Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier: If3NQPS450Terbsj9Jc1f7FrFnWgwXBIt1+V3AllvcY=
Subject key identifier: D1:DD:20:DB:26:45:F0:53:4B:A9:03:83:FB:A2:F9:65:AD:0D:1A:8B
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 0196729D79CD34B3068D6A91DB7F5AC32188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number: 0F95
Signing time: Sat 26 Apr 2025 15:00:45 +0000
Manifest this update: Sat 26 Apr 2025 15:00:45 +0000
Manifest next update: Sun 27 Apr 2025 15:00:45 +0000
Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: blMLoPuqy55tn6R3xoAe+g0/Z3A+7naTGAmQp3BviSQ=)
2: cp23u9vhlMaqrHKUYwtPPiioz4s.roa (hash: vMJOgdz9BvyEVCpUUDvmbRYIMf8G3KzzC7uWtP3ziOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:79:cd:34:b3:06:8d:6a:91:db:7f:5a:c3:21:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: Apr 26 15:00:45 2025 GMT
Not After : Apr 27 15:00:45 2025 GMT
Subject: CN=d1dd20db2645f0534ba90383fba2f965ad0d1a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5c:c6:1d:46:da:31:ae:b2:ed:dd:91:f1:f1:
04:6d:4f:e5:6e:5d:e4:6b:7d:66:22:dd:89:e6:62:
eb:7f:7b:fe:95:23:dc:54:79:a9:6f:e8:35:f4:fd:
21:b9:1f:c0:72:79:c3:16:48:e8:bf:e9:6c:6e:65:
fc:4a:e6:95:14:b6:76:90:2e:d8:dd:dc:24:4c:9d:
51:29:5f:b1:62:0d:82:ac:89:cf:77:ea:88:de:d2:
8e:5e:55:dc:90:f0:8a:97:44:0a:ad:c8:85:d3:5a:
48:d4:23:24:f9:20:26:70:8a:8b:df:d9:e4:58:dc:
f3:c9:67:67:0c:d0:35:63:3a:48:bd:1d:b5:89:4f:
ee:cd:da:8d:07:7e:d2:68:e0:c4:18:f2:fa:27:a8:
e0:a4:ef:dc:89:94:53:86:11:0d:09:00:2b:5c:6f:
db:67:5a:0f:f0:c8:bc:d7:76:1b:67:6a:e2:ab:3c:
35:a9:72:8c:a7:f8:3b:ee:33:a4:b8:f2:0d:a0:6b:
9b:ac:7e:16:1f:9c:8f:28:fe:d6:d0:e4:89:e2:b7:
cc:81:a1:29:d0:77:cd:98:cb:39:9e:7b:6f:51:09:
fc:8b:8a:c1:45:1e:5b:97:5d:db:2c:21:e4:d9:ae:
83:0e:a4:f4:82:0b:98:3c:ad:5f:45:73:c9:6e:f4:
93:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DD:20:DB:26:45:F0:53:4B:A9:03:83:FB:A2:F9:65:AD:0D:1A:8B
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:21:30:56:ea:15:86:5a:8d:f3:12:34:80:1f:60:ad:83:e4:
6a:38:f2:d4:48:83:a3:83:38:72:32:be:fd:bf:85:11:a8:70:
62:e5:6b:a5:a1:00:82:7a:04:f9:e0:02:2c:94:87:ad:71:7d:
26:28:98:6f:55:14:9c:1d:6b:71:66:b0:ed:28:bb:62:10:39:
63:34:48:e8:17:d1:ca:e0:76:74:a4:66:1f:18:2d:55:52:4c:
e6:19:7a:60:f2:5d:27:6f:3d:c4:06:cb:fa:60:3d:a1:ab:43:
ba:b1:ba:3e:6c:20:f4:8a:d5:75:d8:96:0a:7e:36:0e:1e:de:
82:f6:02:e8:6b:24:a0:11:3f:ad:94:fe:c1:bb:e3:61:04:ee:
7a:a1:2b:90:61:07:c9:3f:03:d4:ab:3c:3e:35:da:b1:75:3a:
69:4b:16:e6:9c:eb:36:f4:aa:5a:00:53:8a:79:42:3b:e1:6e:
ed:53:33:9b:3e:32:c8:ba:a6:22:d3:f2:a5:dc:d3:c9:8e:ad:
b4:95:1f:97:0b:29:f9:65:89:bd:94:98:0e:a5:eb:2b:18:c6:
0f:fd:ff:29:23:af:f0:24:e9:1b:a2:5a:d7:20:3e:c9:50:d3:
78:91:a1:00:25:17:83:0b:ec:cf:a0:d2:51:d5:81:58:51:36:
9d:6c:19:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:03:44 2025 by rpki-client