Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
File: CiA8bv-edCJgMJP4PmIR2pjHWCk.mft (raw, json)
Hash identifier: 0Lklbcrdqwtcy175GgA/jMBNc3emo0rGkOFNOZ+owkw=
Subject key identifier: 55:36:BB:F5:29:C9:FF:85:D4:BF:1F:68:D9:04:8E:CD:EA:84:10:61
Authority key identifier: 0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
Certificate issuer: /CN=0a203c6eff9e7422603093f83e6211da98c75829
Certificate serial: 019674C2E4B68018735EE97D2520E39280CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
Manifest number: 08A2
Signing time: Sun 27 Apr 2025 01:00:51 +0000
Manifest this update: Sun 27 Apr 2025 01:00:51 +0000
Manifest next update: Mon 28 Apr 2025 01:00:51 +0000
Files and hashes: 1: 86UP9_zfWrm8I2wKVn4nqcw7tgQ.roa (hash: 3J5NqPkKkcPBxfbwq2fM/SjV37VEXbNMo9GruUt6NNo=)
2: CiA8bv-edCJgMJP4PmIR2pjHWCk.crl (hash: qEGh+iFZ9HPtnL+styMoz1RvjFVoslWbVBunJcOBSaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:e4:b6:80:18:73:5e:e9:7d:25:20:e3:92:80:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a203c6eff9e7422603093f83e6211da98c75829
Validity
Not Before: Apr 27 01:00:51 2025 GMT
Not After : Apr 28 01:00:51 2025 GMT
Subject: CN=5536bbf529c9ff85d4bf1f68d9048ecdea841061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:a0:7d:fb:fa:56:1c:9c:f3:22:3f:0f:a9:
ac:fa:59:37:f4:ed:29:5b:99:2a:79:97:71:5d:f9:
ba:8d:c0:d2:f3:66:d7:06:f5:49:55:1c:b5:ca:61:
0a:5f:a6:30:1a:b0:cb:57:91:75:92:5b:ba:4a:35:
8c:8b:36:a8:35:c7:ef:0a:76:a8:2d:47:76:6f:db:
be:03:90:46:44:48:6f:1b:39:1b:45:cb:c4:6b:0a:
dd:15:7a:65:93:c8:88:8d:a5:a9:db:2e:a2:70:f4:
02:bf:e6:ab:61:82:c7:7d:9e:2f:a0:e6:2f:8b:40:
20:bc:ae:f6:18:77:8c:ba:10:e4:3d:2a:75:27:75:
0a:2e:7c:0e:12:be:40:14:16:27:cc:13:56:96:bd:
00:3c:b4:0c:d0:23:98:ae:d7:26:ff:54:74:8b:0e:
13:3f:f7:ca:c1:bf:24:44:57:de:44:b1:c4:d1:8f:
06:d4:d0:58:cf:7b:c6:2a:31:93:4e:a0:39:c0:5b:
64:ab:e4:97:4c:95:27:21:78:a0:f8:7f:af:06:1f:
31:3d:f5:2a:c9:4f:80:91:b6:ad:0d:f0:06:e0:7d:
ba:8c:d7:c2:a9:4a:e6:00:f5:51:16:60:b1:ae:85:
6d:72:e4:bd:5c:e9:fd:49:d1:31:a6:03:c9:72:63:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:36:BB:F5:29:C9:FF:85:D4:BF:1F:68:D9:04:8E:CD:EA:84:10:61
X509v3 Authority Key Identifier:
keyid:0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:17:84:a8:24:1f:b1:77:48:fc:ec:89:85:87:5a:81:2e:04:
50:ce:51:99:51:74:46:df:ef:2e:6f:a2:a2:73:4c:aa:20:8a:
37:64:3b:a7:57:6e:31:1b:0a:c3:70:84:12:9c:e7:04:cb:a8:
a3:50:fb:7e:51:7f:6f:de:15:68:e0:73:50:14:79:1f:ea:9d:
81:93:fc:da:0c:f4:64:c0:cf:5e:84:ce:f6:06:e0:ea:63:a9:
41:5b:8b:35:ed:9a:a4:40:96:7f:9e:16:99:dc:38:b7:bb:13:
66:ee:dc:f1:f1:b9:a9:d0:ed:c6:87:e1:70:a3:5c:a0:46:84:
38:a1:77:1a:da:81:30:e5:dc:1d:7d:76:1f:20:55:76:d0:05:
5f:aa:c4:8d:b5:ae:94:b3:9c:a0:dc:eb:ee:aa:f4:98:b8:5e:
de:6e:8e:04:7c:36:45:9b:fb:0d:84:b6:ba:91:b3:cd:cc:d8:
50:1d:b5:4d:03:a6:94:ce:d2:df:da:4e:4f:cb:41:67:82:29:
9c:ee:79:76:e5:c4:fc:88:e6:42:f5:fe:31:bd:35:8e:06:95:
b9:1e:5e:82:eb:92:25:fe:f2:44:8d:9e:74:6b:23:29:e7:4d:
90:4f:c5:a1:74:90:3c:bf:24:1d:67:b0:81:88:2a:3c:af:a5:
73:69:2b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:17:26 2025 by rpki-client