Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
File: 1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json)
Hash identifier: w//tPPi0SSmRrG9U7vxCVwyxigTD6P+SA92GE839Bi0=
Subject key identifier: AC:46:A7:1D:21:39:68:5B:F2:42:DF:07:62:9F:AF:06:FE:3E:C1:FB
Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Certificate serial: 01968A383C4AC186A4F87FE928D5CF49644F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
Manifest number: 0958
Signing time: Thu 01 May 2025 05:01:03 +0000
Manifest this update: Thu 01 May 2025 05:01:03 +0000
Manifest next update: Fri 02 May 2025 05:01:03 +0000
Files and hashes: 1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: U6hYYLcYPcVe3XZYodxa2ZatpR8JF8Mm9eFzt35Nqx8=)
2: ZntZKX2L_8Ma0koJ3HPW10lURHI.roa (hash: OJbq7vowsXJwKs2XlYdhIC+ZaJvxn8OPWmKWbar3xew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:38:3c:4a:c1:86:a4:f8:7f:e9:28:d5:cf:49:64:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Validity
Not Before: May 1 05:01:03 2025 GMT
Not After : May 2 05:01:03 2025 GMT
Subject: CN=ac46a71d2139685bf242df07629faf06fe3ec1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:74:e5:6f:f2:94:73:01:65:8c:62:c3:e2:73:
1e:8f:63:c1:d7:eb:bf:05:41:d8:4b:05:f8:d5:3d:
73:be:3f:cc:11:a0:ed:3f:03:94:3a:40:02:4c:e4:
73:7f:36:01:50:cb:59:25:c5:86:14:17:fa:38:c6:
9d:74:5c:6f:17:5b:e3:a2:51:08:59:44:a6:fd:a6:
b7:36:f0:b4:84:90:e9:d0:cf:8b:1a:c8:d0:58:e7:
91:fa:0a:9f:d8:de:82:9f:2d:89:22:1c:f9:ca:96:
ef:aa:c0:57:2f:d0:3b:a0:99:d3:78:b6:cc:de:7a:
f8:10:29:f2:e5:1c:66:b4:cf:bf:fa:d0:88:b0:43:
9e:29:b6:0e:a6:05:ba:0d:37:b5:1c:4a:9c:9e:66:
e8:cf:9b:21:4b:19:4e:8a:d9:00:28:2f:eb:48:02:
8c:25:52:0f:26:96:85:52:71:93:7d:08:1d:e7:fd:
5c:b8:88:27:82:95:4f:b7:1e:26:4c:84:17:e0:e0:
4c:f5:c8:9b:e6:e0:30:80:9b:aa:ab:73:d9:97:04:
cf:fe:0d:83:40:d2:a5:c6:0e:c8:9d:9d:6c:16:9d:
d9:e4:d3:8c:1a:2c:a2:6e:97:e9:08:73:a5:1a:e1:
76:86:8f:c8:f8:14:1d:5c:a8:0f:61:6f:3c:11:2f:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:46:A7:1D:21:39:68:5B:F2:42:DF:07:62:9F:AF:06:FE:3E:C1:FB
X509v3 Authority Key Identifier:
keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f4:b5:95:ad:4a:0d:78:af:ed:68:bb:81:a1:02:d6:43:73:
b1:80:1e:08:d8:d3:22:9e:b0:c1:d8:d0:2a:d8:9a:8d:3f:2a:
9e:91:7e:7c:6b:62:05:6c:02:dc:e5:3a:5a:d9:17:88:8c:fa:
6b:75:c9:6c:ef:4a:d2:26:0e:5f:b2:c4:d5:2f:bf:c8:7a:4b:
20:36:17:35:69:29:df:0d:fb:e2:7a:3a:50:46:0a:8d:32:6c:
62:15:94:17:35:8a:57:eb:5c:64:8f:6d:cf:86:96:c3:24:b8:
9b:2f:85:b4:b4:3a:e4:b7:e7:71:ea:6a:ca:d2:db:dd:85:83:
a6:1d:98:bb:53:ba:17:e1:c4:53:58:11:1c:5e:06:28:ea:8e:
2d:40:e6:81:40:31:e4:f5:28:97:8b:fb:42:29:49:a7:ae:77:
21:31:da:ba:57:8e:ec:07:a3:c9:98:d9:c2:e0:f4:46:7d:2a:
e9:44:f0:18:0e:b4:0d:94:5d:d5:d6:83:51:18:60:02:b3:92:
04:61:8e:7d:b1:67:18:71:16:71:68:c2:14:2d:71:8f:10:6e:
37:eb:87:14:06:a0:07:17:9f:1f:61:89:9a:1c:0a:cd:d3:af:
e3:8d:3a:3b:9d:36:81:fb:4a:d2:ce:92:09:e7:d3:0f:70:0c:
18:d0:ed:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:37:01 2025 by rpki-client