Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: pjvSBq9eCCoJIBLjPPxzE3We8n24Xf+sfVwPA9hhcpI=
Subject key identifier: 6F:22:59:77:C2:5B:C6:D4:44:B0:49:A7:56:BB:CE:8A:AC:D3:11:CF
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 019673B02D28E4F1CA4E6D5DB910FAFBDECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 098D
Signing time: Sat 26 Apr 2025 20:00:47 +0000
Manifest this update: Sat 26 Apr 2025 20:00:47 +0000
Manifest next update: Sun 27 Apr 2025 20:00:47 +0000
Files and hashes: 1: 2Utz6EvNmTYHORm-GQMKm69p8WI.roa (hash: j7FVQ06WFgxEJj//G5Co8Dizh+fdctkzSaSmR5/2mVM=)
2: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: ZxWg5RplEgaLRb2Q/Jax7+mMRXTMBaDeujVkPuM8zMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:2d:28:e4:f1:ca:4e:6d:5d:b9:10:fa:fb:de:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: Apr 26 20:00:47 2025 GMT
Not After : Apr 27 20:00:47 2025 GMT
Subject: CN=6f225977c25bc6d444b049a756bbce8aacd311cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:30:18:95:02:e1:ef:9c:83:b2:04:ee:45:94:
43:28:39:a8:74:7e:df:d5:6c:3c:2e:94:25:2a:d8:
92:e5:72:92:e3:8a:02:a4:13:ab:7c:dc:2e:51:f3:
43:78:b9:38:02:e5:23:ec:f0:98:20:66:d4:4f:7a:
71:57:48:bc:85:fc:ca:fd:48:7e:1b:09:b5:0d:3b:
b0:ac:65:23:74:82:04:25:2f:6c:b9:1c:b9:16:33:
9a:57:68:61:72:3c:ce:14:33:81:e6:23:9c:23:40:
fd:e5:02:4b:7a:b7:20:a2:92:1c:e3:a3:10:85:f1:
8d:ec:97:e4:72:4d:6b:77:56:c2:ea:d9:31:3a:fe:
91:85:6e:a4:14:6a:e6:98:05:0f:aa:af:1a:9e:4e:
f3:c7:ef:a5:df:81:02:51:d3:3e:dc:33:1f:a0:45:
25:f8:2f:8e:b4:77:5d:9f:6d:bb:22:c5:63:ba:f4:
28:88:3b:94:40:9e:ac:d7:73:9f:49:dd:68:26:8f:
35:ea:8c:78:7b:7c:77:23:78:9d:85:e0:13:41:11:
94:7e:2b:03:dc:9b:14:79:b7:dd:52:26:64:41:d5:
d6:7f:25:5f:94:8d:06:90:c1:53:ac:df:93:ee:14:
99:90:77:fc:9d:fc:44:1a:64:74:2e:33:0e:af:8f:
0f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:22:59:77:C2:5B:C6:D4:44:B0:49:A7:56:BB:CE:8A:AC:D3:11:CF
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f3:12:8f:60:76:1c:95:23:6d:32:7a:a1:23:10:3b:2e:82:
a3:bf:af:96:9f:82:d5:e9:87:70:55:ff:cf:f3:87:0c:88:21:
9d:36:38:a3:4b:88:28:20:b7:af:10:86:b9:37:c0:b8:9a:a1:
af:10:1b:a8:fc:73:6b:82:a7:13:0e:28:b2:d0:ba:5b:35:04:
14:17:18:2c:0a:d2:32:7d:16:50:f1:6c:57:a9:c0:a9:cb:11:
64:23:96:15:83:73:bf:12:34:7e:27:6f:20:37:d9:05:16:c7:
db:27:12:b4:57:a6:8a:8d:31:b1:46:0a:05:bd:87:18:00:c9:
db:c1:21:17:47:71:cd:4a:30:3a:48:d5:ea:87:36:f6:ca:d3:
8c:dd:43:96:6d:00:3b:ce:c7:93:68:00:8b:67:3a:52:b5:24:
10:01:45:36:41:8c:c7:6a:e4:8a:ee:e1:3a:bd:89:f1:67:f5:
37:68:df:72:60:28:b5:ba:b4:1e:5f:61:ab:5e:9d:2c:f2:b7:
45:8f:2c:c3:c3:71:f0:25:2c:ef:39:c5:78:30:40:95:48:00:
1f:37:bf:fb:75:ba:d6:14:6f:55:e1:aa:49:58:be:c5:a9:ac:
0f:fb:89:e2:a8:59:f5:5c:df:45:d1:83:d5:4d:5d:38:7a:1f:
ab:4d:6a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:27 2025 by rpki-client