Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier: gSYppxtUObNwuUjEAMRgeJ8HG5nx3EBqCh3ZSqkJaVw=
Subject key identifier: D6:CB:36:87:8F:7A:82:BC:57:31:19:6D:DA:3C:9D:21:38:9B:4C:7D
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 0196575CACBFE2833E64790DDC9CC0CB3450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number: 04AA
Signing time: Mon 21 Apr 2025 08:00:13 +0000
Manifest this update: Mon 21 Apr 2025 08:00:13 +0000
Manifest next update: Tue 22 Apr 2025 08:00:13 +0000
Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: AnHa05zIdO3nMpZNNbN21+zZ5qQ9iXsXtiSsJGPrvho=)
2: Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa (hash: uihaqn4cl1EUm9BC8+JYEwJFvxEP94e45YDqvyFRac4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:ac:bf:e2:83:3e:64:79:0d:dc:9c:c0:cb:34:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: Apr 21 08:00:13 2025 GMT
Not After : Apr 22 08:00:13 2025 GMT
Subject: CN=d6cb36878f7a82bc5731196dda3c9d21389b4c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dc:75:62:9e:62:9a:f1:0c:d9:73:2b:f9:3d:
07:48:92:e7:96:f0:bf:d4:cc:78:17:7d:b1:7f:d9:
f0:d6:d0:53:d5:32:fc:55:34:93:4e:bb:23:22:b4:
0d:e8:0c:02:92:4f:a8:59:46:bb:64:d7:a7:ea:57:
39:e1:67:cc:35:b3:11:26:f6:fd:80:84:31:e3:18:
9d:67:09:65:22:5c:5b:37:07:0d:14:2a:69:1e:c1:
87:ec:ad:b8:75:67:8d:15:e7:75:71:6e:2f:11:df:
20:19:98:77:c5:4b:4f:bb:cf:bd:8c:d9:8f:b7:70:
79:d6:4c:23:7c:96:8d:52:11:de:42:29:1f:10:6b:
2a:0d:61:ab:02:3f:da:02:7a:a3:df:12:63:94:0f:
30:0c:84:2a:38:f4:69:22:bb:b2:73:95:41:ea:69:
a3:ba:e4:4a:57:14:9e:5c:bf:bd:27:17:f4:53:ad:
24:41:48:a8:86:11:05:b1:d0:b4:70:19:d0:6b:21:
b7:fc:2f:19:0a:fd:01:c0:99:98:84:e7:83:7d:68:
94:ed:d2:db:80:3f:cc:41:6a:0c:48:a1:2a:59:37:
1e:6d:29:3f:26:9c:da:f7:b6:bc:2b:fb:21:18:07:
e9:42:de:65:05:d2:1f:56:67:8f:84:b5:60:44:ec:
a5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CB:36:87:8F:7A:82:BC:57:31:19:6D:DA:3C:9D:21:38:9B:4C:7D
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b6:15:68:90:18:a1:cb:2d:58:d7:78:06:b4:eb:3e:07:bc:
77:cd:a8:f9:60:52:85:60:c8:86:21:b1:df:59:07:85:df:fb:
56:fa:7b:99:a5:27:0d:b2:a8:85:87:3b:83:fd:72:8f:b8:25:
26:38:6f:f8:b6:c8:01:3b:a0:99:79:81:e2:b5:b4:c6:c4:c4:
1b:08:29:fd:13:55:85:f0:47:b4:a1:39:10:06:5f:78:b5:22:
b3:b7:db:fe:ca:6d:72:bc:f7:0c:2b:59:a0:de:f2:5c:0a:3b:
15:f9:d6:02:0e:50:cc:4b:13:98:ed:30:9f:05:e4:28:7e:17:
35:8b:17:64:2e:d1:89:a8:cb:4d:86:70:e2:c1:d0:05:71:ca:
8a:c5:bc:e1:42:1d:97:c7:e6:99:04:da:59:72:b8:19:2c:18:
b8:cc:54:94:bc:ab:0f:01:51:cc:a0:8b:eb:08:83:b6:11:b8:
0f:fd:70:e2:f4:a4:5f:e8:f2:7b:9d:83:78:57:af:a3:7d:b5:
25:f2:d2:ef:2d:67:00:01:5c:9a:a7:90:b1:e4:54:e8:98:31:
64:4c:ad:f0:71:b5:28:23:33:cf:1e:85:7d:bf:ed:4c:0c:ac:
6e:51:64:f2:25:66:04:5d:ad:ef:f6:31:01:25:ca:3d:cc:6f:
bf:56:ea:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:36 2025 by rpki-client