Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier: vFeDKGSWcMv2wphDIQvvibrQAtdc7WQ2fqfvVpVFp/8=
Subject key identifier: 4B:21:FA:A3:11:CC:86:81:AF:D1:BE:49:91:CB:33:48:24:F3:8F:5C
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial: 01967DFCA2DC3DE5C0EA3327DD365EAA392D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number: 0C0A
Signing time: Mon 28 Apr 2025 20:00:30 +0000
Manifest this update: Mon 28 Apr 2025 20:00:30 +0000
Manifest next update: Tue 29 Apr 2025 20:00:30 +0000
Files and hashes: 1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: ADSkXLBlZkVenyuaw2448fUepa+54BApRKhusj/mqF0=)
2: oQ6iu5R4Fpm0Yjxuw1qLXncI4SY.roa (hash: H/akZoh4Ps4IHkjkrhcdXyi2oc0+hPspNWAd57bgzLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:a2:dc:3d:e5:c0:ea:33:27:dd:36:5e:aa:39:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Validity
Not Before: Apr 28 20:00:30 2025 GMT
Not After : Apr 29 20:00:30 2025 GMT
Subject: CN=4b21faa311cc8681afd1be4991cb334824f38f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:51:4a:5c:f7:0c:ab:72:db:dd:12:a5:12:
bd:bc:0b:32:78:1e:fc:bd:54:66:c9:70:55:23:29:
88:7c:1c:5f:59:cd:38:f4:2b:e0:4a:d2:ea:b0:28:
82:06:8f:f9:88:b7:df:b1:c2:92:b4:7a:9d:ce:8c:
e4:28:50:88:73:56:dd:85:20:bb:a3:c3:e0:40:0c:
ee:e7:c7:64:28:85:66:f9:05:1f:ea:29:b8:bd:fa:
2b:95:e8:f1:b5:88:8f:59:8a:8a:63:ee:35:0c:30:
cb:85:1c:e5:00:3d:1a:bc:ad:0f:f4:9e:3a:8b:23:
5d:da:5b:a9:fc:4b:68:65:80:7e:ec:f1:f0:3d:db:
2f:57:85:a2:b0:a0:d0:c6:8a:10:ca:55:9c:37:69:
e0:34:dd:af:2c:74:c6:5b:b9:37:eb:32:39:96:46:
df:2a:55:32:3b:73:73:bd:43:32:3d:56:0b:49:ea:
72:18:b9:5b:1c:6a:43:b7:03:c2:30:a0:f6:2a:92:
43:9a:85:19:62:4f:08:eb:87:0a:9e:43:ca:06:5b:
62:5e:51:67:ec:01:5b:52:9d:d0:bc:ed:c8:49:ad:
4c:0a:a0:d9:97:31:1d:50:90:67:a4:04:66:f4:db:
56:f6:80:90:a0:1a:11:81:70:26:49:ce:1c:27:4f:
5c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:21:FA:A3:11:CC:86:81:AF:D1:BE:49:91:CB:33:48:24:F3:8F:5C
X509v3 Authority Key Identifier:
keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a2:b3:f3:03:25:28:e3:53:8f:c4:48:80:09:86:8c:c2:dd:
6c:ff:7f:29:d7:f8:b8:26:bd:29:64:72:a9:05:e5:a6:1b:99:
9f:df:16:e2:aa:17:2a:4e:13:ef:9a:60:0b:0a:09:d1:3d:38:
a6:e1:21:7d:fe:6e:16:cc:f3:76:01:44:3e:a7:7f:de:c3:c3:
ed:43:ac:33:58:e3:da:9e:63:48:eb:94:18:6a:33:88:0d:81:
29:88:a8:e6:49:17:0e:8a:52:e4:1a:83:ad:c1:bd:c1:fe:9c:
89:45:67:72:1f:58:ea:44:ed:33:a5:1b:1c:6a:4d:13:e2:1a:
1e:6e:02:82:b1:33:c6:ac:69:eb:b7:3c:37:dc:34:58:ee:88:
30:5f:24:76:62:48:15:88:0d:2f:c9:ed:b8:58:eb:48:f0:19:
93:ba:cf:2e:4c:14:d7:00:5d:fc:04:9f:88:70:5d:1b:c4:a1:
36:28:94:ca:08:75:ef:b8:db:a6:40:31:4b:69:32:0f:97:26:
38:42:d1:dd:11:5a:1a:46:39:85:73:1b:f4:bf:84:bc:6f:8a:
0b:4b:70:21:53:aa:50:18:a0:ee:c7:42:bb:36:48:47:1e:25:
57:df:89:91:9f:d5:8d:e6:16:6c:af:51:3f:f2:8e:fd:25:b5:
70:e1:f4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:01:19 2025 by rpki-client