Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
File: 8aqhbd2NihLf0OUyEXA62VLjshQ.mft (raw, json)
Hash identifier: x70VujAqZdrOCZANLXW61bpzTRkuS5vrHWbn5NhrPSo=
Subject key identifier: EA:A0:94:65:D3:EE:BB:74:F6:B9:BE:10:2B:07:18:F7:EC:C5:0D:13
Authority key identifier: F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
Certificate issuer: /CN=f1aaa16ddd8d8a12dfd0e53211703ad952e3b214
Certificate serial: 01968BEEEF0166B3755C3F91F57B3E0AA404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
Manifest number: 0B68
Signing time: Thu 01 May 2025 13:00:13 +0000
Manifest this update: Thu 01 May 2025 13:00:13 +0000
Manifest next update: Fri 02 May 2025 13:00:13 +0000
Files and hashes: 1: 8aqhbd2NihLf0OUyEXA62VLjshQ.crl (hash: WkQmSiNhk4udGAdN9unwWm5hgxOvZexpARqsZNcPdZo=)
2: lU08unvCcfUmoq9nA8rwwc_EGrY.roa (hash: r4fF+/jooZGKRffBCLRbLiandhCNSPTtKJ/Y1slqur8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:ee:ef:01:66:b3:75:5c:3f:91:f5:7b:3e:0a:a4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1aaa16ddd8d8a12dfd0e53211703ad952e3b214
Validity
Not Before: May 1 13:00:13 2025 GMT
Not After : May 2 13:00:13 2025 GMT
Subject: CN=eaa09465d3eebb74f6b9be102b0718f7ecc50d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a3:f7:6a:3d:dd:1c:80:d7:6a:20:ab:7d:b3:
ff:92:cb:fc:e1:98:d2:14:ec:56:9b:55:0e:9f:a4:
e3:45:c3:02:88:33:b0:e0:8d:7c:a5:50:28:6b:1a:
32:5c:cb:38:b2:93:64:09:3c:40:39:5b:ff:b6:5b:
16:47:88:37:77:51:80:ac:0c:0b:ba:61:a4:c0:3d:
9d:59:f6:44:a8:96:01:e6:2c:29:59:21:dc:19:24:
43:3d:ac:8a:14:b8:e0:ec:49:92:30:87:be:cf:29:
d6:da:3c:5d:43:aa:ac:50:f3:71:29:87:87:25:96:
7d:2d:75:cf:c9:8c:0f:bb:10:26:9f:e6:90:22:40:
b6:c1:f3:c9:61:72:cd:20:3c:3f:a9:a8:82:79:18:
1c:d7:be:f5:8a:9f:16:8d:35:dc:80:98:8d:0e:12:
aa:0f:4d:f0:05:d8:dd:ad:5d:2f:cb:5b:30:bb:17:
41:11:44:f9:80:43:21:cd:8c:6d:43:f2:d8:f1:36:
3d:97:d6:b1:6a:f6:63:d0:bb:01:32:8f:e3:da:cc:
c8:b3:62:8a:74:55:a4:40:47:63:f6:48:a0:e0:bc:
4a:cb:12:eb:ed:c2:90:a5:79:b5:14:0c:d8:ed:4e:
ce:ce:16:31:cf:b9:c4:f3:7d:67:bc:9b:c2:37:af:
4c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A0:94:65:D3:EE:BB:74:F6:B9:BE:10:2B:07:18:F7:EC:C5:0D:13
X509v3 Authority Key Identifier:
keyid:F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ac:c4:ce:4f:d7:8d:c7:c2:ca:dd:ca:72:f6:6c:a6:a2:22:
5b:4d:94:dd:3c:04:94:0f:ff:1e:99:aa:67:cc:32:52:af:70:
04:c1:aa:10:27:73:b2:78:83:a8:a2:0e:ca:c6:84:4c:bc:8e:
3a:fa:37:ce:c6:88:38:29:ac:b4:1f:08:8a:57:11:74:5f:9c:
f4:1e:0d:ac:c3:17:ce:7e:52:47:96:dd:82:15:9b:e6:4f:07:
bc:6f:b2:11:25:f9:a2:53:36:16:e9:95:5c:fe:4a:40:ba:26:
bf:5a:5e:6c:27:53:2e:9c:d8:2c:99:1d:d7:bc:2b:ad:d2:5b:
77:48:72:9c:20:ca:e4:89:0e:a8:8e:d6:9b:cd:f7:98:66:79:
e9:52:aa:c3:d1:77:38:31:88:63:2c:18:0a:2e:05:df:0f:69:
83:d0:87:cc:cb:fd:a9:8e:24:48:9a:3b:d1:07:a9:6d:b8:7c:
90:67:1f:e5:1e:12:6f:44:8f:99:8b:19:04:49:de:eb:b6:b9:
63:ab:cb:cd:2c:ad:5c:ad:95:58:71:1f:d4:d0:f8:59:70:a7:
96:c4:d6:ad:37:34:c2:4a:7f:ed:14:f5:c9:83:e7:0f:67:b4:
1b:2c:b5:28:6d:23:3e:35:cf:8a:fb:b7:67:e7:2d:da:eb:ed:
9e:a3:d4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:37:41 2025 by rpki-client