Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.mft
File: 8SRlvSRvIjEc6bBe60n3t5FLKgo.mft (raw, json)
Hash identifier: r0+mz/eKvqpRRh2SaReNCKWIBQmjdb7qh1gmtTnx5cY=
Subject key identifier: 5A:47:F4:26:D6:65:83:12:9D:AC:E7:DC:32:B0:13:08:06:35:86:AE
Authority key identifier: F1:24:65:BD:24:6F:22:31:1C:E9:B0:5E:EB:49:F7:B7:91:4B:2A:0A
Certificate issuer: /CN=f12465bd246f22311ce9b05eeb49f7b7914b2a0a
Certificate serial: 01967E341F194D179B343ACE28617C7C5223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SRlvSRvIjEc6bBe60n3t5FLKgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 21:01:07 +0000
Manifest this update: Mon 28 Apr 2025 21:01:07 +0000
Manifest next update: Tue 29 Apr 2025 21:01:07 +0000
Files and hashes: 1: 8SRlvSRvIjEc6bBe60n3t5FLKgo.crl (hash: m+HiyaV3BxHxojlY+hAIDACgKkgj6+uJS5Rg6jzrxXQ=)
2: kWlbajLT3oWxqxE3gffCQHqCWHM.roa (hash: DZ3f9M7b382od72T/F6H5ByHy+dVO8wT6ZXIu3gfGcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SRlvSRvIjEc6bBe60n3t5FLKgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:34:1f:19:4d:17:9b:34:3a:ce:28:61:7c:7c:52:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12465bd246f22311ce9b05eeb49f7b7914b2a0a
Validity
Not Before: Apr 28 21:01:07 2025 GMT
Not After : Apr 29 21:01:07 2025 GMT
Subject: CN=5a47f426d66583129dace7dc32b01308063586ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:af:9c:63:9d:13:08:96:cf:94:44:53:65:b7:
30:e7:1a:b2:d8:f5:7e:27:7a:4c:c1:f7:fe:41:4b:
e1:57:75:65:ce:74:b9:63:eb:c9:04:41:ab:22:3c:
25:63:d8:20:d5:7c:17:4e:70:9c:97:21:e2:0a:c7:
a9:a5:f8:67:8e:f2:fa:63:d6:72:e1:7e:77:d2:a9:
d4:50:32:8f:ce:32:78:45:db:e1:25:39:9a:65:b1:
f0:03:7f:75:c6:17:78:14:87:cc:96:fe:38:03:f8:
d4:91:76:af:72:83:57:9f:51:79:83:bb:c3:5d:b3:
57:6d:f1:6c:6f:74:77:ae:77:d8:cc:eb:d4:ce:38:
07:e9:d2:01:f6:89:62:74:f5:6c:00:9d:b0:75:83:
5d:78:d4:72:49:34:7a:41:8c:f5:8a:da:46:af:e5:
fd:46:4e:4e:70:b8:47:28:77:b2:10:c7:26:25:08:
dd:c8:cb:e5:3b:e8:4f:51:90:62:58:4c:a6:d4:4f:
54:d3:49:90:5e:45:f5:68:c2:0c:76:ae:ac:ce:76:
de:65:ff:a5:d4:f2:8f:1b:78:f6:ab:04:89:32:ef:
ec:1c:6d:01:65:0c:18:0d:fb:c1:7b:df:6e:58:40:
74:f1:2a:f8:9e:ed:b4:63:d6:9f:9c:29:81:1b:fc:
59:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:47:F4:26:D6:65:83:12:9D:AC:E7:DC:32:B0:13:08:06:35:86:AE
X509v3 Authority Key Identifier:
keyid:F1:24:65:BD:24:6F:22:31:1C:E9:B0:5E:EB:49:F7:B7:91:4B:2A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SRlvSRvIjEc6bBe60n3t5FLKgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/96fa68-f2b1-4aaf-b50f-91e27b9cfba6/1/8SRlvSRvIjEc6bBe60n3t5FLKgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fd:43:5e:ad:b2:33:28:50:16:6a:1f:3f:ad:be:a9:45:24:
4a:d1:a2:fe:b0:38:74:7c:2e:a4:c8:99:4c:27:40:d8:b6:7e:
8d:fb:03:41:0d:85:f3:e0:99:a5:a3:3b:5d:e1:33:be:24:ec:
0d:cf:22:d0:7e:76:ce:55:f3:1a:d6:0b:25:b0:28:ac:18:1f:
98:3e:df:d5:03:c2:43:3e:ec:7e:ff:8a:d7:ed:06:61:7a:4a:
54:a9:f9:b3:4b:1e:45:fb:19:9d:57:bf:6d:71:c8:1f:f6:90:
48:f4:2e:88:72:25:0b:fd:68:c9:e1:5c:43:0b:d7:51:19:fa:
18:13:c0:c0:f7:af:dd:e2:5b:84:2b:f3:8c:bc:e7:3a:a1:50:
3b:08:24:07:0c:0a:b0:4e:50:87:c4:a4:03:25:99:cc:eb:49:
26:25:f2:08:33:ce:36:e5:a0:c2:6a:ab:55:de:96:35:c7:5c:
11:d3:50:ae:52:19:3a:a5:45:12:17:ee:db:4d:8a:0f:e4:03:
33:80:91:4d:c4:c3:3d:28:c6:ac:cd:0d:6b:52:5c:9d:67:9a:
48:e4:a4:f1:24:4c:13:2b:a1:ad:e7:70:7e:c5:e7:8d:14:2d:
2e:1a:fd:1e:c8:1c:44:d8:eb:99:36:2f:24:55:7a:ef:f8:fa:
3d:73:6a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:48:15 2025 by rpki-client