Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
File: 80HP7DgTH4OuPfaZj6AoN1hckd0.mft (raw, json)
Hash identifier: F9sCRaUX0GtHxEk3PYMxPwbCN1exo70/15UFfnri1s8=
Subject key identifier: ED:DC:35:FF:1C:0B:46:CB:4E:D8:AC:C7:E8:D3:8E:65:8B:09:1F:0A
Authority key identifier: F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD
Certificate issuer: /CN=f341cfec38131f83ae3df6998fa02837585c91dd
Certificate serial: 0196568139349AEB1870F96A7CAE4E7BA867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
Manifest number: 1495
Signing time: Mon 21 Apr 2025 04:00:31 +0000
Manifest this update: Mon 21 Apr 2025 04:00:31 +0000
Manifest next update: Tue 22 Apr 2025 04:00:31 +0000
Files and hashes: 1: 80HP7DgTH4OuPfaZj6AoN1hckd0.crl (hash: FNeFcM2U65dqUgxKRPLngVsfgwj4gUGLN18jphI9u1s=)
2: 8wprXMKHFgaJbtrRl-7EoukrioE.roa (hash: q8PQ3gfYER2buU7f4CIdxjaKSrkMPorOzRr37JwbNA8=)
3: 9xeSR24sxZMuke8WWQxRtYGVLEg.roa (hash: oz0m8zrhKTQoSNw6FTxtRasHRF9fge7GFhftXk33fk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:39:34:9a:eb:18:70:f9:6a:7c:ae:4e:7b:a8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f341cfec38131f83ae3df6998fa02837585c91dd
Validity
Not Before: Apr 21 04:00:31 2025 GMT
Not After : Apr 22 04:00:31 2025 GMT
Subject: CN=eddc35ff1c0b46cb4ed8acc7e8d38e658b091f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3f:85:3b:15:3b:37:f5:9d:5f:72:19:cd:bb:
83:5d:cc:ec:92:b1:b1:9b:46:fd:9e:7b:17:3c:d0:
1d:c8:31:c5:6a:87:9c:86:3e:fa:34:49:eb:c2:70:
c9:35:28:9a:70:9d:db:00:0e:a3:ff:24:dc:7d:2d:
0a:b3:1a:0d:a3:1f:bc:0e:94:36:4f:8b:62:08:04:
c8:d1:9c:f7:6b:13:80:ae:cb:2e:74:40:83:b3:be:
b6:65:bc:08:2a:dc:3b:5c:1f:f6:c6:90:aa:c3:80:
8a:0d:33:f1:3d:2c:fc:d8:29:02:82:54:0a:60:ea:
63:6e:7c:f3:bb:c1:d4:0d:db:27:ed:93:f7:5e:54:
85:1f:7f:55:8c:22:f4:3d:da:50:c2:9b:d7:ef:70:
7c:3a:ce:06:f0:db:13:6d:a6:f6:b8:3f:91:dd:69:
f3:c2:90:cb:0c:78:06:e0:22:b0:ba:a5:31:4c:cf:
1d:f1:92:d2:0c:2e:37:ef:e3:94:d2:e7:41:ad:35:
52:f4:fd:00:48:68:84:60:cf:24:29:b6:33:e3:50:
12:b3:5e:9b:ca:c3:c1:4a:7c:8a:a6:a2:25:7e:69:
f0:30:4b:c5:42:11:a7:87:cf:28:46:4c:a3:79:1a:
a0:05:ce:82:49:77:e6:08:ab:6b:29:17:4b:21:8e:
7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DC:35:FF:1C:0B:46:CB:4E:D8:AC:C7:E8:D3:8E:65:8B:09:1F:0A
X509v3 Authority Key Identifier:
keyid:F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c7:30:b0:f0:85:17:21:08:35:b1:3b:30:f4:cc:c7:0b:13:
b4:02:d2:eb:a1:2d:de:8a:0e:27:85:82:00:0b:c4:0d:31:2d:
87:22:00:7f:b7:b9:57:7a:9e:96:ac:ba:ec:27:fb:2f:dd:24:
02:aa:8c:9e:bb:79:05:04:e6:89:1f:09:e5:d5:ee:7d:25:84:
81:eb:e0:b4:37:a5:2e:87:89:bb:69:fe:9f:36:4c:b6:e5:27:
a3:12:1b:03:ae:9d:0e:c0:e4:2a:56:9a:84:04:ae:cb:f1:86:
1a:d3:fe:c6:be:b5:af:80:f4:6c:1b:2f:f8:63:29:dd:0b:16:
2a:76:c4:f4:8c:c8:86:70:62:33:78:32:d4:af:b0:c4:fb:c2:
36:32:73:d7:47:3e:84:c9:40:d6:1f:a8:33:34:ab:f1:82:1a:
61:5e:b6:25:3e:8f:13:0f:cb:ce:68:b5:00:03:e6:5f:f8:03:
73:09:e9:00:87:3f:cb:d5:be:dd:c4:f4:c4:a9:42:cb:d9:a9:
97:9c:30:61:8c:97:88:5b:70:81:fc:24:41:98:60:14:fc:4d:
a8:d0:59:aa:58:ae:a3:0b:c3:91:1b:89:b5:8c:eb:92:e8:da:
ef:c5:32:e0:6d:2a:c6:ad:1a:f9:62:9d:8f:2b:33:f7:16:df:
ed:45:65:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:42 2025 by rpki-client