Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier: PODpLxhjuUpVQJBaHsr1LD7CGItZDIZvVfPQTRH7Lds=
Subject key identifier: 4C:F9:FB:0F:4C:12:E4:03:DD:75:D2:15:8C:02:5D:85:B2:37:1A:FA
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial: 0196827E57123AD401ECB1421DB9533E63F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number: 0FBF
Signing time: Tue 29 Apr 2025 17:00:39 +0000
Manifest this update: Tue 29 Apr 2025 17:00:39 +0000
Manifest next update: Wed 30 Apr 2025 17:00:39 +0000
Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: FTz5McM/pPV5BIw2QeZgy0dqovTp+znNoc88mWnXBqM=)
2: mre0Sbb8szBBX4GresgiiwdF634.roa (hash: KGpatw4GtK16xXPbD1RSTnF7RbGtyhCDwaJXsQ0f2K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:57:12:3a:d4:01:ec:b1:42:1d:b9:53:3e:63:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Validity
Not Before: Apr 29 17:00:39 2025 GMT
Not After : Apr 30 17:00:39 2025 GMT
Subject: CN=4cf9fb0f4c12e403dd75d2158c025d85b2371afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8a:9d:f7:07:95:d8:c9:da:47:68:08:ca:fe:
c9:0d:11:ff:d8:ac:d7:8e:8d:6c:80:ec:fb:d3:5f:
32:51:1c:b4:aa:20:22:8c:46:00:11:d7:36:09:cf:
00:c8:4f:6e:9a:d4:ae:42:15:27:da:6a:4f:a2:5a:
f4:a7:33:4e:47:1d:81:ff:e9:a3:98:97:59:a0:b9:
fa:11:cc:02:09:d8:a6:3a:c7:d0:17:f7:1e:39:23:
31:6e:a9:27:8d:46:44:30:35:2d:64:c4:4d:62:58:
f3:64:01:aa:b1:b4:b8:37:0d:04:1c:c8:a5:8b:ed:
23:90:8c:b4:04:96:33:6e:69:86:49:d9:91:eb:3f:
32:03:cc:eb:1b:7f:2f:82:ce:0a:25:97:34:18:c3:
5c:32:d1:e9:a9:61:9c:8c:22:c3:b2:99:e3:79:56:
d3:e5:c2:0e:a0:38:85:a3:68:e4:70:13:71:de:de:
12:f0:e0:70:57:66:03:d7:a5:18:98:79:01:62:e2:
31:03:c3:34:b2:69:a3:1b:16:30:f3:6c:02:ee:56:
f8:ae:94:40:45:57:6b:fa:ab:53:67:1b:b6:02:c7:
ff:be:fb:3f:4c:4d:1b:f2:73:66:22:5a:84:0d:40:
69:14:f7:42:51:bf:c4:b5:4b:3b:85:5d:74:c5:66:
3a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F9:FB:0F:4C:12:E4:03:DD:75:D2:15:8C:02:5D:85:B2:37:1A:FA
X509v3 Authority Key Identifier:
keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:18:75:a9:86:5d:af:d6:78:37:55:2e:aa:4a:38:d5:10:07:
ad:67:f7:ca:e1:be:db:e3:ea:cc:1f:1a:1d:9f:ee:15:77:23:
62:44:91:0c:75:f0:17:57:52:5d:08:c1:48:5b:43:31:fa:cd:
36:56:45:aa:6d:9e:c1:0c:78:c6:5d:41:2f:6d:eb:f7:b2:7f:
8e:ff:36:29:64:47:61:1d:33:37:ae:02:12:87:5d:a9:4e:88:
d7:24:ba:6d:32:1f:2a:d0:51:38:71:d7:e5:48:7c:9b:57:00:
76:66:ef:cb:03:c9:f5:86:01:48:05:48:91:ff:41:89:66:bc:
eb:0d:f2:e0:73:c3:63:c1:55:27:df:71:4e:a8:b1:d5:14:84:
4a:24:6e:45:9e:a7:3e:ae:7b:5b:03:55:29:11:59:02:ab:78:
49:80:22:c2:18:42:6d:12:e7:83:5b:29:99:b0:42:55:0e:9a:
48:7c:ac:1b:4f:e1:a0:e4:20:56:e5:dc:00:7e:6b:43:a2:85:
6f:51:e7:31:2b:19:7b:d2:c6:95:c6:51:bf:a2:91:d6:8b:9e:
a9:1d:27:5f:9d:30:5c:12:a7:53:44:cf:37:90:80:ef:f0:56:
84:42:e4:2b:9b:aa:6e:e0:b3:fc:ed:7d:6c:d3:e5:9d:88:e7:
80:bf:41:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:37:54 2025 by rpki-client