Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: TWTCoWuGU6rh6kJpYU8BME/vQI7GPYg2gmkRe4PZMFg=
Subject key identifier: 37:7A:6D:A4:18:F5:74:D5:B1:EE:BE:76:89:D6:83:56:4A:9C:43:14
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 019674550B66A9B83F83E86A78AD42F4F452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 150F
Signing time: Sat 26 Apr 2025 23:00:52 +0000
Manifest this update: Sat 26 Apr 2025 23:00:52 +0000
Manifest next update: Sun 27 Apr 2025 23:00:52 +0000
Files and hashes: 1: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: zj47+mot3zTUiMZyQmpZvwIj2l8GQDeCxutu11tTjl0=)
2: tZdMpKDB98hJ9pZj681_6AcpB6s.roa (hash: i6o9Pghma18l7gMu2eMNZU5hQVcsb4HmVOsk/64sqkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:55:0b:66:a9:b8:3f:83:e8:6a:78:ad:42:f4:f4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Apr 26 23:00:52 2025 GMT
Not After : Apr 27 23:00:52 2025 GMT
Subject: CN=377a6da418f574d5b1eebe7689d683564a9c4314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e1:b9:91:4b:3c:c9:45:30:23:10:b5:c3:b6:
aa:90:68:2e:bd:75:fc:c8:8f:35:c0:e0:33:8b:25:
28:bb:6b:0d:5f:26:db:d2:2c:03:a7:e0:26:2c:43:
ae:7b:ba:93:bc:79:7d:56:ba:56:34:f2:fe:d7:a7:
40:ec:a2:26:3d:91:59:c5:bc:d3:72:24:3d:1d:33:
62:87:91:f0:aa:b3:ce:28:cc:8f:df:97:54:77:44:
98:e2:ca:d5:9c:18:04:ab:cc:3e:c2:77:cd:8c:17:
00:12:df:73:ef:cb:ef:b9:43:a1:d6:e5:03:f5:f5:
d9:14:cc:63:e0:24:ac:9f:21:9e:fe:f6:84:6d:d8:
2e:94:c7:2a:a5:19:03:0e:5d:29:80:cb:ee:ed:f4:
86:36:4d:ac:fc:0c:80:e5:f2:10:b4:36:10:be:8b:
55:e2:a8:5c:fe:87:74:9e:fc:25:62:bc:9f:66:14:
a6:24:d7:f0:af:f9:30:a5:3c:10:33:3e:e9:64:5f:
29:5d:b2:8c:f8:f5:1d:0b:af:a8:6b:ac:93:12:f0:
93:f0:e6:f5:d0:a6:5d:a3:6f:23:49:e2:de:9d:35:
7e:e5:e7:0d:f3:bb:05:9c:0c:e6:cc:9c:39:8e:d8:
00:29:7d:d8:8e:98:55:b2:a7:c4:9f:fd:07:a2:e2:
d8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7A:6D:A4:18:F5:74:D5:B1:EE:BE:76:89:D6:83:56:4A:9C:43:14
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:58:b9:d0:df:30:f0:ae:f8:05:f8:84:b0:1e:fc:ef:4f:fd:
6d:b3:23:64:ed:7b:10:d1:40:8b:d3:b8:c7:24:53:4e:6d:ee:
eb:f6:ee:af:d9:a7:ba:48:13:1d:f5:62:58:8c:e2:0a:4f:b2:
09:9e:28:a5:b2:62:eb:0e:83:0d:a1:c2:dd:80:17:c4:18:e6:
d9:5e:20:95:6a:23:91:6e:21:07:57:80:61:96:36:3a:20:3b:
6b:eb:40:ba:fd:1d:b3:36:df:81:2b:26:8a:77:69:43:77:17:
f4:eb:27:90:a4:21:af:29:cd:6b:8c:83:a6:93:3a:ac:b6:32:
74:00:56:bf:08:38:bf:0d:c2:69:ed:19:06:e6:77:ac:da:97:
81:55:07:0e:e2:07:f0:0f:ef:87:dd:43:b0:5d:5c:eb:7c:42:
41:c4:c2:08:5a:6b:56:37:a3:a6:c6:ca:98:5b:fe:0f:1d:16:
3f:69:96:83:10:47:7d:b9:89:0b:f6:4c:b8:25:15:1e:ca:d4:
96:a2:b3:ec:be:93:84:13:b4:25:b4:28:4e:72:aa:30:12:30:
a4:c5:bc:d4:ba:9f:93:d3:0e:c3:36:7f:30:8b:e5:28:d9:7d:
48:b9:84:79:59:87:d6:0d:09:d2:96:a6:d4:51:13:f8:30:65:
7e:6d:15:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:42 2025 by rpki-client