Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
File: 8fQjYKOXCoCAFv342NujlsWh0DQ.mft (raw, json)
Hash identifier: P3v/ny4++ZV9/7jIitktYoG80lWeeWaq0rjLrhY9mEU=
Subject key identifier: 34:0C:B7:34:64:A3:DA:9C:9E:1E:29:0E:37:13:D5:28:26:8D:E3:05
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 0196150F6A6306821D3C765AD0AB4D787F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
Manifest number: 14E2
Signing time: Tue 08 Apr 2025 11:00:53 +0000
Manifest this update: Tue 08 Apr 2025 11:00:53 +0000
Manifest next update: Wed 09 Apr 2025 11:00:53 +0000
Files and hashes: 1: 8fQjYKOXCoCAFv342NujlsWh0DQ.crl (hash: BkoBwaHodgpMYFvCsAtsL8lec1sJBV9OQw4otytiMGM=)
2: XuSi8kXeBm_B8q7AzG1ldyxBl-U.roa (hash: VfVAqS9+xLim6Zr3WY+RPdJPag+yTxoDEH7wLbaR7Ko=)
3: w31LkDj-LMN5WUk5kbozH3jiIBA.roa (hash: y5CKPYN2xY1V73cNd1uJ1GGyUm72KbaIXZc2V61uNZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:0f:6a:63:06:82:1d:3c:76:5a:d0:ab:4d:78:7f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: Apr 8 11:00:53 2025 GMT
Not After : Apr 9 11:00:53 2025 GMT
Subject: CN=340cb73464a3da9c9e1e290e3713d528268de305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f0:ce:e8:d3:fc:3c:79:ee:a5:5e:d6:20:74:
c3:d6:a1:6d:58:58:e1:50:a3:38:ac:4a:36:1c:fc:
64:66:91:82:d5:15:7a:5a:c1:72:a7:27:99:b4:f0:
f9:52:d7:7a:da:06:7e:34:b6:56:39:ea:fb:76:e2:
2d:83:87:d3:00:0e:ae:10:ee:f2:22:47:86:a3:45:
a0:4d:2f:9e:dd:99:c7:54:d4:6a:1f:7c:29:9c:a1:
4d:bc:89:37:18:dc:8c:d4:72:dc:04:be:ed:23:6d:
67:e3:c2:cf:ab:cb:0d:97:e1:83:9d:7b:59:55:2f:
e6:f7:f1:8f:89:cb:03:87:28:5e:e3:e6:a9:25:cb:
05:57:02:c4:d4:04:a3:ed:3f:ee:2d:92:13:91:37:
27:0a:63:21:e9:ff:1f:4a:d6:58:71:ec:09:60:e5:
cc:3d:94:80:5d:01:46:0a:55:e0:92:c5:56:bf:e9:
51:f1:e6:26:f5:95:14:61:03:a3:83:7e:7e:5c:b3:
ff:08:f4:bf:a7:8c:eb:8a:78:b3:95:d0:44:52:20:
af:13:82:58:ce:79:b5:ce:1a:21:00:cd:9c:be:fd:
41:e7:fc:3d:79:9e:d4:46:44:44:d3:e3:6d:a1:81:
70:56:a8:6b:a0:6d:4d:9b:83:c9:ac:f6:3f:bd:0c:
34:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0C:B7:34:64:A3:DA:9C:9E:1E:29:0E:37:13:D5:28:26:8D:E3:05
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:07:07:cb:09:78:88:55:25:bf:63:09:9f:2c:5f:e0:2a:4e:
a2:1e:93:4f:5d:11:1b:3e:1d:16:44:7b:d9:ea:6e:ac:7c:52:
d7:df:93:38:b0:95:84:1a:f5:17:eb:b5:a9:0c:e8:5e:30:90:
ea:c2:87:29:05:09:2f:4c:79:f2:07:14:eb:eb:c8:07:91:fc:
ff:37:1a:af:6b:eb:46:9e:8d:08:95:29:0f:df:db:76:5a:8a:
dd:47:c0:dc:13:b4:34:b6:52:dc:23:cf:f9:4e:8b:d4:56:b4:
f7:99:67:9d:1c:83:96:45:60:05:d2:b3:3f:4d:e9:b6:e1:02:
89:97:0e:b7:38:6e:34:17:9b:49:60:10:be:43:40:e6:26:91:
06:a6:bb:d3:9f:d1:7b:36:cb:e5:ef:f8:79:cd:15:1b:42:2a:
31:a3:81:1b:43:fc:f0:ce:ed:5b:fa:d3:cc:8d:95:70:26:83:
77:3a:b2:06:0f:fd:99:74:77:9b:d9:f8:5b:0a:f7:53:c8:25:
de:b8:4f:5f:4a:85:fa:3d:b9:d6:21:41:45:94:1d:21:dc:f6:
2c:d6:96:54:29:37:94:8d:57:e6:c7:55:bc:63:dd:d2:46:d4:
2e:14:bc:11:4e:e0:b0:38:1b:8f:03:fc:3c:5e:88:de:5d:92:
87:0f:0f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:01:03 2025 by rpki-client