Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier: igojcUnb+/vQ1UZo4/YQEoLYzLSqPuhr/+w+gquZy7g=
Subject key identifier: F1:8E:CD:09:1D:FE:D1:D0:A9:7A:C7:65:48:EE:9A:9C:A7:17:C4:78
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 01964CA23B1E29159AA1B04A6DFD3DBFA4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number: 0C87
Signing time: Sat 19 Apr 2025 06:00:22 +0000
Manifest this update: Sat 19 Apr 2025 06:00:22 +0000
Manifest next update: Sun 20 Apr 2025 06:00:22 +0000
Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: qaPTVEfNy8lnXTo1+Il/ZcEz49L8a7KZgungHrmoG9s=)
2: Nh04CLMcck1XHS9AATe9hyD29NE.roa (hash: KRd9oxirDVyH2M186/c3VQHXMTtIMq/vRs5kMb4jBs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:3b:1e:29:15:9a:a1:b0:4a:6d:fd:3d:bf:a4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: Apr 19 06:00:22 2025 GMT
Not After : Apr 20 06:00:22 2025 GMT
Subject: CN=f18ecd091dfed1d0a97ac76548ee9a9ca717c478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:1c:00:14:0a:9f:a7:ec:1f:e8:6c:8d:0a:
fb:ff:fb:60:7c:ef:d8:a4:97:6c:6e:55:9a:1c:01:
1a:d5:5c:3b:11:26:87:d1:49:fd:9a:70:c4:0a:f8:
a2:b1:1b:2e:c3:53:7d:b4:f5:ab:73:84:2e:4d:ec:
49:18:d0:27:f8:92:bc:a6:a4:f4:16:bb:0e:54:4f:
65:21:94:ea:19:b8:56:71:ce:d3:37:85:38:02:a4:
f7:9d:a8:6b:1f:9d:58:74:cb:7b:14:11:d8:ff:34:
7a:9f:97:1e:70:f0:fa:e3:83:6c:00:c4:91:f3:d7:
d9:b0:b8:4b:f1:c2:42:e8:43:3d:a8:f0:3e:86:af:
62:48:fe:39:fa:38:27:42:fd:77:6c:22:0b:0e:54:
ef:c5:b8:88:24:1d:d2:4a:f9:b1:fa:7e:d3:97:75:
dc:66:2b:d2:a2:37:7b:89:aa:60:e9:7f:10:50:67:
0b:ad:6c:e4:4b:a8:31:d3:89:82:3b:2b:69:b6:16:
be:0c:c0:4a:c5:c9:df:ab:8c:f4:2d:86:0d:0c:69:
c1:ec:73:a1:94:80:a5:fe:0c:47:0e:ba:c9:38:b6:
b4:f8:76:57:ca:35:f9:ec:71:9a:8e:be:b5:47:03:
38:a8:04:22:73:2c:2c:84:8d:37:1c:db:cb:49:98:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8E:CD:09:1D:FE:D1:D0:A9:7A:C7:65:48:EE:9A:9C:A7:17:C4:78
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:46:4f:90:8a:f6:f3:31:87:f7:13:99:12:fd:96:91:2b:bf:
f4:17:ea:1c:a1:b4:16:3c:fc:69:5d:60:ab:7b:55:ed:3a:99:
02:58:88:6e:b0:31:b0:58:f2:d6:53:a5:9a:86:60:5b:5b:f4:
3b:68:99:a4:26:e8:38:6e:de:ee:ab:9d:80:80:fd:e8:e8:e7:
0a:21:24:1c:63:f4:4d:a9:a0:a6:a8:4b:5c:f5:e7:b5:72:9f:
6f:6c:02:e5:22:70:cf:a6:7b:61:3c:6b:51:af:2b:4d:f9:2b:
90:dc:5d:0f:be:e2:cf:de:6c:38:6a:e3:df:f0:2d:1e:97:e4:
58:6d:ed:f9:4b:ec:b5:ac:d7:3c:6b:0f:43:80:78:89:50:55:
c3:96:16:d4:29:b3:2c:a3:b6:51:35:4d:24:59:96:bf:e1:b7:
e1:a2:48:b6:41:68:8d:b8:a9:4e:79:bc:1b:66:fd:bc:7a:28:
20:cd:33:83:b1:e9:16:64:66:91:f7:1c:2b:0b:c6:40:c0:4f:
ea:a8:26:9e:42:45:bd:a0:ab:15:e2:fc:bd:f8:31:62:fc:01:
8e:f1:23:83:91:a7:9e:08:7d:8f:3a:6c:0a:b3:24:6d:26:d9:
89:20:35:40:12:15:9b:e6:d9:d7:b8:d7:a3:4e:55:d0:b3:76:
b2:09:62:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:54:19 2025 by rpki-client