Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
File: j8Yziy6SHZEmxTYwPweMnruah1I.mft (raw, json)
Hash identifier: aI1thKw34KIONW41XaeU0urFCcwCwVlGDxiRUaZZknw=
Subject key identifier: 87:24:12:10:0A:20:A7:26:B7:85:EF:7B:93:C7:C0:06:1B:99:3B:DF
Authority key identifier: 8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
Certificate issuer: /CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Certificate serial: 01965492F5BD9C104C5DF4C818A42A5D458E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 19:00:39 +0000
Manifest this update: Sun 20 Apr 2025 19:00:39 +0000
Manifest next update: Mon 21 Apr 2025 19:00:39 +0000
Files and hashes: 1: E9E2NhUKJP_3TXPCgDM1hcFl3-A.roa (hash: aBze8FprGa3p4/CGvI/TFD3mAyVwA/i5ic5RvbopQHs=)
2: j8Yziy6SHZEmxTYwPweMnruah1I.crl (hash: Bh2SkYcz46Mc/K3mO55adQ8juIE1nRyFU4hhGECNDCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:f5:bd:9c:10:4c:5d:f4:c8:18:a4:2a:5d:45:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Validity
Not Before: Apr 20 19:00:39 2025 GMT
Not After : Apr 21 19:00:39 2025 GMT
Subject: CN=872412100a20a726b785ef7b93c7c0061b993bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:16:11:72:d5:67:3a:2c:6b:89:4e:db:d0:
64:f4:b4:d5:66:69:54:a7:a6:9d:88:6f:c7:3b:fb:
ab:ce:6e:7a:1b:db:94:2b:fe:b9:5f:0f:58:a2:ad:
b0:07:b2:37:d8:a6:2a:30:d4:95:3f:f0:6c:16:97:
70:bb:ff:6a:95:9a:5e:ac:1a:cf:4b:6d:49:d1:27:
0f:e0:6f:0a:78:78:99:b2:09:84:ad:96:96:07:57:
7d:06:82:7b:d3:8a:d6:99:d1:5a:5c:89:4c:ef:37:
bb:45:b5:0a:45:d0:f1:8e:77:38:a5:6c:de:37:c0:
81:8d:60:27:97:7c:53:18:b0:cc:55:11:c9:18:76:
55:d0:e1:d6:78:9b:8e:9c:2a:de:86:95:8c:00:f1:
36:ed:04:fe:34:dd:51:e5:7c:bf:a7:c1:60:e9:d8:
e4:11:cf:54:66:df:f7:21:1c:6d:2e:9b:8b:2b:76:
95:57:8e:1f:88:58:2c:6e:c6:da:b3:13:71:60:27:
c0:eb:cd:61:3c:75:b2:5d:0c:05:70:fd:fd:f0:85:
f4:3a:92:53:6f:a6:df:04:9a:05:13:d8:5e:2a:a2:
4d:a4:ed:7c:d7:71:e0:f4:6b:e1:48:de:2f:88:58:
06:f2:c2:6a:76:ae:9e:26:aa:7b:0c:eb:4f:3d:95:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:24:12:10:0A:20:A7:26:B7:85:EF:7B:93:C7:C0:06:1B:99:3B:DF
X509v3 Authority Key Identifier:
keyid:8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d5:d8:e6:96:8b:66:91:9f:5f:db:09:fa:9b:2c:2d:fe:37:
8b:6a:af:71:01:9a:a7:17:8d:bb:2b:09:4f:f6:27:7f:eb:94:
af:a8:ee:37:53:6c:3d:b1:00:9a:8d:19:2e:b7:d2:f1:76:3d:
b0:27:ff:b7:75:1c:0a:a7:0c:e5:0c:d3:94:a4:ce:bf:66:93:
85:f2:c8:ad:df:ff:34:ac:79:14:a1:95:05:e7:d7:d2:ac:61:
71:69:bd:fd:f6:d3:bd:e9:c2:16:01:85:20:a3:e0:ab:ac:b3:
9f:f7:94:16:f1:ec:d2:96:3b:76:5b:09:70:4f:eb:d1:e9:31:
cb:09:a3:37:dc:81:66:cd:a6:83:f8:ce:25:ae:c1:86:d5:3e:
ae:bd:72:f1:59:8f:fb:79:cd:1c:8b:42:30:d6:4e:17:d4:36:
6f:41:d2:1b:90:34:e9:af:1c:4b:bd:c3:f6:10:5f:b6:74:cc:
f3:62:97:7c:aa:ba:48:1b:22:5e:68:5d:d8:6f:db:b4:d7:0c:
b1:04:1d:32:2f:89:cd:be:a6:18:5b:db:c3:fa:f0:dc:25:dd:
a3:ff:25:16:3f:3d:d6:dc:c2:18:29:9a:ee:dc:53:22:64:64:
2f:36:96:4c:85:ab:8a:77:06:db:9e:72:b6:05:d0:fc:ad:e0:
32:1c:57:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:40:05 2025 by rpki-client