Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
File: S-8wYkIQwA06ht_WyAEGErsbEqA.mft (raw, json)
Hash identifier: pzwlE5IYrKhtalYRN2tmD16Nv1mHsw31Y5ZHlO/QANQ=
Subject key identifier: 6D:AD:5F:11:88:B0:2E:BC:FD:00:BB:13:C7:E6:D7:99:EF:7D:E6:8E
Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
Certificate issuer: /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Certificate serial: 019761A6ECE92F8D25A516BDB086E1020FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
Manifest number: 0524
Signing time: Thu 12 Jun 2025 01:00:18 +0000
Manifest this update: Thu 12 Jun 2025 01:00:18 +0000
Manifest next update: Fri 13 Jun 2025 01:00:18 +0000
Files and hashes: 1: S-8wYkIQwA06ht_WyAEGErsbEqA.crl (hash: JjwRMTMAqEKiiYkHhfXt5qfW7G0p3i15hje1Hw9oMr4=)
2: hewkwqUbEjrIV_IBVqwAtoymkrQ.roa (hash: Jkl1mlHh6xctvJTfhoOpTm+3C4TmQ7fhy/9GZ6iTL9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:a6:ec:e9:2f:8d:25:a5:16:bd:b0:86:e1:02:0f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Validity
Not Before: Jun 12 01:00:18 2025 GMT
Not After : Jun 13 01:00:18 2025 GMT
Subject: CN=6dad5f1188b02ebcfd00bb13c7e6d799ef7de68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:92:63:42:21:51:90:ff:37:c8:51:9b:10:
6c:92:6d:4e:36:50:c1:4c:dc:33:1c:ad:59:b4:61:
d7:58:67:21:2b:de:0c:d7:5f:d7:ac:9a:18:e6:87:
40:96:b3:2d:21:fd:2c:68:39:d2:db:19:72:b7:73:
7a:26:fc:a4:23:e9:ed:49:34:0d:c9:03:9b:16:16:
43:c4:6b:e7:08:6a:14:5c:71:b5:7c:a6:cb:0a:cf:
f1:16:b1:26:f8:5e:1d:83:67:fa:19:64:9c:44:51:
f3:53:e4:30:41:3f:ea:fa:f6:58:3b:60:00:d1:d1:
5e:69:36:b4:83:3d:da:6d:73:1e:0e:f8:3e:b0:6b:
7a:e6:be:94:4b:87:58:5e:95:e5:47:f4:86:fa:ac:
73:da:91:95:5b:84:28:a4:81:38:9c:22:d7:5b:43:
41:81:93:62:0c:09:7e:8e:63:99:8d:6c:9e:99:85:
6f:c7:db:c7:52:9b:4d:3e:f9:b6:12:b6:9c:4c:e2:
a2:a8:6b:ce:31:08:df:5e:ed:d9:17:44:0a:b3:3c:
d7:0b:cd:55:fd:76:6c:4e:b6:31:bd:73:bd:16:bf:
80:57:67:5e:d0:ad:35:fc:d6:2b:e4:7a:d7:bb:ab:
7a:8d:8c:29:3c:40:ec:af:6e:68:a3:09:bd:5b:a0:
04:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AD:5F:11:88:B0:2E:BC:FD:00:BB:13:C7:E6:D7:99:EF:7D:E6:8E
X509v3 Authority Key Identifier:
keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:69:ce:fb:48:10:b8:3c:07:fa:f7:ea:ee:f0:69:b3:ef:57:
ae:70:ec:92:b5:ca:6e:40:e2:10:99:26:ff:e4:18:09:c6:38:
b0:79:11:17:94:c9:b7:d9:06:e3:11:d8:98:ad:93:be:10:ae:
07:62:0e:73:f3:eb:7e:95:55:58:b5:38:a5:02:fe:38:23:cb:
1d:7d:44:c8:38:9b:cb:f5:3b:05:3c:72:da:9f:9b:41:27:ed:
db:85:92:aa:30:dd:25:f3:13:ad:47:04:23:6a:97:57:c0:1c:
b9:66:11:57:cf:2c:d3:5e:be:6b:7d:5f:70:e4:e4:0e:5d:a9:
85:5f:aa:e4:c4:02:0b:33:28:1a:a6:df:84:a6:31:7d:3c:fb:
e3:a2:6d:8e:02:ef:3f:08:48:74:a2:af:06:30:0d:b0:04:f9:
9c:51:9b:4f:e6:10:0c:8b:23:52:2e:08:91:92:f0:33:7b:c1:
c3:4f:ad:cc:b2:d4:5a:ab:94:a0:82:4e:07:1a:a6:76:d5:a2:
84:12:f8:20:ab:b8:30:e5:a8:ab:b9:d7:af:ba:fc:4a:bd:9a:
9b:49:f9:ae:64:1d:4c:c7:ea:6d:db:28:c8:68:91:a2:ec:85:
6e:5a:c9:37:b8:90:21:d3:ed:96:eb:37:e7:83:84:65:97:a5:
7f:80:f6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:35:10 2025 by rpki-client