17:0e:cf:45:38:59:64:53:5e:63:22:19:27:61:11:2a:3e:
35:46:58:1a:13:5c:76:c0:45:65:5e:45:67:e7:37:9c:6d:3c:
ca:e4:6d:4c:67:42:6f:94:63:5f:af:ec:e3:ab:a2:c2:f6:23:
49:0d:c6:ae:7a:2a:d4:d6:19:7d:23:63:d2:47:2f:46:32:92:
50:a0:dc:0e:76:44:b9:f2:57:ce:40:d9:d6:84:3d:27:8e:c5:
c7:e6:3c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:52:08 2025 by rpki-client