Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
File: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft (raw, json)
Hash identifier: O6EBllJ5h7k39q9tr+QzxUwK3Q6rUO3lKX3iMu62qgU=
Subject key identifier: 22:B9:52:DF:0F:00:09:00:87:5B:08:2F:93:24:C8:2E:0B:37:87:EE
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial: 0196748C1848EDE516D1E89732355421C4B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
Manifest number: 14B5
Signing time: Sun 27 Apr 2025 00:01:00 +0000
Manifest this update: Sun 27 Apr 2025 00:01:00 +0000
Manifest next update: Mon 28 Apr 2025 00:01:00 +0000
Files and hashes: 1: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl (hash: yso7XZru8ZIs8gQWyQgmNM6l+7oBQdU+DpHpidJ2i/M=)
2: f4A325yGj48RuMfkjcKdx35IWgg.roa (hash: j8y8oC78Ayis+Zl1DL+FUWPv5N+us3D0FIOg/cZJpDI=)
3: g4Nm3zw7BZCf660L7J2wB5s2-SA.roa (hash: +YfoAh+I7x70vYXeLBN3w6ZRtj/Ii78yrIjM344/IWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:18:48:ed:e5:16:d1:e8:97:32:35:54:21:c4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Validity
Not Before: Apr 27 00:01:00 2025 GMT
Not After : Apr 28 00:01:00 2025 GMT
Subject: CN=22b952df0f000900875b082f9324c82e0b3787ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:14:3f:49:2b:0f:61:11:4b:ea:90:e1:46:
04:ac:00:c7:b9:9b:4f:1e:24:dc:0a:83:b5:b8:92:
85:e0:5f:71:83:6b:ba:b9:ff:01:b5:6d:03:4e:2a:
90:ae:14:a4:0f:ea:15:30:b6:53:b8:a9:d9:28:1f:
c5:93:01:35:54:9f:26:30:3e:49:a4:93:52:b3:5f:
4c:05:98:48:aa:d6:ad:f8:1f:0b:e1:c1:9b:a4:59:
e5:79:47:cd:2a:e9:54:c7:bb:81:01:91:42:54:f1:
ce:e0:46:ae:a9:7d:05:be:3e:28:6a:62:ab:8f:0b:
47:3d:be:29:c1:ce:9e:3d:28:48:e6:a9:02:9d:c2:
23:06:eb:af:62:48:f1:e7:88:5a:bd:1c:86:16:7d:
bb:63:df:da:de:54:b6:62:9e:bd:8b:37:65:aa:6d:
ea:61:9b:ea:c6:a6:0d:c6:72:42:dc:ab:c0:37:e1:
a7:87:84:58:76:3b:22:c5:ab:d4:24:46:7f:99:fc:
ce:3e:cc:6c:00:c7:07:be:59:f7:68:5c:f9:e1:02:
4c:26:83:62:8d:8d:c1:fc:0a:82:25:3a:01:44:63:
f1:8b:fd:c0:62:01:c5:01:1f:0f:47:27:95:49:4c:
b3:34:3d:c4:60:16:44:a1:2b:28:97:40:b6:c4:c4:
53:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B9:52:DF:0F:00:09:00:87:5B:08:2F:93:24:C8:2E:0B:37:87:EE
X509v3 Authority Key Identifier:
keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8a:0e:01:6a:e3:40:42:2c:97:39:b0:1a:25:3c:d5:bd:5b:
cb:59:86:cc:47:a1:f4:b8:b0:dd:de:01:f7:f5:37:31:4b:66:
d4:fc:5c:d5:d9:7b:b9:f5:a6:e6:22:fc:fc:fd:0b:ac:f3:e2:
d0:2e:ba:0d:7e:3f:53:60:97:14:f5:ce:80:d6:6a:43:0d:3d:
97:fd:df:a5:ba:d8:b5:16:d4:ea:aa:39:2f:09:3b:6b:d8:26:
48:71:d5:dc:d4:9a:ab:c5:ab:c5:eb:ad:74:60:b3:56:85:7a:
a5:33:10:bc:d5:f9:b7:ee:2a:13:7e:bb:29:4c:76:26:d5:78:
ae:8f:b2:d1:a4:39:d4:ab:67:81:f2:86:2d:ba:27:a3:7b:ec:
59:dd:17:cf:17:60:cf:ba:bf:f6:65:e0:44:0b:22:ae:d2:d2:
4a:e4:53:8b:83:1e:ae:0f:88:73:1a:51:90:a0:60:e8:c4:1b:
be:dc:71:07:e3:11:e3:92:35:63:d5:06:b8:ae:dd:b1:1f:c4:
9e:1f:18:af:7c:49:67:f9:ba:19:5b:fc:57:ad:14:b3:6d:cb:
68:3a:a7:44:17:ab:81:5f:60:5b:47:e4:9f:b8:03:f0:cc:ce:
79:6e:9c:32:4e:32:53:e2:ed:12:d9:cb:7e:0b:fc:23:a5:e8:
c3:67:c9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:34 2025 by rpki-client