Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
File: 8WmQKta3v0YB7qpecj7yPXD6dxQ.mft (raw, json)
Hash identifier: L77HfZqvkvCJhr66MokPOHtT2n6xGdZR8OClmEL7RIg=
Subject key identifier: 85:29:03:2D:F3:93:F7:09:2F:64:23:73:35:CF:01:11:C6:84:60:09
Authority key identifier: F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14
Certificate issuer: /CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
Certificate serial: 019655381A465782003CFF6C3719C43634CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 22:01:02 +0000
Manifest this update: Sun 20 Apr 2025 22:01:02 +0000
Manifest next update: Mon 21 Apr 2025 22:01:02 +0000
Files and hashes: 1: 8WmQKta3v0YB7qpecj7yPXD6dxQ.crl (hash: bsnSfDt5NEpdhFQyyD+WPnI+5swhtbsd+cQ/f6Gq6So=)
2: f0RuL1swXlvp41CLCru-Mt1TNyc.roa (hash: rkjC9/AqAR3AXAOW7ubyDoWQhwKzvm+Iu5S5RZdguhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:1a:46:57:82:00:3c:ff:6c:37:19:c4:36:34:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
Validity
Not Before: Apr 20 22:01:02 2025 GMT
Not After : Apr 21 22:01:02 2025 GMT
Subject: CN=8529032df393f7092f64237335cf0111c6846009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ef:d6:91:81:3c:e1:38:68:ab:4d:7d:f1:d0:
13:dc:72:74:63:f7:ce:71:18:cf:15:c5:48:2a:16:
1b:9c:cd:ec:5a:57:11:3f:14:6f:9c:d3:95:22:a0:
bc:03:82:f5:15:c9:fc:59:9c:de:df:30:64:ac:50:
d4:8c:66:53:23:92:72:e8:cb:ee:2b:e7:f0:fd:7e:
bf:27:52:08:55:c0:0c:d3:d0:4f:10:4a:e9:c2:96:
8f:0e:fc:f1:5c:67:d4:69:28:f2:2f:7c:3d:42:5b:
b3:fa:d8:aa:f2:90:50:b9:5e:8f:75:ea:42:cd:4d:
10:35:80:2a:88:56:54:72:03:85:4e:df:5e:e8:85:
ce:d5:41:20:bb:54:82:bf:e0:4e:80:16:fc:7f:13:
8a:80:1f:00:b1:c9:02:36:1d:5d:0e:53:1c:05:44:
5b:c3:48:28:af:27:32:22:c2:4a:10:70:d8:c7:c7:
af:e4:72:4b:02:d6:a9:4e:47:22:22:b0:9b:5c:c3:
c8:59:42:f1:3e:c7:6b:c5:1a:06:2c:a5:9b:6a:e1:
92:5e:f0:22:ae:cf:56:a1:74:7f:96:66:e8:be:5e:
de:f6:9d:2a:e0:72:e8:e5:f7:06:70:dd:cd:f4:43:
0c:3a:b4:69:bb:cc:45:bb:57:c5:97:79:f2:4c:1f:
1a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:29:03:2D:F3:93:F7:09:2F:64:23:73:35:CF:01:11:C6:84:60:09
X509v3 Authority Key Identifier:
keyid:F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a1:c0:fd:1d:ff:e7:47:27:9a:62:82:b4:26:92:67:0e:8a:
42:72:30:c1:bb:22:f7:7c:c6:50:04:b3:87:8d:27:9a:3f:01:
65:ab:21:ac:d3:7b:7c:35:e2:be:93:d1:d1:0e:4b:72:20:ec:
87:43:f1:50:c0:34:6c:da:85:a8:66:0a:f8:06:e0:b9:67:3d:
03:7d:39:28:ae:8c:44:14:a2:58:f0:49:a4:e0:21:29:71:f4:
a6:a0:17:aa:7c:0e:57:e8:09:76:51:eb:99:41:60:2e:79:85:
99:e8:b2:41:f8:b8:b6:5c:90:e2:2e:33:2a:69:74:d7:aa:33:
ba:c5:ca:ec:a9:65:d9:81:91:5e:f6:a4:79:e0:75:ca:95:9b:
42:8e:1e:0c:20:c7:c5:03:76:75:9a:ce:96:3e:a1:7f:03:44:
e9:fb:98:00:5b:1b:b5:3d:6a:65:7f:5e:35:4a:cc:12:8c:03:
04:27:eb:2b:b8:fb:e9:53:56:23:2e:aa:87:62:6a:41:92:a0:
3f:9c:d4:f7:ca:ad:6a:b1:bf:19:7a:f1:b7:25:b0:c4:3c:6e:
4c:08:99:2c:81:00:7a:fa:ea:8b:b7:36:29:4d:2f:14:67:8b:
ed:c3:12:8f:09:4a:cc:38:fc:3a:a7:06:64:33:0c:33:4c:5a:
c8:1e:43:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:59 2025 by rpki-client