Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier: LoCaLEUhPCNFypibD743zRT7Ss7K4r5C7xePPubg3Rw=
Subject key identifier: 38:2D:30:5B:44:DF:8F:E8:97:35:0C:CB:A2:68:5E:07:C5:D2:C1:97
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 019681D9552222A9C7BBB37B5620397520E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number: 1056
Signing time: Tue 29 Apr 2025 14:00:26 +0000
Manifest this update: Tue 29 Apr 2025 14:00:26 +0000
Manifest next update: Wed 30 Apr 2025 14:00:26 +0000
Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: UHlMkDbb8r8IOHJ9+PmJ7i6ZDQtbZWeKegCopgtdzo8=)
2: egJez3AEE17hCNzFwTYyy-yFWOk.roa (hash: tusTlSSqSFD7zKHlwWaKcKWcJ80R+Gl9wxxF6SdsjMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:55:22:22:a9:c7:bb:b3:7b:56:20:39:75:20:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: Apr 29 14:00:26 2025 GMT
Not After : Apr 30 14:00:26 2025 GMT
Subject: CN=382d305b44df8fe897350ccba2685e07c5d2c197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:51:d5:56:17:bd:e4:c2:3c:12:57:f1:e5:59:
51:1a:15:b9:9e:cf:98:c9:00:6b:6d:60:01:21:73:
5e:a5:15:ed:a1:2e:5d:22:33:b0:bc:63:cf:ab:dc:
6f:03:9c:e2:88:a2:b6:93:a6:39:2c:c5:1e:98:4f:
d8:d4:19:46:74:d6:10:ff:41:01:7e:62:29:c8:92:
8c:f3:06:e3:c3:6c:c2:1d:7e:bf:c6:cb:95:22:74:
5e:e3:45:62:ca:98:c4:a6:c5:88:bf:ec:c5:75:aa:
dc:0f:86:1b:78:52:86:77:3f:04:d6:fe:09:5d:a0:
28:f0:0b:d2:6b:97:63:b0:92:0c:3f:0a:9a:79:df:
73:d5:c8:2b:13:1b:cf:38:8c:3d:18:05:29:c3:b3:
63:56:fd:25:9b:32:2b:15:fb:9b:3a:1c:aa:8b:e8:
d4:de:b8:63:2d:80:08:63:71:86:c1:fa:27:e1:5e:
05:79:0e:d2:cd:e1:e7:24:ae:eb:ea:aa:5f:f0:8e:
41:a9:71:e5:58:ff:88:71:31:70:2f:55:5d:2c:68:
99:39:32:62:d1:2e:ae:27:21:93:46:f6:6c:bc:4d:
d6:4a:38:07:fb:2c:04:ec:a2:9c:06:ac:a8:7f:12:
55:b5:41:b1:0a:b8:a5:2e:ae:94:ea:3f:a9:fd:be:
60:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2D:30:5B:44:DF:8F:E8:97:35:0C:CB:A2:68:5E:07:C5:D2:C1:97
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9f:0a:52:aa:2b:e9:79:6f:72:f6:1b:56:52:03:0e:70:1c:
de:ce:45:33:52:a9:d0:b5:b0:50:e3:fd:79:a1:63:90:32:73:
d0:ef:a3:90:d5:7a:5a:02:67:8e:0f:57:5c:91:2d:83:d1:9b:
04:51:b4:21:fd:1b:73:18:65:52:e3:e4:4c:8e:eb:22:a8:53:
5a:65:32:37:6b:7c:6f:41:db:71:35:1a:b2:3a:07:2f:7c:fc:
58:49:0b:de:1f:d1:fa:e1:36:6a:aa:4f:02:16:9e:0e:1a:2d:
9d:55:96:d3:2d:d2:66:a5:1b:37:a3:8e:3b:ba:fa:fb:78:7e:
d4:ea:64:18:d9:1f:81:83:46:d5:b7:72:46:ff:ee:29:8f:c2:
d2:e5:06:cf:76:39:a9:72:36:37:69:3a:5c:f4:1e:3b:97:d5:
70:4f:b0:27:2d:2a:65:55:cb:c9:ef:3e:27:f8:d1:d6:d5:2a:
c2:ca:a1:70:c5:23:b6:69:06:86:8f:4e:eb:df:3b:f2:58:0a:
7b:40:b3:16:bf:5f:c0:7f:7e:30:f0:36:05:24:1f:99:11:60:
32:ed:2b:29:74:9e:b1:a6:2e:7d:5b:ac:35:a5:6a:0e:b9:7d:
ed:ce:f4:d1:db:44:12:4b:42:5b:15:00:83:42:5a:ab:15:f0:
0b:02:af:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:23:37 2025 by rpki-client