Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier: PBnNdGJ3n6wjtOGiIiosrvFvxUCMG2y4kVvjjQPpTLQ=
Subject key identifier: 4F:34:DD:60:A0:80:A8:AF:BD:C3:C2:AD:8C:6C:EF:B1:4D:21:88:FD
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial: 01968CCB34245A6D261AADF8E02CDF14B2D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number: 0F2B
Signing time: Thu 01 May 2025 17:00:49 +0000
Manifest this update: Thu 01 May 2025 17:00:49 +0000
Manifest next update: Fri 02 May 2025 17:00:49 +0000
Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: 0VHiWBLZq6JTtJUE4nDsjAJpL0WE35t3BNM0l0/WauQ=)
2: l7jY8kwE-M6c_UhPj-FUehU05zw.roa (hash: pztDbxlKVmEaYKFDmjzGRQ+iSzJwJzlFrSZ9erwEw6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:cb:34:24:5a:6d:26:1a:ad:f8:e0:2c:df:14:b2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Validity
Not Before: May 1 17:00:49 2025 GMT
Not After : May 2 17:00:49 2025 GMT
Subject: CN=4f34dd60a080a8afbdc3c2ad8c6cefb14d2188fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:82:6d:72:e0:1c:ce:66:3c:dd:86:10:21:
cd:b8:46:d1:47:93:fe:06:10:f2:e2:1e:98:9d:af:
d9:31:22:72:0f:2a:34:34:c6:7a:9c:86:da:36:22:
fc:39:7d:7e:2f:65:fe:88:ae:18:82:51:a5:41:31:
64:62:b7:70:86:a3:9a:ec:ff:db:5b:d7:f8:4c:fd:
dd:19:d9:be:0a:9e:fa:b2:d6:e1:90:9e:4f:6c:01:
99:bf:88:44:0d:4c:2f:4f:24:40:53:b5:2f:bb:21:
8a:9c:ee:f3:c8:ca:c2:6f:94:59:c9:79:8b:90:70:
33:d2:fe:63:7f:1d:14:e2:55:5f:70:11:88:0e:77:
68:94:81:ce:71:a1:b9:68:df:3b:d6:84:c8:a5:0d:
18:d5:44:e3:1b:33:b6:5f:6e:2f:a3:80:fe:cd:73:
e8:3f:a9:b4:ba:f8:a5:e3:68:0c:0d:6d:bf:cf:33:
a4:b4:40:33:c8:a0:3b:6e:ed:80:a3:e4:40:77:6b:
55:9a:15:8c:79:ef:99:03:79:0d:08:27:8e:07:7c:
ad:aa:53:c6:f4:1d:c1:f7:22:cf:76:54:49:6d:81:
9e:ee:eb:d0:46:18:7e:89:a0:cc:80:a9:0a:d7:08:
a0:ab:bd:64:44:eb:3f:00:07:a5:45:48:39:e9:63:
fb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:34:DD:60:A0:80:A8:AF:BD:C3:C2:AD:8C:6C:EF:B1:4D:21:88:FD
X509v3 Authority Key Identifier:
keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:36:62:ed:0d:c1:e4:4e:c6:41:80:8c:c5:97:a9:c1:af:9d:
15:73:f1:1a:ca:78:c9:9d:86:4d:d1:1d:8b:0e:59:58:42:ad:
ec:ec:a4:c4:25:e2:c7:22:7c:cc:57:6c:28:77:d7:0f:b5:f7:
8b:4b:9e:a1:5e:d0:0c:ec:f1:0a:0c:6d:d9:26:39:e4:dc:71:
00:85:af:5d:7a:9a:a9:34:82:75:b5:b1:16:af:0d:23:74:5f:
fc:f6:bf:88:95:1f:d0:a0:18:b8:67:6e:c3:44:f6:66:a4:22:
53:b6:00:b4:44:56:b4:16:07:48:00:98:b5:fe:c0:98:3d:b3:
a2:45:05:16:e7:c6:e6:01:08:c6:f3:c4:02:c2:be:45:91:d8:
20:4c:d5:68:b4:e2:a9:54:ad:d6:df:4f:7c:1f:31:40:73:b2:
88:1f:41:af:f6:df:97:ec:38:88:24:54:3e:06:5b:24:47:cc:
46:54:ac:63:d8:ca:f1:e8:a8:2e:1e:e1:c7:65:03:8a:90:f9:
21:61:51:ad:86:79:e0:db:b2:54:dc:0f:17:a1:5c:73:c1:bb:
f2:a4:b2:2e:68:61:80:ef:94:9e:00:6a:13:13:5b:78:71:c9:
a8:75:7a:95:20:8c:9b:f5:17:7c:5b:88:bf:92:19:94:78:56:
7a:6f:6a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:52:30 2025 by rpki-client