Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
File: f8lWpStzUEpPH_NFRxmSl6f13p0.mft (raw, json)
Hash identifier: 7W5mkkLLPOJEnubDO9VwNcmUJDvrX54zy6aUDibAWTU=
Subject key identifier: C0:7F:A8:C3:F8:5C:5F:1B:65:57:75:20:27:D2:DF:0C:A2:FD:62:F7
Authority key identifier: 7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
Certificate issuer: /CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Certificate serial: 0196575CEADF7C2D0EADC6346F94E03902B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
Manifest number: 08B2
Signing time: Mon 21 Apr 2025 08:00:29 +0000
Manifest this update: Mon 21 Apr 2025 08:00:29 +0000
Manifest next update: Tue 22 Apr 2025 08:00:29 +0000
Files and hashes: 1: f8lWpStzUEpPH_NFRxmSl6f13p0.crl (hash: 2raw8XcC9HIBjvQqoeKr0BUsjlAPAWXR0LE94wARywQ=)
2: oABxc2AhceHbFWdSMSjl8hsmwIU.roa (hash: TEY8sctZHera/7HF2OtPuy78+8vJU3t66DtmPXEJjBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:ea:df:7c:2d:0e:ad:c6:34:6f:94:e0:39:02:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Validity
Not Before: Apr 21 08:00:29 2025 GMT
Not After : Apr 22 08:00:29 2025 GMT
Subject: CN=c07fa8c3f85c5f1b6557752027d2df0ca2fd62f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:0f:53:9f:69:3f:92:9d:77:01:40:c6:9e:
c3:84:32:ac:a1:ff:d8:b8:d6:b9:f1:db:55:e2:e7:
83:86:1a:0d:fb:6d:64:83:64:1d:9f:30:7f:e7:24:
21:64:cd:45:59:dc:c9:ec:9e:f5:9e:9f:13:22:16:
a8:3e:73:98:cd:f3:97:42:74:f3:94:66:19:f8:0d:
17:c8:5d:a1:b3:7e:a2:52:e6:ee:1d:73:d4:46:fd:
b8:a2:ac:25:5d:8e:09:4a:b3:f2:d4:7b:07:f0:24:
5b:06:b8:ce:0b:75:3e:7d:1c:aa:a8:2a:22:d4:d5:
a1:85:78:79:6f:ef:27:60:c0:a4:d4:5f:aa:da:96:
23:ef:fb:53:08:92:08:89:d0:a6:2f:25:7f:6b:01:
66:0c:8c:38:bf:eb:16:ca:fb:60:16:f9:4a:f4:72:
18:86:dd:71:86:c2:07:b3:7b:a7:3f:fb:64:74:6b:
41:97:0c:2f:30:9f:5d:03:06:6b:7b:f1:02:5d:52:
d8:c1:06:57:11:4c:03:12:ff:c2:22:5c:76:e0:e8:
23:a5:64:77:13:da:08:de:74:ca:b3:4f:87:81:37:
80:d0:60:a8:4d:23:34:1d:33:19:bf:29:fa:84:1b:
8c:76:7e:c0:02:69:b0:12:4a:87:82:3f:5f:e4:22:
25:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7F:A8:C3:F8:5C:5F:1B:65:57:75:20:27:D2:DF:0C:A2:FD:62:F7
X509v3 Authority Key Identifier:
keyid:7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:14:91:b3:e5:31:44:74:10:99:4a:4a:b3:88:27:38:8e:20:
ae:0d:fe:86:b9:28:73:ff:c2:ef:d7:d7:4e:6a:e8:c1:70:61:
7c:18:17:64:83:d6:65:ca:76:37:30:97:ba:91:ce:83:f2:b1:
a8:df:27:1e:60:20:e7:ea:2c:b9:f7:24:c4:1d:02:cd:7d:16:
cd:3e:3e:80:db:79:46:c7:02:af:56:46:fa:87:58:dc:c9:50:
be:a3:58:68:87:2f:b1:a7:f6:38:f6:4b:25:6d:1c:02:d3:5b:
75:e1:a9:4f:e8:86:17:4e:a7:da:b0:40:06:bf:53:7d:54:7d:
40:f2:f2:c5:55:a4:0a:ea:d2:fc:d0:5f:8b:26:ab:74:26:5c:
56:05:32:dc:61:11:12:71:ca:29:19:33:8e:de:64:ea:c2:0f:
a7:eb:d5:87:6c:9d:70:20:f7:cd:b2:84:f3:a2:2c:a3:aa:de:
29:df:5e:5a:f5:24:7d:7d:e0:2c:fd:fe:f8:97:e2:2f:c6:1e:
7f:bc:02:45:16:5e:04:17:7f:83:a3:32:10:83:d0:2c:1a:b7:
d5:70:0f:6b:c6:a3:ca:ee:ce:ab:f6:d4:84:e9:4f:ef:76:f2:
73:34:51:2c:30:27:0b:15:be:72:b7:b2:db:35:d7:d8:a5:25:
c5:cd:ce:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:27 2025 by rpki-client