Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
File: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft (raw, json)
Hash identifier: XksnwBfnzVd6sY+/PpW7J4FxLUxcSvzZbMyA+p9OutQ=
Subject key identifier: 92:8A:25:6F:80:7C:A9:35:4D:78:E8:2B:F6:95:41:31:78:C1:FD:2A
Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
Certificate issuer: /CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Certificate serial: 01967D213BAA031E4B14725B00174952E131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 16:00:51 +0000
Manifest this update: Mon 28 Apr 2025 16:00:51 +0000
Manifest next update: Tue 29 Apr 2025 16:00:51 +0000
Files and hashes: 1: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl (hash: Q8xk7kgomjuspEWB7xtDW6t+zMiosHMhNC3AxrCQ1KI=)
2: eGF4PY_wgfKdtXUANezmT92NTGM.roa (hash: 05Pk1BDJWHJV0SJRPVmkmFIh7w5FFlCRro3lX7bPWNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:21:3b:aa:03:1e:4b:14:72:5b:00:17:49:52:e1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Validity
Not Before: Apr 28 16:00:51 2025 GMT
Not After : Apr 29 16:00:51 2025 GMT
Subject: CN=928a256f807ca9354d78e82bf695413178c1fd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:60:0f:de:f1:da:b6:4b:04:54:db:4a:7d:
08:93:9e:36:c3:66:22:e3:70:4e:f1:d9:e5:33:97:
cb:30:62:2e:dc:41:64:f1:8d:e3:6e:47:82:70:c4:
24:18:20:e6:c9:22:7b:2b:78:2e:5c:ce:b8:8a:54:
52:a5:6d:19:56:a7:9b:04:3c:77:f0:a2:e0:2c:c5:
75:cf:45:02:69:5b:c9:a9:e5:b4:c6:a9:87:1f:97:
f0:25:65:66:43:28:ff:c9:2e:78:ef:4d:63:83:8e:
46:00:e2:ed:0c:1a:f2:57:d3:c3:b8:53:c9:bf:9b:
e4:0d:7c:27:61:03:97:b5:4f:ca:51:d8:20:76:60:
43:ae:35:2d:47:c6:3d:50:08:5b:a4:85:c3:d5:fc:
db:f0:f4:61:84:ee:92:a8:c1:09:e6:fd:f9:32:a0:
19:28:2a:0f:58:5b:f7:3f:b0:57:cf:67:16:4e:3d:
c4:15:b6:ee:91:a2:0a:90:c4:fd:d1:82:67:5c:cc:
ec:2d:7f:c3:54:3c:4c:4d:f2:e1:28:e4:25:4e:da:
eb:b9:d3:4b:6e:14:cb:ef:f2:e8:55:0b:b9:76:1d:
c7:0a:b7:00:9e:db:dd:91:75:c0:5c:b7:be:01:39:
54:1d:5a:36:2f:54:20:f9:58:a3:fd:fc:b4:1b:56:
4c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8A:25:6F:80:7C:A9:35:4D:78:E8:2B:F6:95:41:31:78:C1:FD:2A
X509v3 Authority Key Identifier:
keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:93:bb:e8:1c:44:0b:d1:dc:38:0b:cc:e1:fe:72:72:dc:0f:
bb:4a:b9:e1:d9:52:e4:b7:08:97:e3:58:ca:99:69:34:e6:b8:
7f:40:f9:78:22:c8:ab:02:88:10:75:01:fb:56:46:71:c7:77:
16:1b:14:66:9c:7d:db:2a:8c:22:dd:02:df:e3:ba:58:fc:0c:
c6:16:93:d9:4f:ba:08:78:ae:a7:5a:e0:b4:ed:06:55:5e:0e:
a2:cc:05:15:c3:94:55:32:2d:cf:64:d4:56:bb:17:53:f9:f9:
d0:e9:29:bd:ed:2a:87:42:f8:30:08:31:59:d4:27:49:96:5a:
b9:85:0e:ec:02:73:22:f2:e7:e2:b3:07:c7:86:12:35:f6:7e:
8c:d6:1d:f3:80:33:cd:25:24:fd:bf:85:ac:d9:0d:1d:09:09:
15:45:c5:c1:58:50:02:ee:a8:59:51:46:77:c3:2a:14:ca:4f:
28:ea:dc:85:fd:4b:c3:fd:a1:82:d2:64:e7:3b:96:34:63:e8:
32:41:fd:2e:1c:4e:7f:78:fb:6e:f8:74:fb:b4:db:88:de:19:
0f:16:54:6f:80:cf:61:e2:ae:80:6d:d4:88:67:01:c4:fd:d0:
7b:ee:a3:75:5b:1d:94:d6:2a:b2:f7:3e:6e:61:d1:1f:f1:ac:
de:8d:cb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:49 2025 by rpki-client