Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
File: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft (raw, json)
Hash identifier: Qjo1MR6ZJszE1P1PnnB6P3bzynjaOte1H1/RRc5kjb0=
Subject key identifier: CD:38:A5:30:88:13:10:12:09:A2:F2:DE:6C:20:24:58:71:77:6C:A1
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial: 019671F8A0C68B2068F70876866C9C29B674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
Manifest number: 0F0A
Signing time: Sat 26 Apr 2025 12:00:41 +0000
Manifest this update: Sat 26 Apr 2025 12:00:41 +0000
Manifest next update: Sun 27 Apr 2025 12:00:41 +0000
Files and hashes: 1: 79lt-80txKIWQWCp9jNMLc2IHAs.roa (hash: 8V+u82sHy+GzDpyon/8u7WM8JnJcqgS9AiUeL6z8Iug=)
2: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl (hash: +5g9vCsT3t7Nw3sStzWPw7Pl6F70ptID2ZvocGppHcs=)
3: AQ7FmuvDz62F8uKHQpuKMEYydQQ.roa (hash: M9DqKPgllLnW8MX9RGkl/xHC2u96Nyjw3cSwX+kD68U=)
4: Vf1RDh-x6BtkmqUI8kQeJAmyoeQ.roa (hash: 1PUOdlU3yqRdUd5Mz1TUUvBo/uRT6+wW9qnbLMW13lU=)
5: lXo95w5iGY2qlCwar4Vb6ngfmUQ.roa (hash: K7cw6ymMs8oJcHolnWrjFvAyiZlrz4VloYZ/Ck1llmM=)
6: nUxTi5H5Wi_nGNCH8VXylwgxdJ0.roa (hash: xSWU06TWSLqiugEcuWmt4LzGgEiH/rhkdBHL5vVX0+0=)
7: omuf2rqv4Sp9P-8ZJZ916fSowyA.roa (hash: UlQgwX4zh3WqyryliD1lENPsPKINDm9DlFR8/vawBBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:f8:a0:c6:8b:20:68:f7:08:76:86:6c:9c:29:b6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Validity
Not Before: Apr 26 12:00:41 2025 GMT
Not After : Apr 27 12:00:41 2025 GMT
Subject: CN=cd38a5308813101209a2f2de6c20245871776ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:74:fd:2b:76:7c:77:04:27:f0:e1:97:5a:
35:8c:6b:a9:19:b7:c3:8b:9f:e1:e9:58:f0:84:71:
f2:1b:39:73:99:7f:ef:65:8d:db:53:12:34:f8:af:
02:0e:43:7c:23:16:1d:ad:75:3f:27:22:ac:4e:79:
90:73:94:fe:11:90:77:14:b1:4f:ae:7a:32:be:91:
0a:78:fa:ad:4d:15:71:fe:48:d3:95:ce:31:23:f3:
e3:a5:bd:f0:3c:c5:bf:6f:94:9d:ec:cd:74:e2:cc:
eb:f9:82:6b:13:a3:74:29:3b:66:46:2d:bd:eb:e9:
11:7f:c8:ea:3b:71:81:0d:85:b9:74:63:80:cf:de:
23:00:f1:7d:0e:cd:22:b1:2e:16:0e:43:ae:71:a3:
5f:0d:6c:44:1d:7a:40:5c:2c:f0:7a:10:d5:12:fc:
d4:9f:36:73:31:2a:b2:d3:ef:73:a2:f8:32:d8:ba:
88:aa:04:37:76:49:25:95:48:20:a2:c2:ed:86:46:
b7:28:54:be:69:c9:c8:b2:b7:e6:c4:94:5a:31:74:
a7:f1:82:3a:3e:46:dc:e9:75:5c:e7:56:1c:5d:10:
e8:7a:3e:f7:0e:08:4c:7a:15:89:fc:10:a3:33:21:
e6:52:7b:67:9c:34:b7:1a:e0:ae:0d:79:e0:cf:ce:
9f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:38:A5:30:88:13:10:12:09:A2:F2:DE:6C:20:24:58:71:77:6C:A1
X509v3 Authority Key Identifier:
keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e5:03:ac:fa:3a:3f:fc:fb:dd:b9:47:aa:33:fa:5f:7e:bd:
cf:71:5a:3b:a1:08:ca:f9:e6:80:fa:f1:a6:a0:4b:6a:20:3e:
b2:0d:8f:15:25:bd:6a:21:96:99:9b:07:fb:de:cd:42:ae:97:
a2:71:94:ad:11:7d:04:af:3e:ec:ed:a0:cb:b5:a7:b2:13:a3:
68:0b:1f:46:13:2f:90:c8:35:57:b3:d2:e8:18:92:02:83:42:
7a:2e:ec:e8:71:1b:56:2c:3a:b5:06:8a:88:a3:33:a8:59:e4:
60:39:51:f9:df:a5:14:18:e4:bc:f3:ab:19:ae:ed:92:01:c9:
bf:60:5e:1e:ac:02:ea:52:8c:e4:75:c7:fe:41:48:3d:ee:71:
fa:c0:7e:a3:69:d4:77:0f:e1:77:f9:31:ff:5c:22:44:7a:3f:
2a:f7:4c:ff:7f:7e:b7:28:35:74:56:2f:36:83:78:29:54:a5:
86:0f:15:72:2d:17:ec:fa:bf:0c:e6:44:84:24:58:a9:86:71:
46:8f:bc:68:26:32:75:20:41:1f:d9:66:d4:d2:7a:01:0b:b0:
b2:c4:25:69:6d:2f:e4:14:07:2b:be:a9:05:ea:0e:2e:e3:91:
b4:93:99:66:c2:5e:f1:9b:67:4f:50:1b:e9:80:79:d5:a7:18:
fa:a1:f4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:53:52 2025 by rpki-client