Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
File: 8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json)
Hash identifier: psrioagnesQ1hoj3bdiIIGPVfKvAei9nLtXU/wi+3Yw=
Subject key identifier: 21:6F:D9:2C:F9:63:D7:F6:B8:FE:FE:54:88:F4:65:DF:3F:0C:21:DE
Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
Certificate issuer: /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Certificate serial: 0196816BC897B19861B2CB0522AD3722BF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
Manifest number: 0316
Signing time: Tue 29 Apr 2025 12:00:46 +0000
Manifest this update: Tue 29 Apr 2025 12:00:46 +0000
Manifest next update: Wed 30 Apr 2025 12:00:46 +0000
Files and hashes: 1: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: RUkF1qPYFKTQtvTOHgnfrVA2uM98JCrXtek5SuazwKU=)
2: wN3I7D42_Scvh3kTX6wbZgc3STg.roa (hash: +5WZ8eZml5reiYd5KuhYrJcZjNCC9ofGPFNFq+2Hrx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:c8:97:b1:98:61:b2:cb:05:22:ad:37:22:bf:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Validity
Not Before: Apr 29 12:00:46 2025 GMT
Not After : Apr 30 12:00:46 2025 GMT
Subject: CN=216fd92cf963d7f6b8fefe5488f465df3f0c21de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:6d:34:a6:ca:f2:9c:fa:37:48:0e:b0:7a:
2c:db:3a:8d:22:3c:ec:fd:00:88:cd:06:a9:0e:cc:
e0:f0:fe:f5:11:92:0a:d9:7e:73:28:1a:aa:e2:cd:
65:36:4e:90:16:27:e1:f8:67:d0:14:67:9b:6a:65:
81:e3:c1:74:76:f6:de:8a:10:f3:da:81:22:68:15:
28:f5:5a:0a:c3:a0:4f:88:73:f3:93:12:05:14:e9:
d8:d8:5e:16:b4:20:12:73:d8:48:44:3e:08:37:7a:
79:e1:b6:d6:9e:0e:03:bb:38:b0:01:a4:48:87:e9:
69:37:92:dd:0a:48:19:d3:77:04:b3:55:ef:d2:6d:
b1:7f:98:58:44:7c:bc:02:12:a6:13:0b:d2:5a:81:
df:73:9d:97:cf:0a:37:d6:49:b8:3a:76:26:38:0c:
3a:f1:b8:00:db:23:83:89:18:ec:3e:47:34:32:b5:
b4:c5:34:f3:b8:d7:68:df:f7:d3:81:ff:ba:03:c2:
55:a0:09:b8:87:48:7c:92:85:5c:dc:22:c6:4e:9c:
70:e2:1c:83:10:94:4a:ed:e3:66:bd:b6:0f:ae:e1:
a6:0c:09:02:37:9d:24:16:a6:8a:b5:b0:61:0c:87:
09:b1:c0:fe:6e:88:f2:ab:16:27:25:ee:af:9b:02:
af:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6F:D9:2C:F9:63:D7:F6:B8:FE:FE:54:88:F4:65:DF:3F:0C:21:DE
X509v3 Authority Key Identifier:
keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:00:2b:b9:1f:82:e0:94:4b:4d:f2:77:40:28:99:2e:03:4b:
2b:de:78:25:fe:0d:97:c4:07:3f:36:d7:43:58:8f:6b:fd:72:
c4:48:3c:75:1b:9a:60:2e:68:57:f4:a7:15:42:7f:ee:f6:12:
4c:21:db:6d:28:f0:9b:af:8e:c8:b6:0b:fe:b1:5d:5f:63:f4:
65:e4:3e:2b:8b:a5:22:43:26:be:3e:54:c3:05:6d:ad:cb:18:
6e:34:76:c2:40:3e:cc:39:1c:92:62:1a:3e:9a:12:b9:fc:aa:
f6:38:ed:b7:2a:18:c7:69:5b:37:5e:32:31:b9:38:5a:fb:7e:
00:9a:80:11:d2:6d:89:f2:79:1a:05:be:99:c6:1d:e0:9f:ce:
1b:f7:d9:a7:c1:5b:a0:ac:72:18:76:9f:2c:cd:1a:bd:53:f2:
04:4f:73:99:fe:26:60:1e:24:1c:04:74:15:89:f9:83:15:55:
fd:6e:65:b7:3c:9f:a6:e7:2f:1d:f0:6c:63:d6:36:b7:9b:31:
c9:5c:a1:08:66:77:d6:b8:db:8b:98:7d:e8:94:bb:73:29:19:
11:42:59:3e:2d:f5:d8:85:4a:da:a2:90:c1:09:d5:de:a6:1a:
e9:b3:c0:56:ff:72:ca:65:34:97:12:2d:d8:3c:d1:94:e1:08:
00:e8:14:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:16:48 2025 by rpki-client