Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier: Z6ntkDeOedE3P7lpYZqRYdmuiDFi03HiPqIE2gr1Kk8=
Subject key identifier: EF:10:64:65:A0:A6:E0:3D:C2:C3:F0:3A:7D:C1:3C:30:84:F7:0E:E2
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer: /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial: 0196759E6E943729399AB021256615DC64A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number: 0524
Signing time: Sun 27 Apr 2025 05:00:39 +0000
Manifest this update: Sun 27 Apr 2025 05:00:39 +0000
Manifest next update: Mon 28 Apr 2025 05:00:39 +0000
Files and hashes: 1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: OvQ/FWOrHYDj1TsV3gwSCsAPTY92K2ZSW3Ntw4EPwPE=)
2: QkDfFPHioKn_HpsksL_NF9YS6vY.roa (hash: 1Lri5Ec30fDzCxdnmve0TUpmzcMOSjp4uMTpIup2clA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:6e:94:37:29:39:9a:b0:21:25:66:15:dc:64:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
Validity
Not Before: Apr 27 05:00:39 2025 GMT
Not After : Apr 28 05:00:39 2025 GMT
Subject: CN=ef106465a0a6e03dc2c3f03a7dc13c3084f70ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:b3:b4:7f:82:d5:30:21:45:b9:65:39:8c:
2e:28:46:47:69:6c:81:a1:48:58:10:fb:8b:d9:6a:
25:cc:fa:b0:34:a3:3a:76:95:e9:ce:12:45:d3:40:
60:57:07:b2:3a:78:ab:79:57:db:e6:ba:4b:dd:c7:
c6:4e:96:b0:c4:64:a4:2c:4d:fa:3b:7c:08:4d:b9:
e7:1f:36:20:51:c5:84:fe:ce:4d:20:70:95:3d:f1:
34:e1:1e:11:d5:ec:26:c2:e8:ac:72:89:ac:91:99:
db:99:71:12:d2:2b:3d:7f:62:b1:e5:93:1e:f4:7b:
76:38:7e:5b:ae:81:b9:2f:7f:2b:78:a1:d2:9b:ae:
9a:b6:9e:1f:fb:f9:61:9e:e1:a2:2a:ad:56:f2:7e:
c9:ce:3f:df:e3:ee:3c:40:04:13:b5:ad:58:95:eb:
e1:b5:0d:ea:62:ec:4c:57:04:86:ab:98:4e:f6:29:
b4:91:21:c2:f5:b4:2d:29:c2:06:2e:21:c7:e0:eb:
fe:db:69:3f:0c:7c:17:08:19:c6:9a:30:7f:f4:95:
df:a4:40:81:02:0f:e7:8f:2a:73:56:d8:ea:c1:63:
74:53:94:4e:4d:e5:19:0b:82:97:f3:78:95:a2:73:
d7:96:e8:06:0a:90:5e:ce:c4:e9:67:5f:ad:83:bb:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:10:64:65:A0:A6:E0:3D:C2:C3:F0:3A:7D:C1:3C:30:84:F7:0E:E2
X509v3 Authority Key Identifier:
keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a0:e1:54:04:54:0e:e7:fd:57:57:0f:55:fa:c9:58:53:60:
cc:97:f4:13:9e:3a:7b:b5:98:55:62:28:fc:fe:28:6f:a0:db:
22:86:81:c1:a9:51:84:24:d5:9b:3f:83:c3:1f:18:9c:c4:1b:
5f:e6:66:51:14:02:19:09:f6:63:09:24:91:c2:25:f4:f4:f6:
96:7c:e0:e0:6a:85:21:3e:6d:bf:74:2f:d3:70:96:17:8e:c9:
9e:02:0f:8e:6b:fe:d9:2f:87:c4:b5:d4:82:c3:d2:e9:3b:1f:
53:8d:ea:d3:e6:2b:18:97:99:d0:3a:a8:7a:f7:a7:be:44:5b:
15:62:00:97:d1:c1:ad:a9:a7:0c:39:d6:bb:64:45:79:17:e2:
e6:0a:84:67:a7:49:37:3e:0b:81:91:96:d9:f7:21:e4:5b:62:
8c:ce:ba:93:38:59:45:62:e0:ae:24:f1:fb:2b:a4:a0:fd:02:
58:59:fa:8b:c5:e0:9d:32:92:69:31:f8:0a:d3:b5:09:7f:44:
f5:0f:7c:ee:d4:fb:00:10:7b:1e:b6:2e:58:b8:72:72:0c:d0:
b1:38:21:83:79:1c:52:fa:b0:50:13:e8:65:85:0c:74:06:d0:
ed:3f:d5:9f:e0:62:45:4b:34:9e:3c:2b:52:94:bf:98:04:d4:
06:88:d9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:10 2025 by rpki-client