Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
File: 8hVRewsgMJ6RZAW54e0hoEaaaJU.mft (raw, json)
Hash identifier: oRCvciBPadfwribLFD/6/WJrLhBkUk4sYgRwKUR3z5k=
Subject key identifier: 3A:03:8D:E4:27:D5:80:BF:25:DF:24:FC:92:AD:5D:CB:16:39:D6:8E
Authority key identifier: F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
Certificate issuer: /CN=f215517b0b20309e916405b9e1ed21a0469a6895
Certificate serial: 019656132FED17D885A21642AB54543E0747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
Manifest number: 012C
Signing time: Mon 21 Apr 2025 02:00:20 +0000
Manifest this update: Mon 21 Apr 2025 02:00:20 +0000
Manifest next update: Tue 22 Apr 2025 02:00:20 +0000
Files and hashes: 1: 8hVRewsgMJ6RZAW54e0hoEaaaJU.crl (hash: gnQxnku3Z/QYZTUZNU+/NWFtK54kqkGJN7m5HbVnFPA=)
2: qCeXwVNQp66WQ27Det0b9KrkJEc.roa (hash: WoKc3ldX5sHKUSOKMyS/VBt9xUxQrJ5xCbXpuIjQb48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:2f:ed:17:d8:85:a2:16:42:ab:54:54:3e:07:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215517b0b20309e916405b9e1ed21a0469a6895
Validity
Not Before: Apr 21 02:00:20 2025 GMT
Not After : Apr 22 02:00:20 2025 GMT
Subject: CN=3a038de427d580bf25df24fc92ad5dcb1639d68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:18:1f:43:5e:89:42:2a:a2:4d:98:ad:84:8d:
92:84:7e:a8:94:93:37:03:80:ad:c4:86:fe:c1:d9:
d6:e5:e9:7c:9c:ce:c8:0e:a3:eb:df:bd:53:7d:20:
ee:a8:31:9a:f3:97:21:9d:11:a5:99:29:00:c9:8f:
b1:dd:6a:e2:6e:1a:1a:07:3d:34:a1:36:3d:eb:a4:
9f:8f:42:69:e7:7e:b1:22:6f:1e:71:50:b2:bb:49:
d3:c3:14:9b:49:03:63:a7:69:e6:a0:c7:77:18:d0:
0d:9b:38:d9:cd:da:f0:f0:64:0e:c8:77:f5:48:db:
a3:91:50:f2:da:69:f4:76:fe:31:1d:3e:71:1d:38:
cf:0a:f8:55:6e:67:43:51:ae:21:97:12:3e:57:a5:
c0:ee:a6:d1:32:c6:d9:77:8e:8e:be:91:00:cd:16:
ff:ab:b4:b4:fa:ea:7d:c2:90:09:e6:3b:dc:02:ad:
52:5a:f5:0c:7c:7a:74:27:9d:88:ad:3f:5b:b4:62:
9f:57:bf:7e:b8:b2:5c:b1:ed:8e:e8:d2:2c:a7:ef:
9a:f4:e0:37:1e:c7:ef:bd:34:51:5b:57:77:3f:d9:
8f:f2:a3:97:1d:cb:ff:05:a4:17:12:15:9d:f0:b7:
fb:f2:32:dc:15:73:b8:27:39:ba:5c:b3:8c:60:88:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:03:8D:E4:27:D5:80:BF:25:DF:24:FC:92:AD:5D:CB:16:39:D6:8E
X509v3 Authority Key Identifier:
keyid:F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:da:9b:8c:b9:c4:1d:80:31:7b:ed:f9:ee:88:ec:c3:9a:60:
bc:db:12:15:42:92:f4:cc:58:89:93:3b:7a:40:c9:f3:6b:8d:
ee:38:91:7e:de:94:87:39:39:04:74:7c:30:f6:e6:0c:9c:1b:
c7:61:5e:20:ab:31:f9:d5:47:44:d7:07:f7:fc:4d:77:98:04:
2b:c1:8f:28:8f:f3:fb:79:0e:69:f6:f5:08:31:75:42:d1:21:
b3:ee:61:0b:5e:ea:31:a3:b3:71:fa:0d:93:4d:3f:30:97:41:
0d:05:da:cf:35:bf:1c:ac:29:8d:1a:e6:1a:25:9a:27:fa:11:
34:1e:db:35:65:f9:0f:76:bd:93:11:82:62:26:ac:c9:39:cf:
a7:fe:17:af:a5:26:01:6e:e9:30:0a:9f:57:dc:53:09:b6:88:
08:24:35:bb:e1:70:a2:7e:3a:9a:03:78:cc:b2:da:5b:5a:2d:
5b:27:88:59:e0:f4:4d:40:45:0e:70:9a:e9:9e:7a:36:fc:a8:
6b:cd:2c:dd:bb:c5:0c:a5:b7:c9:bb:49:ea:8f:29:5e:ae:52:
79:8e:b1:4a:05:90:cd:30:78:17:ca:31:fa:53:6d:ac:cd:a0:
6e:ec:e7:4d:35:12:d5:80:c4:55:37:62:3f:fa:8f:c2:29:48:
cb:50:0a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:12 2025 by rpki-client