Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
File: 8mJAZfhrTPmEjex9q4ak24bBXhE.mft (raw, json)
Hash identifier: 9av44h4YWmOZtv85/8LVf+8UVs8rO3zXoCRc17me3ZY=
Subject key identifier: C4:77:F4:8E:24:34:42:8A:EB:5B:1C:B9:97:CF:33:CC:C9:49:1C:E0
Authority key identifier: F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11
Certificate issuer: /CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
Certificate serial: 01965D5EB8E0926503E1517353513C643C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
Manifest number: F1
Signing time: Tue 22 Apr 2025 12:00:10 +0000
Manifest this update: Tue 22 Apr 2025 12:00:10 +0000
Manifest next update: Wed 23 Apr 2025 12:00:10 +0000
Files and hashes: 1: 8mJAZfhrTPmEjex9q4ak24bBXhE.crl (hash: /bk3VWiyZNjdOU+/6pbdYPN3+of59Cjl8RcbbYmKhbk=)
2: cD-tw650Z_Y6Vmxx9pyza1DBukk.roa (hash: wcc3gJVDDM85KdHRToySGGF6W2lO6V1fBEScrl4XQJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5e:b8:e0:92:65:03:e1:51:73:53:51:3c:64:3c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
Validity
Not Before: Apr 22 12:00:10 2025 GMT
Not After : Apr 23 12:00:10 2025 GMT
Subject: CN=c477f48e2434428aeb5b1cb997cf33ccc9491ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:c5:e2:5e:56:7b:91:35:52:8e:14:6a:9f:
f8:16:fb:55:57:b3:f7:d9:ef:b6:3f:17:b2:8d:9e:
48:22:34:d1:9d:1f:8e:03:42:09:b4:3e:e3:5a:0b:
6b:6d:cb:55:bd:a4:c3:60:d3:6a:b1:4f:cd:e2:d9:
01:d6:0d:03:c5:70:0b:28:81:9c:69:6a:ad:24:c6:
63:63:49:5d:0e:e9:78:31:75:ac:2f:44:9a:d7:b5:
b7:31:36:31:e8:84:a7:e3:fb:71:e3:13:fb:21:67:
6a:0f:51:21:47:d6:83:7a:e4:1b:6b:29:61:28:ab:
b5:1c:b9:28:42:6c:75:dd:78:3d:96:14:cc:24:e0:
6d:33:13:05:ec:54:32:9b:92:47:41:d8:cc:c7:f7:
b7:7e:eb:c1:ca:1b:d3:52:a0:2e:32:b7:67:45:09:
87:09:59:0a:f4:bc:61:e9:ae:ca:05:cb:fa:18:e4:
b3:d6:89:c8:7e:d0:26:92:b8:be:5c:76:51:12:0c:
89:49:08:67:5a:5d:38:20:ea:20:a5:83:26:22:d0:
83:f5:27:ee:ef:89:27:c7:93:57:f1:ff:1f:19:b1:
1e:e8:66:bd:d3:b4:e7:b5:6e:6f:25:4e:ac:c8:a4:
9f:c9:15:cd:5a:81:52:8d:f6:73:e8:77:92:cd:10:
23:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:77:F4:8E:24:34:42:8A:EB:5B:1C:B9:97:CF:33:CC:C9:49:1C:E0
X509v3 Authority Key Identifier:
keyid:F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c1:ea:bf:8f:ac:13:bd:1c:74:95:95:f0:58:b6:28:a0:4c:
ef:58:6a:e9:9a:ea:62:35:62:2b:87:1f:aa:17:91:fd:cb:40:
95:85:4d:1f:e1:92:32:92:70:e5:6f:30:dd:3a:d5:6b:03:59:
4c:bc:8a:d8:b3:81:f7:8d:b6:c0:ca:7e:b3:15:06:f5:f8:1f:
14:67:47:fa:a8:78:d7:d7:f0:54:48:56:4a:fe:e8:e6:1a:9e:
78:b6:5b:41:c9:e5:ca:5e:ac:e8:0e:68:b3:1c:47:69:93:e8:
19:ba:dd:04:5f:de:9c:8d:ca:0b:d6:02:50:52:88:44:d1:fc:
f7:37:46:ee:99:3b:40:7b:7a:67:ee:47:fb:57:0f:33:2b:c0:
28:99:25:8e:24:5d:c0:e2:40:19:56:25:78:e5:fc:1f:a0:18:
76:37:21:cd:a0:13:cc:ea:18:66:ed:aa:3c:ae:87:94:9d:9f:
bb:86:79:99:57:88:17:d7:60:7c:9a:27:44:88:1f:a1:cf:03:
d8:ff:f5:a0:8e:66:03:68:2c:ba:b6:cc:d0:a1:1f:ee:61:bd:
45:4a:f5:79:84:0f:2a:66:cf:c2:42:a9:aa:0b:47:05:3b:96:
30:6a:3f:04:15:b8:2b:d0:bd:cb:4e:35:b1:d5:79:89:ff:b5:
57:02:cb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:58:30 2025 by rpki-client