Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
File: 8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json)
Hash identifier: 21Kf5/8r0gkEwt6j0WleClxlt4qpz9Xv2oHewc1YRhs=
Subject key identifier: 51:70:54:48:60:C1:C6:AE:27:2C:3C:89:2E:C0:96:79:1F:5D:2F:74
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial: 01965DCCE501BF55B7C88842698E235A520B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
Manifest number: 0998
Signing time: Tue 22 Apr 2025 14:00:31 +0000
Manifest this update: Tue 22 Apr 2025 14:00:31 +0000
Manifest next update: Wed 23 Apr 2025 14:00:31 +0000
Files and hashes: 1: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: +W1cd+poS8sTjUcjEdVeHjWDxQxbcPZsMQNghAtUxbU=)
2: TwUAmEwQxO2jeeE0IG7nOUuBRU8.roa (hash: 5uZF7JHC6Cu/tuWa9kusO7lA0+dh5OGQEqs1E5VZ/5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cc:e5:01:bf:55:b7:c8:88:42:69:8e:23:5a:52:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Validity
Not Before: Apr 22 14:00:31 2025 GMT
Not After : Apr 23 14:00:31 2025 GMT
Subject: CN=5170544860c1c6ae272c3c892ec096791f5d2f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b0:7e:9d:8d:72:c5:d0:ab:91:54:ac:d0:f8:
0a:65:41:7f:53:36:75:e3:03:7b:5b:b6:ce:e2:94:
f2:0c:ed:36:05:82:6d:0f:79:ab:56:79:f8:c1:89:
7f:90:bf:4a:c4:43:9b:d0:00:8e:32:d6:28:6f:0a:
f1:73:04:4c:f9:57:2e:09:c4:7f:9e:ae:a3:45:0d:
7f:c5:15:06:21:4f:81:9e:70:e2:e0:8e:ef:f1:dc:
e9:fc:41:72:dd:c4:57:32:ba:e9:d7:16:01:29:f0:
92:17:dd:fc:2a:28:cd:42:47:f3:c5:27:7d:d6:44:
94:44:8c:da:f5:af:4d:7a:f1:24:f1:db:9b:61:46:
ef:02:39:f4:61:99:fd:25:c7:79:37:db:26:df:36:
d1:05:2e:e1:05:6d:d1:53:4a:a7:3e:0b:14:69:f4:
5f:30:75:a5:65:62:fe:4c:b7:bf:5b:bb:45:79:05:
d1:c3:e4:1a:d7:a9:e3:6e:68:f2:ec:99:e3:d8:e7:
50:41:54:fa:b7:7e:41:5f:e4:8b:ab:35:c0:40:e4:
5b:1c:50:0a:78:fe:a0:2a:ff:2a:9f:a0:33:b8:4d:
c7:18:92:c2:5b:d3:99:2f:d8:2c:88:86:0d:6a:f1:
97:16:57:51:00:09:58:0d:d4:5a:2c:9e:81:4b:c9:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:70:54:48:60:C1:C6:AE:27:2C:3C:89:2E:C0:96:79:1F:5D:2F:74
X509v3 Authority Key Identifier:
keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:05:62:77:ba:ad:12:a0:82:bc:7c:e4:38:8b:2a:cb:e9:26:
00:0a:8c:bd:a8:d6:49:67:ad:6f:d3:49:51:62:6a:b2:67:1e:
ac:7f:8b:be:d6:b9:74:49:ae:c8:6b:ea:ff:84:1a:57:33:eb:
78:71:c4:92:b1:49:b2:f3:59:98:5e:aa:c3:ec:6e:3e:7d:2e:
25:9f:43:f3:2e:5e:84:3c:c0:37:ef:3a:4e:dd:c5:15:68:47:
76:97:b2:2f:ec:f9:6e:24:d2:98:c7:6a:95:57:22:ba:32:b8:
42:a5:da:26:01:02:bd:1b:67:12:1c:4b:da:01:9c:86:49:9b:
5d:8e:ef:a8:a6:85:df:04:07:6c:1c:76:3a:0a:de:3c:0b:8b:
1a:ae:74:04:0f:ad:ac:1c:5d:e4:c6:52:13:0a:c0:ef:6c:60:
e1:62:fc:a9:48:98:9e:af:48:cc:63:4b:31:e2:7b:2d:59:47:
f4:69:61:e2:66:70:45:ff:3e:e7:2f:0a:d8:ea:b9:75:79:8e:
ef:ac:be:32:7d:e2:94:60:fe:6f:54:e6:7f:20:68:a6:a1:f6:
39:61:a7:94:5a:97:9e:80:60:29:4c:36:e0:12:d6:04:28:2f:
8b:20:0c:36:41:58:60:bb:d9:8a:10:27:1d:07:34:c1:35:86:
4e:4e:0f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:59:47 2025 by rpki-client