Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
File: _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json)
Hash identifier: cFoDuuyxFCuz3tvq1UDKHCY7lRxBpIsiTVeXzeYQpHk=
Subject key identifier: 10:84:53:08:19:3B:E2:07:ED:CF:40:FD:1F:91:4F:0B:87:3D:05:37
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Certificate issuer: /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial: 01967A1FA62F346956070C81F20C2E47324E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 02:00:16 +0000
Manifest this update: Mon 28 Apr 2025 02:00:16 +0000
Manifest next update: Tue 29 Apr 2025 02:00:16 +0000
Files and hashes: 1: 2OXGBjO85npyAkFnRouh_UBk1Hs.roa (hash: HbPy+YRVvuPyiRQMlka5FfjRj4FCj/zQuaXQr9znzdU=)
2: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: sqNsyMW2F7YvoFhH3tk7uVpSLDyGv0SzyEjoBtj5he0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:a6:2f:34:69:56:07:0c:81:f2:0c:2e:47:32:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
Validity
Not Before: Apr 28 02:00:16 2025 GMT
Not After : Apr 29 02:00:16 2025 GMT
Subject: CN=10845308193be207edcf40fd1f914f0b873d0537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:87:23:3c:32:1e:3d:dd:b9:28:65:7b:24:
a1:0e:cd:8f:5c:ee:01:d0:98:90:64:e7:c6:48:09:
5d:b2:a6:3c:51:2f:17:db:3d:47:db:9c:eb:91:8d:
48:73:a3:9f:a2:7c:9b:97:50:8e:48:91:5b:32:64:
7f:7d:1d:1f:6d:ce:23:97:ba:b0:cf:12:4d:b8:40:
6c:7b:d1:75:2a:b1:db:e9:a3:1f:1f:2a:9f:7a:38:
c3:7b:7e:50:68:6f:06:17:6a:f8:38:c3:ae:98:ea:
e3:56:49:8e:b6:b4:9c:5d:fc:b1:bd:39:a7:ab:79:
cd:dd:25:19:41:12:7e:55:88:66:28:f7:d5:40:5d:
31:f6:72:35:1d:d4:02:96:3b:a6:9c:0d:79:6e:b5:
a1:c8:d7:75:f1:28:59:74:f8:0c:1f:4a:1a:3a:7c:
24:97:a0:59:b2:9b:67:e9:0f:cd:11:cf:ad:37:59:
ab:ae:05:59:e0:c2:50:ed:ff:d3:6e:94:ac:46:37:
c2:13:12:44:ea:7f:0c:88:84:90:35:15:cf:de:60:
55:78:71:d3:d7:bf:bd:59:53:da:c7:54:79:93:52:
a3:ba:50:97:63:c6:4a:d0:1e:11:b6:23:f7:8e:74:
7f:c4:17:00:37:a4:50:78:8d:df:9d:40:eb:cc:f1:
8e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:84:53:08:19:3B:E2:07:ED:CF:40:FD:1F:91:4F:0B:87:3D:05:37
X509v3 Authority Key Identifier:
keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:93:54:9a:18:80:38:81:d3:0c:ea:5a:f1:35:da:8a:31:3e:
c6:4c:ab:d3:b6:de:34:9f:c6:dd:4c:50:2b:c2:3b:b7:dc:1f:
56:21:98:e2:b8:d6:fe:1a:79:a7:da:9f:cf:cb:ee:b4:e7:61:
60:45:01:f1:9c:53:94:3f:b9:c9:a9:c4:dd:dd:73:3e:ba:50:
fe:90:4d:00:33:09:ab:3e:ec:4b:75:07:c3:3c:d4:aa:22:bf:
37:e2:6b:19:9a:ad:46:5f:25:85:59:92:60:3c:2a:64:7b:c5:
c8:e9:c1:f5:7c:12:0a:ce:8b:83:6f:80:a6:14:c8:29:d1:1f:
1a:a6:14:1f:3b:cd:dd:d4:01:44:60:e3:44:a0:c8:a9:62:5c:
e5:01:7a:c7:ae:7e:1e:46:07:f7:79:cf:27:33:55:be:2c:68:
0f:e3:bf:82:87:21:92:28:40:0d:6f:a4:c4:f5:ce:f2:39:a2:
da:db:af:e8:91:01:73:a9:75:b9:c3:e5:44:09:1b:38:d9:96:
74:63:07:2c:86:72:ce:0b:25:d5:78:52:31:78:0d:d1:1d:57:
93:2c:fc:e9:fd:08:a1:2f:8a:5f:14:a7:6e:be:fd:4f:35:ee:
5c:fb:3d:9c:78:78:fe:93:54:82:e5:27:d0:f5:2a:b7:76:f0:
f7:e7:24:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:30:21 2025 by rpki-client