Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier: 9mo10OwO4+lD5+meIjEt23M51zvkUB87TlZ/8sz/Cys=
Subject key identifier: 03:85:23:FC:02:D6:19:A3:9A:DA:6A:59:BB:E5:1C:D1:52:1F:00:60
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 01967EA188BAB2B0CF6A556531CB723142FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number: 0980
Signing time: Mon 28 Apr 2025 23:00:37 +0000
Manifest this update: Mon 28 Apr 2025 23:00:37 +0000
Manifest next update: Tue 29 Apr 2025 23:00:37 +0000
Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: GnGH22syjz3zm4LcpoAViVt+Y8ufy2+EHN6ETsiNBDY=)
2: xPUzYHJ2p6sBXOjKUulEgLqlcBc.roa (hash: ygZqht59F65fKs2o1JfQZNtwvL5DudVBMCJ5Le5stTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:88:ba:b2:b0:cf:6a:55:65:31:cb:72:31:42:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: Apr 28 23:00:37 2025 GMT
Not After : Apr 29 23:00:37 2025 GMT
Subject: CN=038523fc02d619a39ada6a59bbe51cd1521f0060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:5d:25:26:07:8f:a1:8e:77:0a:5b:3e:21:
7b:c0:e3:99:00:f5:58:d3:55:38:f2:d6:b6:2b:91:
40:33:7f:5c:3c:32:57:ed:92:a2:07:52:7b:e1:50:
ad:5d:5c:a1:b6:61:fc:b5:65:42:7c:ef:1a:55:a7:
ef:ee:e8:ed:86:04:06:23:88:94:1e:72:aa:84:9d:
bb:33:22:6d:44:bb:5d:31:3b:3f:fe:f1:00:a3:08:
2c:fa:ba:9e:16:83:00:1a:b4:40:b5:dc:ce:47:4f:
54:98:c1:a2:34:ea:e1:8a:77:30:de:41:cd:3c:8c:
4b:63:a9:64:a5:66:5f:5c:50:b6:d0:46:82:cb:49:
7d:9e:3b:10:54:0b:e2:6a:4a:19:e2:f5:70:8f:65:
11:5f:ce:c8:34:9e:20:78:e5:84:57:2e:67:15:17:
3b:f0:28:db:0d:64:09:9c:07:9c:d9:47:9a:33:29:
ec:ab:42:6e:e6:13:d8:24:2d:b8:67:9c:9d:ee:29:
5b:b8:aa:4d:37:00:83:e1:9f:1d:fa:5c:cf:86:60:
56:e7:fa:1d:94:ed:da:ad:c8:68:27:c7:1b:28:2a:
4a:3d:42:1c:d2:9f:7c:50:24:c0:ca:0f:66:7e:51:
97:14:a0:12:d1:a4:27:96:79:38:12:f3:d0:ca:7b:
50:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:85:23:FC:02:D6:19:A3:9A:DA:6A:59:BB:E5:1C:D1:52:1F:00:60
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ba:16:6d:66:a1:a3:71:b8:d9:69:a3:b3:92:26:1e:9e:d4:
62:e6:db:2f:41:86:c3:ac:cf:f0:8c:92:bc:62:9b:f6:51:49:
48:24:a3:fc:99:d8:f5:90:a9:8b:5c:d6:19:c2:81:aa:e4:5a:
39:47:bc:16:ef:a6:8d:63:c5:85:fe:90:0f:1f:bc:85:65:d1:
e8:92:f3:09:7d:79:9a:da:72:03:df:ec:3b:46:c3:5e:15:94:
ab:2b:b2:37:9b:83:d6:29:ce:df:d7:26:da:5f:e2:27:ba:b5:
de:9f:c4:c2:6d:9d:97:d5:65:0a:ff:f2:3f:98:57:39:ee:3b:
33:80:6a:19:51:d6:3b:95:28:dd:8f:df:53:dc:7b:e3:3a:7b:
7e:96:d4:03:d2:ac:f6:93:0c:74:a9:9e:21:5b:bf:00:d6:d8:
ea:d0:fc:b3:20:75:b1:d7:61:09:85:3e:0e:ca:3d:30:b7:3d:
ff:88:ff:62:30:41:38:56:87:c3:99:d7:1c:d5:02:a3:42:2d:
46:0c:73:86:96:e4:32:80:8a:5e:47:74:03:50:bc:a8:05:a1:
49:c6:67:ec:8d:b3:3d:31:3b:75:4a:e1:4a:9e:17:d3:15:31:
d6:c1:b2:76:68:95:88:ee:92:29:b6:9d:52:4d:c6:15:16:e5:
78:80:37:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:34:37 2025 by rpki-client