Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
File: 8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json)
Hash identifier: TaRqZpm2nu2lfKCDLwud5JrV8PVco+XD9Z5soiAX3X8=
Subject key identifier: 39:EC:D7:53:86:C0:8E:8C:E5:37:2C:C8:B7:17:1F:6C:43:81:4C:2E
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Certificate issuer: /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial: 01965D95E22000AA83847194D4EBFE6FC7C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
Manifest number: 0BE4
Signing time: Tue 22 Apr 2025 13:00:25 +0000
Manifest this update: Tue 22 Apr 2025 13:00:25 +0000
Manifest next update: Wed 23 Apr 2025 13:00:25 +0000
Files and hashes: 1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: ASMZGxoXnpV/g0n0zlQnkWYV1VDVZmJKL7fX8Jy8Q4s=)
2: r15VgfDzfklLUPcVx6y07YzgPWU.roa (hash: px8SZ3fdpiQxLHW7vHT/LHov8V1krmhAYBpslqeJkek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:95:e2:20:00:aa:83:84:71:94:d4:eb:fe:6f:c7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
Validity
Not Before: Apr 22 13:00:25 2025 GMT
Not After : Apr 23 13:00:25 2025 GMT
Subject: CN=39ecd75386c08e8ce5372cc8b7171f6c43814c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:07:37:d2:8e:af:70:65:68:94:f7:77:7e:
2b:03:6b:ed:8d:88:a9:ef:85:6c:66:c1:1f:0b:d1:
20:c1:7e:7d:98:d1:d8:11:f3:f8:e5:b5:41:f5:78:
83:b2:31:53:01:92:fa:08:17:c8:3f:71:b4:a1:6e:
8f:c9:7a:84:6d:2d:f6:c0:64:7a:26:3f:fc:2d:c8:
65:0b:64:4b:4b:97:bf:36:26:bc:6a:65:52:e1:a3:
2b:cc:f9:30:f7:fe:ea:f4:db:b6:4a:f5:2a:99:a4:
29:41:2a:79:d5:48:d9:79:94:f4:d9:4c:c1:45:8f:
46:f9:ec:a0:17:9a:0e:d3:db:0d:75:3a:11:a5:c8:
de:3c:4f:87:2f:93:b7:58:5a:7b:d8:cc:e8:a1:26:
74:a7:4b:47:55:1f:91:c8:db:df:27:bc:13:a3:04:
ad:75:ad:02:d7:d0:c8:40:c4:ec:28:8f:bf:cb:fb:
8d:c8:8b:f3:6c:40:44:81:09:7e:6a:15:dd:16:0a:
87:be:2f:9b:8d:5e:7e:5b:01:26:04:25:4e:8e:02:
78:b1:4d:25:d3:97:6c:45:52:77:1e:e3:fc:c0:05:
06:14:7e:bb:2e:bb:9b:c8:ec:0c:63:3c:d4:c0:66:
f5:6e:fe:72:ce:e2:26:10:d1:ef:fb:16:ad:2e:c0:
e2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EC:D7:53:86:C0:8E:8C:E5:37:2C:C8:B7:17:1F:6C:43:81:4C:2E
X509v3 Authority Key Identifier:
keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e2:56:96:69:34:f9:ee:f9:7f:9c:2a:db:f9:51:8f:68:a1:
a9:9e:67:18:fc:38:15:98:28:50:80:87:be:95:58:38:d2:6c:
1a:d0:b2:94:8f:11:c9:47:bf:f7:0e:b9:ac:6a:46:5d:a4:aa:
8b:5d:fd:20:26:d0:51:b5:22:b4:8c:ef:5e:c1:d1:26:f0:eb:
d1:a9:4b:3d:83:0b:7e:4d:20:b0:90:06:79:59:aa:71:0a:fa:
08:c2:ac:58:03:40:ef:99:07:66:e5:e4:a2:a7:a5:83:13:53:
f8:3f:96:1a:0f:34:b0:b6:af:ca:ad:e9:b2:32:80:2b:a3:7b:
59:60:05:6a:a1:67:89:7d:c4:14:a0:ed:98:6f:28:83:7f:01:
fe:49:af:96:82:b5:24:91:7b:4a:eb:0f:cf:ef:c6:b9:d4:66:
5e:d7:4b:43:4a:ea:f8:c2:46:8a:c3:92:bb:8c:77:89:ab:13:
11:63:52:de:09:f4:c0:24:eb:9b:cd:49:b5:82:9f:d7:93:8b:
05:4d:01:80:02:cb:19:6f:49:e6:52:aa:33:cd:46:d2:c7:c0:
95:75:94:80:39:18:2d:93:0e:00:80:e3:8d:4e:0c:a3:06:61:
6c:16:e9:5a:7a:3b:e7:0b:5c:ab:33:af:de:42:b2:cf:96:7c:
3d:e0:6c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:01:05 2025 by rpki-client