Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
File: 8IoI64-nvuajGD4y3lGi88zUrkc.mft (raw, json)
Hash identifier: OMk4ZYKJv4SNJg1FY4zUKNFZpnuQuEhfDbmkS1rLQA8=
Subject key identifier: 58:84:F8:55:42:CE:84:C5:DC:5D:C5:60:6C:7D:C1:76:2C:FA:7C:C3
Authority key identifier: F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
Certificate issuer: /CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Certificate serial: 01968058FE181D8353E2AA97E55A3C466D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
Manifest number: 0720
Signing time: Tue 29 Apr 2025 07:00:37 +0000
Manifest this update: Tue 29 Apr 2025 07:00:37 +0000
Manifest next update: Wed 30 Apr 2025 07:00:37 +0000
Files and hashes: 1: 8IoI64-nvuajGD4y3lGi88zUrkc.crl (hash: AzFKyqa+Gkl/AUAICX4dTqhmmMfeFxjniqHrTZ7D8IQ=)
2: cTkzelFg_-EfS7l9udnxkMrP0Fs.roa (hash: UdEI1k400GkRcUTewdlzP2o8ezwAuPLRkhdPLsyI4ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:fe:18:1d:83:53:e2:aa:97:e5:5a:3c:46:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Validity
Not Before: Apr 29 07:00:37 2025 GMT
Not After : Apr 30 07:00:37 2025 GMT
Subject: CN=5884f85542ce84c5dc5dc5606c7dc1762cfa7cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ea:9e:63:fd:09:2c:b1:aa:22:8c:cb:ec:f1:
23:89:0b:d8:f3:7e:cb:1a:66:18:99:8b:d4:38:1e:
e0:ea:09:68:67:13:bd:11:7f:b7:98:ee:94:ba:ba:
56:e5:44:ff:56:64:17:67:04:4a:5a:b9:57:9e:47:
26:92:bc:96:ed:51:d4:a4:90:03:2a:5f:28:45:22:
24:29:c6:5d:b1:ea:32:d0:83:7f:d0:a7:d6:50:99:
28:64:9e:9c:7f:e3:99:7f:55:9f:43:63:bc:ce:6a:
91:09:91:d3:c5:f9:cb:2d:b7:c8:ae:52:ec:61:0e:
8e:47:6b:e7:35:b0:f1:ad:4b:ff:6c:b5:3f:90:66:
a4:be:d7:79:99:dc:4b:67:34:8f:fe:9a:ef:89:f8:
8a:8b:66:f8:90:f7:b3:e2:06:83:8c:98:ec:dd:b4:
3f:cf:eb:85:c0:be:6f:d7:c9:58:1c:bf:b1:a3:24:
e4:9e:77:da:10:27:94:2a:6a:ba:89:86:a3:99:1a:
74:dc:51:85:be:ad:46:c7:9d:e2:6d:1c:f8:0d:7c:
80:8c:26:6a:c7:af:f6:77:cc:e1:7c:ae:b6:97:57:
c9:09:9c:19:f8:e0:ed:89:94:59:14:a2:22:2e:10:
1a:47:a3:a4:5b:de:f7:81:f4:50:e4:17:c2:7f:74:
3c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:84:F8:55:42:CE:84:C5:DC:5D:C5:60:6C:7D:C1:76:2C:FA:7C:C3
X509v3 Authority Key Identifier:
keyid:F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:89:67:41:58:90:09:d9:62:d4:e1:8c:d8:5b:33:04:26:3e:
b6:2a:77:21:ed:81:89:67:c7:0a:65:a1:eb:ad:8d:50:46:95:
ba:e2:19:37:29:a3:ee:c1:83:15:11:b7:fe:d9:f4:86:35:37:
07:6a:7d:0c:2f:d2:17:83:5d:17:82:b7:f7:00:97:15:50:27:
0c:5c:fd:fd:cc:2b:4a:e0:2f:eb:cf:ed:30:3e:f8:25:d0:9b:
1a:74:52:db:a3:1c:4a:1c:84:5a:1d:f2:58:5b:44:d1:e3:1b:
ed:8b:a5:ab:c4:f3:14:8d:18:1f:f9:37:0d:08:a1:57:fe:f3:
ee:28:ae:76:c8:e4:8a:bf:6c:63:97:b7:9f:72:69:8a:b1:1f:
02:62:85:40:ff:13:62:54:b1:34:1a:12:ab:1b:12:f0:44:7e:
0a:5f:47:04:e4:c6:91:6d:00:fd:4b:e4:2b:15:3f:b6:48:f3:
17:b8:7b:97:1a:47:f0:a6:89:64:fc:c1:9f:15:7f:b8:80:4f:
52:ce:b0:1f:b6:fe:2d:24:d5:40:c7:10:78:a5:68:f4:66:27:
03:9c:06:83:f7:bf:15:79:55:21:5c:e6:54:0b:3e:98:ac:1e:
b5:8c:fa:87:c3:66:52:a8:3b:f0:03:b3:e4:81:37:5a:97:b3:
99:81:37:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:21:38 2025 by rpki-client