Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
File: 8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json)
Hash identifier: 3otA2utG2c4AxpP+i4ufi1TsAWENIE0d8WNPF5enNIs=
Subject key identifier: 60:95:83:A8:0A:A8:53:43:F0:50:E6:0B:49:92:FD:69:26:16:0B:1F
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial: 0196888058E17B39D0F546BC47B1C874C356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
Manifest number: 141D
Signing time: Wed 30 Apr 2025 21:00:34 +0000
Manifest this update: Wed 30 Apr 2025 21:00:34 +0000
Manifest next update: Thu 01 May 2025 21:00:34 +0000
Files and hashes: 1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: mGawPs60WB30NvLNniUUe5m8SMawl5RUVgX3deN/OiE=)
2: YuVFbu671lxJtgp8Dd5trr77imo.roa (hash: eoCcK7MisnOAgEVb/tn2NdbeYwDzl1a566p1bHV7AcM=)
3: n5Snke9qrVszV2r6iCOXAr8xpfU.roa (hash: OcodRKZ+v9kxH+amb1gjlja43PdbaBmuEGTA3TTwgu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:80:58:e1:7b:39:d0:f5:46:bc:47:b1:c8:74:c3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Validity
Not Before: Apr 30 21:00:34 2025 GMT
Not After : May 1 21:00:34 2025 GMT
Subject: CN=609583a80aa85343f050e60b4992fd6926160b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:16:80:c5:ce:b1:16:b6:3a:0f:83:e1:50:
e9:09:ed:44:32:d4:fd:7a:11:af:af:5b:0e:b5:8e:
b2:92:15:75:5b:37:16:46:5c:51:cc:ab:f4:1b:93:
26:78:99:a6:27:3f:7e:41:d0:67:40:14:5b:84:df:
75:38:bf:52:4a:f6:71:fa:5e:f7:00:6d:e5:39:07:
11:09:c4:df:cc:57:36:ff:09:82:8e:ae:c7:9b:b6:
80:5d:c0:82:93:c8:0e:28:86:32:60:f9:04:ba:51:
fb:11:3d:a0:08:47:f0:2d:a1:3e:89:9a:6f:f7:1c:
fe:be:64:5c:36:e3:5a:86:90:5a:b8:d5:5b:47:26:
1d:f3:a4:4e:88:0c:4c:b7:0d:41:55:b5:ad:26:60:
d2:12:3e:17:41:0d:1d:10:00:4a:6f:a4:b8:3d:07:
4b:33:b6:30:19:4f:b8:62:3d:de:0a:2a:08:8b:8e:
e9:da:f3:fd:7f:59:6a:b4:41:a1:fb:cf:ec:1e:bf:
a7:fe:40:5f:c5:1c:9d:24:b5:f3:54:22:4d:68:5d:
df:61:79:b6:a5:d8:e3:ec:f0:2c:1b:93:02:6d:78:
18:ef:36:42:36:ac:0a:22:a0:f3:d0:9c:18:8a:5f:
69:f8:ea:2c:6a:14:14:0a:35:73:e4:a0:f0:d3:45:
94:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:95:83:A8:0A:A8:53:43:F0:50:E6:0B:49:92:FD:69:26:16:0B:1F
X509v3 Authority Key Identifier:
keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:61:79:e9:e8:ef:dc:af:1a:f4:b7:7a:2e:ca:4f:70:ce:e2:
72:50:25:21:da:37:5e:bc:4d:02:81:a5:21:7e:c7:e0:e9:86:
f0:cb:70:0e:41:5c:f9:45:5e:1c:13:01:6f:90:12:71:60:0e:
2f:e7:52:40:c5:76:76:cd:df:49:38:fd:17:e9:1e:e4:3b:af:
fe:dc:df:00:11:9d:00:87:ed:ef:9a:da:f9:d1:6e:11:b6:23:
70:09:45:3d:07:9b:ce:6f:a3:31:e4:86:f8:4d:cd:57:ea:96:
db:a3:54:70:e9:0b:e8:50:32:cf:5e:3b:27:05:7c:b0:d8:f6:
65:62:c6:42:01:a0:9b:0e:2b:3e:90:5e:68:be:34:7a:64:17:
c4:a6:0c:e0:51:ce:5d:16:c8:bd:cd:4d:9b:bc:1c:6f:df:a7:
b9:67:88:f9:39:83:36:8e:7b:f5:a2:5f:b2:fb:06:d4:90:bc:
e2:8e:71:0b:99:68:fb:3e:82:7a:a0:a2:86:0e:23:31:c7:d3:
68:56:80:92:b6:66:5e:ac:3f:14:4c:68:51:ce:db:59:30:bb:
6e:65:94:a3:66:d6:b1:2f:b8:88:2b:c0:ce:2a:c1:d0:a3:51:
96:52:5e:de:4a:83:91:9a:68:b8:b6:a1:5d:58:be:19:72:01:
af:0a:11:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:26:45 2025 by rpki-client