Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier: WekaX01lOXhcuiltD99mwaVPNN1nLxwirpX3LSNfmKk=
Subject key identifier: 8F:8C:92:6B:C0:C6:73:CF:50:04:CA:14:DA:87:12:77:84:59:CC:42
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial: 0196778CD8724479F25A1E80B459C875D2A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number: 0490
Signing time: Sun 27 Apr 2025 14:00:40 +0000
Manifest this update: Sun 27 Apr 2025 14:00:40 +0000
Manifest next update: Mon 28 Apr 2025 14:00:40 +0000
Files and hashes: 1: 1-a6iBHASMUxMW7asjxbfE0QEd5w.roa (hash: m3RXlatEBF9cA7N2EEjPPwV4+LMKEGb0hrpMsfXqqsk=)
2: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: 3v8/99r8ZEa4Zwce+AcMHYQrZHquxqvDrPBpQVU/0F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:d8:72:44:79:f2:5a:1e:80:b4:59:c8:75:d2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Validity
Not Before: Apr 27 14:00:40 2025 GMT
Not After : Apr 28 14:00:40 2025 GMT
Subject: CN=8f8c926bc0c673cf5004ca14da8712778459cc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:c4:b2:1d:5f:58:c8:ea:11:7e:96:e0:8e:
42:e0:b1:f5:e1:09:fc:96:db:ab:31:fc:09:54:49:
76:d2:41:6a:2b:ed:ba:a8:11:02:b6:76:ab:8e:31:
00:d4:88:45:0c:27:e0:0d:ed:89:12:14:f2:c9:60:
7f:cd:cb:e4:d1:c6:d5:07:8d:55:c0:d1:59:45:08:
eb:d3:9b:ad:fc:89:97:43:ed:38:d1:39:5a:61:3a:
e4:fc:cf:9e:a1:52:eb:69:41:ab:ff:bc:9c:8d:18:
12:2d:02:d1:5c:a8:ee:76:65:fc:23:70:d3:95:8c:
b0:aa:0f:63:78:dc:b3:47:11:9d:53:ea:f6:6d:5c:
55:2b:bf:4a:29:cb:e6:d9:9b:ce:bb:77:73:0a:28:
12:12:a0:33:35:99:ef:0b:0f:f2:55:2c:a8:84:5b:
eb:76:16:2a:1c:7a:72:d8:03:15:9a:5a:e0:9f:c7:
d5:b0:24:c5:dd:a1:ba:8e:53:49:75:ec:b9:8e:4c:
61:fd:33:a9:1a:08:af:5e:3c:44:85:b5:7e:b3:a4:
1c:f8:e5:be:1d:51:ac:0c:22:1a:33:8c:06:62:5b:
ad:89:48:e2:a5:ca:91:43:9f:18:8b:0b:95:f2:c3:
02:38:81:6f:82:86:b1:c6:25:72:2e:d7:27:6c:f6:
ee:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8C:92:6B:C0:C6:73:CF:50:04:CA:14:DA:87:12:77:84:59:CC:42
X509v3 Authority Key Identifier:
keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fe:55:84:0a:86:9d:e7:ac:73:4a:30:3a:1c:1b:2b:a1:d0:
eb:74:3a:e8:ac:c2:ae:a2:ca:0e:4e:52:de:20:46:bc:88:e9:
4b:52:7d:a4:43:6a:11:69:82:05:94:5f:b1:69:d8:ab:41:ac:
20:bc:78:9c:9c:72:3a:4f:61:1c:57:b7:f9:f8:ad:4f:23:9b:
e9:95:0b:e2:37:b3:cf:ab:ab:9a:84:9c:65:82:16:ca:9f:bc:
95:78:8b:29:67:90:7c:42:df:aa:61:1d:51:68:1d:b8:6c:34:
d5:16:22:93:93:c9:ff:c7:f6:0a:ca:3b:6d:e0:0b:02:bf:1b:
21:79:d8:87:34:38:42:d2:16:23:bf:99:8d:7c:d0:2c:a2:7a:
fd:67:12:60:ed:cb:57:37:29:16:b3:79:2a:fc:26:72:54:40:
40:19:77:f8:4f:35:ad:1d:fc:98:34:2d:df:6c:d2:ea:2d:68:
cd:bd:fa:f2:e0:7d:a4:9e:64:8c:94:ce:8e:7c:5c:0d:b6:f6:
27:5e:ee:1c:46:49:44:11:8c:69:d4:f6:ef:b5:d0:61:10:55:
a1:2f:17:d7:15:17:b4:f7:19:7b:d5:90:8f:41:28:d9:10:16:
c5:b8:3b:7f:20:41:7d:43:72:aa:0b:c6:26:54:5a:06:57:fd:
71:21:e7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:31:17 2025 by rpki-client