Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
File: dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft (raw, json)
Hash identifier: AzOd+vNfauYBvp8r/y0Squ8hii4g6AnjZr6+fobSFdE=
Subject key identifier: AC:61:EC:B7:97:2F:2B:47:9F:18:83:4B:D5:FC:D9:DE:4E:F7:01:70
Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
Certificate issuer: /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Certificate serial: 01967E3382F900AFE73142E901611966AC95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
Manifest number: 0809
Signing time: Mon 28 Apr 2025 21:00:27 +0000
Manifest this update: Mon 28 Apr 2025 21:00:27 +0000
Manifest next update: Tue 29 Apr 2025 21:00:27 +0000
Files and hashes: 1: dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl (hash: xhAtFu/NSiBZqI6YfOwR3mQy2KVDkcV81p/a/wcXEt0=)
2: dqNNte5TVfV2tDh9E3yBjcN5L9k.roa (hash: ZCWWVAbkz+YG+QqwhLTaaD7cWJwvtiRAyhgAtKdQ9Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:82:f9:00:af:e7:31:42:e9:01:61:19:66:ac:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Validity
Not Before: Apr 28 21:00:27 2025 GMT
Not After : Apr 29 21:00:27 2025 GMT
Subject: CN=ac61ecb7972f2b479f18834bd5fcd9de4ef70170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:f2:6d:0a:bd:3c:bd:f7:01:80:f6:a6:f4:
c9:9c:d2:3a:dd:c0:71:e8:8e:3e:09:94:0d:d6:50:
8b:af:2b:db:80:e1:4e:85:a4:5f:0f:c8:91:47:1f:
db:72:bb:b9:27:bb:d0:bf:e7:0a:2a:e2:ac:29:f4:
ea:58:a3:03:9a:de:70:43:9c:71:f6:f0:fa:46:5c:
c2:49:20:a7:10:63:db:3d:cf:df:7c:a6:2a:f0:27:
36:b0:9f:a8:30:54:5e:1f:11:a0:74:ae:c7:94:ac:
10:b2:ac:c2:91:13:c6:6c:d0:f7:03:fb:e2:13:b7:
85:ca:7a:44:e0:68:f4:2b:c7:d7:35:ff:aa:11:11:
91:77:50:ad:88:1f:17:bc:d8:68:75:8d:33:28:58:
00:28:b0:1f:27:a0:41:80:ea:26:4e:e6:62:5f:d9:
1e:d4:79:82:dc:d6:52:48:bb:85:38:5b:c3:fe:c4:
e9:a1:82:a4:13:42:16:c4:96:52:83:f2:45:51:14:
4c:52:8b:eb:7a:a9:e3:66:15:34:2e:20:59:80:8a:
40:03:a2:b4:7c:c6:71:17:fe:fd:62:4e:5b:37:94:
c2:66:cc:0a:11:16:c4:c8:bd:52:16:0b:79:aa:b7:
84:ce:23:f9:51:b5:09:a3:57:b6:50:09:63:ea:2e:
e0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:61:EC:B7:97:2F:2B:47:9F:18:83:4B:D5:FC:D9:DE:4E:F7:01:70
X509v3 Authority Key Identifier:
keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2d:57:ee:14:4e:13:3c:87:6d:34:45:e5:3e:ec:bf:47:45:
92:1c:75:19:b3:8a:57:f7:a8:da:d9:6a:21:ce:a1:b2:0e:51:
e1:04:cc:59:b6:05:78:2a:7a:09:4c:55:30:1a:a3:8b:2b:c7:
4b:94:65:42:d5:0e:01:3a:fa:ba:86:61:58:9f:95:47:06:58:
a6:f9:eb:54:56:27:de:f5:9e:4f:93:28:0f:36:d0:2f:1c:02:
79:b0:3c:af:a2:aa:3d:7e:4a:3f:99:17:4f:6c:f4:b7:f7:4c:
cc:3c:73:89:f0:f2:6f:84:31:57:f2:92:42:56:b7:ec:da:86:
22:81:32:94:56:ed:2d:0e:31:33:a3:7b:90:55:1d:f6:4d:36:
c0:e6:ad:10:c9:1a:ea:41:98:db:dc:7e:05:58:4e:67:51:ba:
e6:22:df:7c:ea:6e:c5:e5:77:74:d2:9a:c8:93:ee:78:6b:1f:
cd:05:ba:41:60:c5:89:04:2c:23:b8:f1:2e:6c:bc:ab:ff:24:
c0:6e:a6:0b:80:51:82:98:3f:70:8c:68:9b:2a:d7:b1:2a:13:
fc:8c:e2:1b:76:07:6c:4b:b0:12:f0:04:99:fa:c3:a0:73:6a:
5e:3b:06:a2:7a:66:95:01:04:4d:29:ed:1f:11:51:5a:99:45:
d4:d2:8f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:42:03 2025 by rpki-client