Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
File: 8IcQ5uJObWm9XESv6vDunGftOgY.mft (raw, json)
Hash identifier: rFPO5pcyeqeSW4a/xzkZhk9FnH6zvWNqwcDfK0F+AAA=
Subject key identifier: 9E:14:66:0C:29:F6:A7:AC:36:EE:C6:4B:00:FE:BF:FF:A0:10:B1:CD
Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
Certificate issuer: /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Certificate serial: 019655A5D4EF0F9A22A03C6B3EB662F4C5E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 00:00:53 +0000
Manifest this update: Mon 21 Apr 2025 00:00:53 +0000
Manifest next update: Tue 22 Apr 2025 00:00:53 +0000
Files and hashes: 1: 8IcQ5uJObWm9XESv6vDunGftOgY.crl (hash: RlpIbTjfmsD7W1QxJiK3QkvIx1em3Etd3fPkL9PmWnk=)
2: GSeC1Rl6mpKFcoTMI2ji-UCz9Y4.roa (hash: PbjkP2/mvOpx2a2PbKu6Uf4IiG6ZwqTripEFW9PTXoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:d4:ef:0f:9a:22:a0:3c:6b:3e:b6:62:f4:c5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Validity
Not Before: Apr 21 00:00:53 2025 GMT
Not After : Apr 22 00:00:53 2025 GMT
Subject: CN=9e14660c29f6a7ac36eec64b00febfffa010b1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:55:59:29:5f:0a:85:3e:b9:11:21:fb:40:35:
bc:15:74:a1:98:f9:8d:da:c2:39:21:ab:4e:73:d8:
f2:29:46:5d:83:bd:91:77:50:61:2e:c0:11:f5:6a:
71:eb:cb:77:c5:d0:99:71:40:f5:d5:9c:dd:a6:e8:
dc:3e:91:2f:82:65:b4:f7:21:a3:af:f8:91:44:28:
c1:d8:c1:cd:01:22:2a:09:d3:ac:73:47:5b:e6:6e:
12:ce:cb:d5:ec:06:ba:63:64:84:c8:6e:36:4d:55:
e1:57:7c:48:23:1b:8e:72:95:c2:91:d1:0d:71:8b:
ac:10:13:d4:44:6e:9f:fb:75:b6:fe:9b:9c:a9:b2:
da:77:a7:56:ca:ca:b4:f7:e8:fa:93:3d:0b:a7:26:
11:a8:4f:91:2c:2c:77:b4:62:ff:8c:d7:63:96:d2:
6a:13:9b:db:e6:26:d8:08:9d:da:6f:0f:96:da:3b:
a8:9b:2a:02:44:62:f2:2d:61:dd:ca:c7:dd:18:99:
af:3f:9e:70:cc:3d:a8:59:79:c2:4b:12:b4:b8:15:
18:58:c6:d8:84:73:5b:cd:a1:1a:2f:61:b0:ae:9e:
22:88:02:be:bc:78:2d:5e:10:b7:e6:23:15:62:d4:
db:29:30:9d:a8:97:93:b0:59:81:22:d6:43:d9:2b:
cc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:14:66:0C:29:F6:A7:AC:36:EE:C6:4B:00:FE:BF:FF:A0:10:B1:CD
X509v3 Authority Key Identifier:
keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:50:bc:c6:0e:a5:bf:33:83:df:59:ab:f8:a9:78:47:07:df:
5e:ec:92:98:5d:1b:4d:92:4d:9e:82:a9:8f:e4:f5:f0:da:18:
d0:19:34:40:24:e2:33:0b:58:44:a6:1b:51:57:39:d9:be:fa:
b0:77:6e:44:74:4c:7d:f0:f5:be:6f:66:18:6d:54:b5:a0:d8:
8a:cd:27:1c:96:c8:8e:87:32:d2:fb:cf:ee:6f:89:6e:29:5f:
fa:33:85:ad:49:27:df:9a:f4:bb:62:d1:5a:fb:ee:a6:31:b2:
ff:81:53:26:9a:92:d4:84:d6:73:f6:99:82:65:00:f5:29:ad:
4d:77:11:7a:e4:00:59:95:e8:15:87:bf:d6:7a:ec:e6:0a:15:
6d:cf:0a:1f:ee:9b:b0:ec:5d:a5:5d:9e:95:d2:8c:ca:3f:c2:
00:f3:e8:8e:f1:1c:bd:04:b7:cc:e1:a1:69:5f:6b:ab:f6:bb:
5b:62:dc:49:0f:74:a3:95:c3:e1:55:0b:e2:d1:08:d1:de:2c:
90:91:79:57:f1:a7:9c:c9:82:7b:b6:97:8d:17:57:a1:d6:d1:
36:78:0e:a7:78:75:05:9c:ed:c5:3a:bb:47:06:95:0e:42:9c:
c3:7e:93:bb:92:82:1f:a8:66:8e:77:05:f6:04:65:75:16:fd:
5e:cc:99:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:18 2025 by rpki-client