Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
File: s8k12EMWos9WpllXttebevgRpwc.mft (raw, json)
Hash identifier: ee+HWNpT7NCV5lyM16PZCJZTOQSK/xxLED90GrVimKc=
Subject key identifier: A5:A3:53:38:47:9E:00:BD:C9:49:BF:FC:0A:49:B8:A4:7B:CD:79:F2
Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
Certificate issuer: /CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Certificate serial: 0196515AE2A46567CA89C8EDEB1B719D8635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
Manifest number: 07EE
Signing time: Sun 20 Apr 2025 04:00:32 +0000
Manifest this update: Sun 20 Apr 2025 04:00:32 +0000
Manifest next update: Mon 21 Apr 2025 04:00:32 +0000
Files and hashes: 1: s8k12EMWos9WpllXttebevgRpwc.crl (hash: OFrbLnnsxcla0l2lT3+eXPUamCiLJ9Ozo19XTCz9LR0=)
2: udh3xGDNJXhOcF-5H4cWJu3ktiY.roa (hash: ocPGT+ldVCPhS+IwJUZcLKrDX+p6H2fIq+UgAUlkPrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:e2:a4:65:67:ca:89:c8:ed:eb:1b:71:9d:86:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Validity
Not Before: Apr 20 04:00:32 2025 GMT
Not After : Apr 21 04:00:32 2025 GMT
Subject: CN=a5a35338479e00bdc949bffc0a49b8a47bcd79f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:c8:e5:25:c4:c8:a9:8f:58:12:81:6c:4a:
57:fa:2c:22:85:c5:df:63:38:4c:ed:db:ad:1a:4d:
c9:2d:76:6f:73:59:9f:66:61:e0:af:8b:3a:fd:e2:
d9:ed:6d:59:0a:7d:64:d1:1c:a1:91:91:d0:dd:f8:
70:81:ce:6c:a9:b9:1f:bd:ae:d8:d8:d1:c5:da:b9:
6a:e6:20:5a:47:39:01:ba:8e:af:09:77:7f:19:21:
3d:d9:6a:4f:51:e6:6d:93:b6:f1:be:fe:56:1f:42:
6b:c0:fe:07:da:23:b0:95:d2:01:50:e9:6b:61:c3:
d3:a3:56:6f:a9:7b:f4:99:75:13:95:01:82:ac:f7:
dc:ff:c3:cd:35:85:ad:36:9e:30:c0:b7:3f:66:bd:
ec:ec:8e:e1:09:16:fa:f3:fe:1a:fe:c5:9f:a6:39:
db:99:4e:d3:e0:d6:cb:7e:5d:14:85:a8:00:93:ad:
e0:7a:1d:a4:b8:fe:f4:eb:fd:02:11:86:39:1b:13:
70:43:fe:ee:8c:53:0b:49:fc:b6:77:f3:d8:9d:2d:
b7:63:c4:f6:80:8e:0f:79:62:98:69:6d:05:98:1c:
ed:2a:67:31:c2:e4:55:cf:5d:92:d4:1f:0c:12:f4:
71:54:20:08:86:3e:b6:ba:fe:36:07:21:77:af:db:
95:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A3:53:38:47:9E:00:BD:C9:49:BF:FC:0A:49:B8:A4:7B:CD:79:F2
X509v3 Authority Key Identifier:
keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f7:5b:95:17:d9:90:76:69:58:fc:6d:d0:f8:22:d1:ad:3d:
bd:ba:6f:3e:86:b9:8f:73:d5:e4:b8:d6:de:d9:f9:a9:1a:ab:
c2:89:52:53:e6:e9:8f:00:40:64:72:b7:24:08:87:1d:cd:1f:
1d:e6:8f:b1:77:47:94:1e:e4:b3:70:71:22:e4:19:a4:0c:7d:
c8:b6:a3:18:0f:d8:c5:89:d2:15:54:60:f7:ce:40:b2:72:27:
c6:79:04:95:4f:00:ad:98:b6:fc:70:45:59:1d:6e:e4:c1:00:
a8:65:05:5a:98:72:af:f7:5f:dd:56:da:3a:54:08:b6:c2:5c:
5e:ab:9a:3e:0c:b6:8b:22:a8:60:a1:7a:33:e1:94:2a:ed:0f:
ef:6d:36:01:7b:b2:30:92:68:2b:5f:1f:1f:5f:66:d3:9e:56:
f6:94:1f:e8:65:b8:32:ac:9d:4c:5e:15:a2:7e:fd:41:68:e4:
0b:fd:76:53:4f:ee:57:8c:fa:b8:72:f8:0b:bb:21:fa:11:61:
44:30:00:2c:96:96:22:52:55:f8:3e:a6:30:92:05:36:10:fe:
21:1d:33:c3:07:ae:7e:c2:4e:5e:50:a4:2d:68:10:ef:2f:4f:
ff:2b:f5:6d:b4:d5:4c:6c:08:40:38:32:5c:0b:a5:81:16:0f:
07:fc:6b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:02:34 2025 by rpki-client