Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: i/kaRcLZ1m0+UZM+hCiU83Yd8gqph4o2Qj9ormOx8mQ=
Subject key identifier: F4:08:45:44:03:C0:F5:63:CD:98:01:97:1C:29:DA:02:8B:38:E8:18
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 019683FF004F8BA53AE67F01B826273F2444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 0C3F
Signing time: Wed 30 Apr 2025 00:00:49 +0000
Manifest this update: Wed 30 Apr 2025 00:00:49 +0000
Manifest next update: Thu 01 May 2025 00:00:49 +0000
Files and hashes: 1: 0qMVRghLmSWdSNAhWBOt8uMlDGs.roa (hash: kOLfFL2EFwiaYaCo8C+GmQcPeyIeF+5TOTsfcPc2OmI=)
2: CoddMQm6LTCSZZwVDyRLAqAXOLQ.roa (hash: wya/ieDlwU5gulg2lLSwRO1xnpgtUhKNOqwGEK2Nmn0=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: KnAtUBJ91nloajWWOYSEqw4v3drkSr1EG6iSCzxQ+nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:00:4f:8b:a5:3a:e6:7f:01:b8:26:27:3f:24:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Apr 30 00:00:49 2025 GMT
Not After : May 1 00:00:49 2025 GMT
Subject: CN=f408454403c0f563cd9801971c29da028b38e818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:0e:93:e8:5a:71:6f:b7:78:c8:81:03:4a:
bf:e8:89:44:be:f5:00:0e:96:9b:24:36:fd:77:37:
ad:b2:5a:a1:44:e2:db:d9:2b:5b:42:88:1f:24:99:
42:2f:4c:33:a6:68:e3:a7:9b:ee:cc:34:d2:00:ce:
27:32:48:56:fe:02:f2:47:7f:e6:13:a4:06:a0:56:
87:b8:92:6c:fa:0b:b3:22:2b:b1:e4:43:2d:ca:02:
61:29:43:7f:95:80:23:ec:42:b6:70:e1:6d:78:04:
95:93:ce:eb:c3:36:35:df:cf:10:4d:d8:34:87:e5:
e2:30:44:ef:19:02:e8:cc:8a:f7:89:15:42:1b:62:
70:53:ba:2d:41:24:45:67:a0:fb:94:41:bb:12:bb:
56:7a:bf:be:27:ae:78:64:57:7c:1d:fe:97:8d:b3:
d2:2a:6c:25:80:5d:86:1f:a8:b8:af:6f:00:af:e0:
28:72:27:1a:ab:75:b0:10:5a:89:03:a0:0b:b1:db:
34:e9:c3:34:c7:3b:f3:f7:1e:fa:87:83:20:d9:da:
ac:cd:8f:b2:9e:5d:0f:39:25:6f:07:62:1b:5d:a9:
cc:42:fb:18:90:67:9b:d6:29:9c:5a:90:38:b3:d9:
e1:8c:95:71:90:cd:10:d7:4d:26:32:15:2d:bb:63:
58:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:08:45:44:03:C0:F5:63:CD:98:01:97:1C:29:DA:02:8B:38:E8:18
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1b:85:a9:a1:cf:36:fd:1c:24:12:1f:58:40:12:61:12:cb:
52:41:90:fb:49:a6:61:50:d3:26:a0:50:58:55:a9:bc:b4:7c:
d0:f8:7c:11:60:7e:cb:1f:40:1d:24:66:d7:3f:02:e9:7b:a4:
b9:7f:5f:eb:1c:02:57:41:3f:91:7a:fd:4f:04:86:32:14:26:
bb:02:80:15:f7:cc:40:b0:4c:4d:e0:b8:ab:91:2f:ec:eb:99:
68:22:d9:09:60:c1:a4:27:b1:5a:e6:1c:f2:38:d1:d7:85:8d:
3c:b3:3d:bc:fe:f3:78:1a:cb:97:f3:f0:47:34:97:c3:53:56:
55:a8:48:6d:2d:25:2d:a7:01:d8:d8:c7:8f:34:b5:3c:5d:02:
20:2c:cf:cf:34:5d:4c:04:5d:dc:70:a7:99:77:99:61:c0:d2:
ad:97:f0:e4:f7:9b:a5:6a:5f:df:c4:05:d5:dd:cb:a7:de:c3:
0b:9f:69:48:10:50:d4:a6:f8:06:29:e5:7e:aa:18:eb:47:8f:
b4:bc:ad:51:33:4b:6d:a8:ac:1a:d7:80:0e:4f:87:93:42:2c:
bd:14:76:c4:6f:d3:2a:be:82:b1:8b:7b:cd:53:48:10:f7:f1:
fa:5e:ba:9e:0d:40:b6:fc:70:d1:57:5c:c0:f7:30:f5:22:d3:
72:58:0c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:18:28 2025 by rpki-client