Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
File: P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft (raw, json)
Hash identifier: 3ayle1K2vzroH0CClkSILF4mj3HP2HB0FhQg47szTx0=
Subject key identifier: 1D:86:95:40:F7:78:01:E5:CC:EE:2A:6F:0C:46:2A:26:FD:BD:53:47
Authority key identifier: 3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A
Certificate issuer: /CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a
Certificate serial: 01965B02F62A508D6BB46A351B742389D0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
Manifest number: 0219
Signing time: Tue 22 Apr 2025 01:00:42 +0000
Manifest this update: Tue 22 Apr 2025 01:00:42 +0000
Manifest next update: Wed 23 Apr 2025 01:00:42 +0000
Files and hashes: 1: P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl (hash: 2TCGlDJsyV1032QVZEJzXJMZljl22Dp/GeSD6ucdtYM=)
2: PQ28rfbk5yXRYjcz-QOCkZ4ENM0.roa (hash: YSotQz0qiTv7LM37y7e6zhLaYImvG6ufZU+Z40/a72I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:02:f6:2a:50:8d:6b:b4:6a:35:1b:74:23:89:d0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fcff98aaa5b48dc6158d2fc65f25c5097b5e26a
Validity
Not Before: Apr 22 01:00:42 2025 GMT
Not After : Apr 23 01:00:42 2025 GMT
Subject: CN=1d869540f77801e5ccee2a6f0c462a26fdbd5347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:a5:7d:d3:ba:b5:ed:20:71:35:9b:8b:c1:
96:66:85:04:07:63:66:1e:e6:3e:75:60:71:ef:ea:
1e:19:4a:06:4e:57:bd:72:07:3f:a3:b6:1e:d2:55:
8d:59:63:5f:81:74:88:0a:a1:ff:a2:cf:c6:be:af:
87:86:14:20:3c:17:45:33:b8:b1:11:49:9c:2c:c6:
95:00:68:d5:f8:45:c3:7e:fe:c7:eb:1b:75:b1:7f:
e4:7d:6b:4e:1d:49:09:27:92:4b:c1:92:1b:7c:b7:
bf:5c:62:2b:41:54:bb:81:6c:2c:9f:44:b0:58:87:
aa:6a:a6:b7:84:19:5a:f8:f3:06:e6:85:c2:ef:1d:
f7:4e:c8:fd:dc:ff:47:ae:dd:1c:a2:7f:55:85:ff:
68:a9:a0:3a:66:10:8a:f5:a6:9a:75:3d:8b:33:97:
e7:c1:62:69:cf:6f:da:a3:fb:79:f6:2a:42:d3:e9:
68:41:fc:7a:0b:19:29:88:d3:a8:c5:f0:10:8e:4d:
6a:8c:1b:3d:7f:5d:f8:a6:47:4a:2c:ae:0d:c0:97:
a9:48:f3:8d:f7:91:e1:d7:3a:06:aa:f3:7d:aa:fa:
b7:d0:63:4b:7d:99:2c:57:94:f3:00:9c:87:91:ed:
13:6c:e2:8d:53:54:3d:a5:ba:da:8d:5c:c7:13:d3:
ac:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:86:95:40:F7:78:01:E5:CC:EE:2A:6F:0C:46:2A:26:FD:BD:53:47
X509v3 Authority Key Identifier:
keyid:3F:CF:F9:8A:AA:5B:48:DC:61:58:D2:FC:65:F2:5C:50:97:B5:E2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P8_5iqpbSNxhWNL8ZfJcUJe14mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3c5026-5011-4689-8367-7b4e5e184735/1/P8_5iqpbSNxhWNL8ZfJcUJe14mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f8:f2:29:09:dd:fd:65:e9:cf:b5:78:53:01:58:15:4a:03:
e2:2e:69:af:dc:e8:47:d4:47:4a:a7:e9:c3:ca:26:07:b5:de:
ad:f0:3c:a6:9d:b9:10:04:41:41:3b:04:f7:02:02:59:35:86:
c2:18:d1:16:1c:5e:17:c0:45:80:0f:6a:2e:cf:9c:48:23:39:
c0:8c:be:f4:dc:6e:b7:28:1e:d1:fb:cb:09:2b:35:36:c4:c1:
3d:42:de:0b:9b:0f:99:e3:5f:e7:96:22:21:95:be:0f:5c:76:
5e:d5:93:16:87:7f:20:53:bd:f1:8d:4a:32:43:df:da:61:a0:
18:7c:34:cb:60:1d:9b:28:d4:89:dd:a0:ca:25:7b:b1:e2:c0:
be:5d:e9:aa:23:d0:09:e2:d9:29:c3:17:65:c1:5f:29:d8:f9:
a2:ce:5b:7c:f7:34:34:4c:aa:27:1d:e8:c7:10:0f:c0:76:9a:
f1:79:cb:86:e2:66:4d:83:45:68:05:8c:3b:7c:3f:11:b8:60:
b2:d3:60:e2:64:15:62:0e:0d:21:31:4f:09:f0:b4:17:3d:b7:
9e:d5:b9:2c:04:cf:f4:2d:f5:be:b3:8b:04:81:ed:ed:a0:86:
dd:6a:05:69:d0:94:84:32:11:cf:78:ba:b3:7d:d3:60:d8:fb:
f9:db:e9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:07 2025 by rpki-client