Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
File: l8S83VMS-KfDPeS311wVtMu8Hdo.mft (raw, json)
Hash identifier: ZkMQwWbHpb2gk+bzbTvqIsjUkxZja/5bBBwQF+jZYiU=
Subject key identifier: 85:63:A0:36:09:32:8A:EC:8E:72:EF:40:D7:0D:D0:CE:4F:76:84:22
Authority key identifier: 97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
Certificate issuer: /CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Certificate serial: 01967679E3AB5F76639C4BFD53C5A5D1926C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
Manifest number: 0378
Signing time: Sun 27 Apr 2025 09:00:21 +0000
Manifest this update: Sun 27 Apr 2025 09:00:21 +0000
Manifest next update: Mon 28 Apr 2025 09:00:21 +0000
Files and hashes: 1: O5tzYrtFkkmA82WUY-iM9I4npFQ.roa (hash: NAkRuZlLqZ6QGa6dyEO9WBh2M5GYWwb6X+60cj2kmSQ=)
2: UpM_9nRhN5sEo1jLWob4fYkRieQ.roa (hash: 1KbxTVWk0iQIjrJWGCs4uRw+yTwWoVCpGhtFHqc3mxE=)
3: l8S83VMS-KfDPeS311wVtMu8Hdo.crl (hash: JqIWjvfpyBcnRmlm28mtmDb03n8V1SHvRWYpYnqy9uQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:e3:ab:5f:76:63:9c:4b:fd:53:c5:a5:d1:92:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c4bcdd5312f8a7c33de4b7d75c15b4cbbc1dda
Validity
Not Before: Apr 27 09:00:21 2025 GMT
Not After : Apr 28 09:00:21 2025 GMT
Subject: CN=8563a03609328aec8e72ef40d70dd0ce4f768422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:ce:b1:0e:22:b8:d7:eb:7a:83:06:ca:97:
f0:1c:ec:88:65:9d:ae:9e:11:eb:83:51:c4:a8:cc:
13:9e:0f:4c:76:45:1e:d8:39:1c:7a:d2:92:41:3a:
1c:98:da:46:94:91:98:93:45:ff:fa:f6:86:d5:b2:
1a:ad:2d:47:e3:c9:af:d9:6d:5b:3e:3c:79:98:ce:
a4:3d:8e:a1:f8:2f:aa:09:b4:8b:13:80:59:b0:6f:
31:c7:e5:9d:a1:1f:8e:49:b1:40:ba:df:20:33:ae:
67:ad:9d:d1:4b:06:7c:52:bf:94:d6:6e:d1:99:be:
3d:7f:de:f8:65:c7:45:f1:ac:42:55:a0:58:eb:c4:
eb:f4:27:44:57:1e:0f:dd:3e:b8:da:96:bb:5e:6a:
b1:16:d2:0f:ff:c3:ed:d4:64:a4:11:45:05:21:20:
5b:3a:dc:c7:19:b2:c8:61:6b:79:9d:c2:bc:fd:3f:
2a:eb:c6:7f:07:5c:f7:c3:b9:ca:8c:6f:4b:79:ca:
93:42:1b:d4:32:7d:c3:e9:79:53:bb:2f:c6:6e:87:
b8:d8:09:f5:ae:2b:88:72:79:b1:51:8f:af:8b:8e:
dc:ad:79:98:ea:53:50:bc:3a:23:d6:40:79:88:cd:
12:fa:93:b9:05:15:67:10:b2:c8:ea:82:a3:cd:6b:
ea:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:63:A0:36:09:32:8A:EC:8E:72:EF:40:D7:0D:D0:CE:4F:76:84:22
X509v3 Authority Key Identifier:
keyid:97:C4:BC:DD:53:12:F8:A7:C3:3D:E4:B7:D7:5C:15:B4:CB:BC:1D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8S83VMS-KfDPeS311wVtMu8Hdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/44775f-37a6-4a86-9fe5-e93bdb8d9c85/1/l8S83VMS-KfDPeS311wVtMu8Hdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f7:fb:cd:47:2c:fc:f8:3f:be:f5:f3:70:dd:32:c7:14:97:
46:6e:2c:c7:9f:81:eb:14:61:0c:d0:0f:67:25:d1:3d:73:64:
57:8e:6f:dd:66:0c:a6:2f:8d:35:7b:e1:65:14:d2:e1:3d:d8:
3d:e9:07:63:3a:ab:8d:8d:97:bf:36:11:53:d0:f2:1e:2d:48:
3e:48:ac:ce:37:fb:40:3e:f3:7b:6f:7b:42:8d:40:48:1f:41:
97:c4:0d:a2:5e:1b:8c:52:1e:cc:d5:ef:57:18:f9:b1:42:53:
4a:47:1e:d1:8e:92:36:a4:3c:36:9b:ed:75:e4:fc:9d:85:32:
70:94:83:ef:b1:6c:8c:69:7e:b3:6a:f5:d4:77:ed:60:9f:e9:
e3:14:b2:61:2a:e9:04:1a:47:7f:ca:00:36:21:18:aa:8f:19:
a5:63:55:ab:a0:c9:a7:55:bf:55:90:c0:62:00:2e:05:f4:63:
d7:d8:c2:5d:3c:84:c8:34:c9:ed:cf:54:ca:25:2f:2a:d9:ef:
37:d9:dc:85:35:ab:4e:e9:f8:0d:48:26:7f:d7:6a:34:7b:1a:
7f:78:81:0b:b7:fc:66:cd:68:63:d4:e3:fc:b0:8d:42:47:c5:
c5:b0:3c:97:14:36:08:a2:1d:c6:bc:34:9c:f1:10:2f:d5:82:
98:70:91:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:12:26 2025 by rpki-client