Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
File: c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft (raw, json)
Hash identifier: edoj8zwS1wZD6UPZrXGs0xK8IcwM03m1MQcWI0s1z4Q=
Subject key identifier: CA:AC:D8:C3:6C:AC:5B:5C:19:26:78:49:FD:A8:F6:8D:C7:0F:B9:5A
Authority key identifier: 73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
Certificate issuer: /CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Certificate serial: 01966028E63031E2BAB6BE9BCB0B6554A5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
Manifest number: 1503
Signing time: Wed 23 Apr 2025 01:00:15 +0000
Manifest this update: Wed 23 Apr 2025 01:00:15 +0000
Manifest next update: Thu 24 Apr 2025 01:00:15 +0000
Files and hashes: 1: YlBw5zZMyGmVSKcyUcis3LeoBu4.roa (hash: FNW2TVY99VnemA7lyfpV1rEplwNPKCZ+roIw6UfcWJE=)
2: c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl (hash: OGwmWGhLFz9WNQM1iNnfHMB4mGNIcdtWFTKRyiJ78/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:28:e6:30:31:e2:ba:b6:be:9b:cb:0b:65:54:a5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Validity
Not Before: Apr 23 01:00:15 2025 GMT
Not After : Apr 24 01:00:15 2025 GMT
Subject: CN=caacd8c36cac5b5c19267849fda8f68dc70fb95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:20:c8:f5:44:dc:e3:ab:9e:c9:11:fd:0f:a0:
0b:1c:6b:ea:b2:bc:88:c1:4a:6f:f7:96:e5:38:cd:
5c:3b:3e:0e:a0:2c:9f:af:06:d5:ae:43:a4:fe:46:
9e:2e:2d:eb:0b:e6:37:78:46:d5:c7:38:e3:19:23:
08:ae:70:26:53:46:c3:15:d1:ad:74:9a:31:74:78:
9d:f6:05:87:f4:a1:22:ae:5c:bd:58:b2:4f:5e:89:
42:fb:ed:da:6e:e2:5c:73:b0:30:3a:bb:64:7d:3a:
14:5f:fe:99:b2:fe:d5:20:15:3e:20:64:4b:9a:ca:
79:c4:8d:5d:80:8b:61:76:af:c2:38:d8:38:b7:eb:
7d:c3:0f:35:4b:3e:82:7d:a8:4c:fa:9d:e2:dd:9e:
74:2c:d8:78:e0:5c:d7:cf:81:d0:06:41:4f:98:da:
0e:4a:f3:3b:b6:95:d8:1a:d6:ea:50:1d:ba:de:ae:
20:91:e4:25:67:a0:a5:e8:1f:88:02:84:6c:22:44:
1b:b0:bf:64:5e:4b:86:1a:b0:e9:49:1e:41:0f:88:
32:87:32:74:7e:b4:27:92:5e:71:85:fa:a1:b0:40:
c0:f8:aa:e5:84:57:5f:2a:c6:d8:9a:7a:6e:29:10:
42:0d:3a:50:06:6a:cc:03:49:81:54:04:9e:7b:d8:
c4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AC:D8:C3:6C:AC:5B:5C:19:26:78:49:FD:A8:F6:8D:C7:0F:B9:5A
X509v3 Authority Key Identifier:
keyid:73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:bc:73:0a:92:4a:d6:51:9e:f8:e4:fd:eb:61:6d:d4:2b:48:
85:ba:00:04:b0:42:c5:63:13:aa:5e:61:a7:3b:a6:e7:c2:87:
37:71:9e:8c:6a:65:93:41:12:3c:e4:a7:4f:c7:94:ee:fd:c3:
ec:30:cc:90:c2:2b:06:8e:49:22:50:36:7f:93:2e:7a:f8:9c:
97:75:62:20:8d:9a:98:6c:56:30:7d:43:7d:c5:aa:2d:35:1c:
d7:e9:ce:f0:d8:fc:2c:73:bb:ac:39:dc:96:23:16:40:63:06:
47:d1:c2:71:8d:4a:28:51:cb:c5:5c:24:10:4c:31:df:73:75:
bc:b7:ad:87:b4:5f:a6:f0:90:83:1a:d5:64:56:8c:e1:df:4f:
3b:07:e7:34:7b:87:50:30:f9:cc:f0:a6:8f:d5:11:6e:c3:71:
b9:45:ed:6d:fa:21:08:df:e3:15:ba:11:f6:92:5b:70:43:fe:
d4:1c:5e:8c:eb:63:4c:39:2b:a8:d2:e3:21:da:4d:f1:0c:ec:
72:59:6f:74:0f:0a:9c:ff:39:56:5b:86:77:47:e8:77:01:ee:
85:ff:d4:e2:f3:bb:03:78:1c:9b:11:84:3c:b5:9c:63:2d:ac:
c3:67:f7:c9:53:84:58:e8:7b:31:81:e1:a5:cf:8a:af:44:72:
80:ab:ed:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:00:54 2025 by rpki-client