Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
File: 8KEVxxfliRNKVTZw8-K1uc2hLYM.mft (raw, json)
Hash identifier: WBU/lNiPcVZX3L/fPINgYfC8PKm/WC5MCH32aKPPf1s=
Subject key identifier: FC:9B:23:11:95:F9:0A:7E:2F:FE:FB:FE:69:D0:52:E3:FF:17:71:A0
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 01965CBA6B025DE01764E6F627885A4D0C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
Manifest number: 0BF7
Signing time: Tue 22 Apr 2025 09:00:42 +0000
Manifest this update: Tue 22 Apr 2025 09:00:42 +0000
Manifest next update: Wed 23 Apr 2025 09:00:42 +0000
Files and hashes: 1: 8KEVxxfliRNKVTZw8-K1uc2hLYM.crl (hash: +gn5kJtta/sEijydG9kJTGfG+kj8xKIpP4ySzX9ov7A=)
2: pGdvSW9NlY7ggpWYdQxsgPpUkIc.roa (hash: +D8etcwAhuaAWN3gXHXLkRiaN5uUVNnmE3FwZNf0dCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:6b:02:5d:e0:17:64:e6:f6:27:88:5a:4d:0c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: Apr 22 09:00:42 2025 GMT
Not After : Apr 23 09:00:42 2025 GMT
Subject: CN=fc9b231195f90a7e2ffefbfe69d052e3ff1771a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:33:d9:54:1d:06:4d:e6:29:6c:ee:0b:7e:91:
7c:e8:3f:c7:14:f9:35:1f:ba:1e:8c:22:54:5e:6f:
b5:6d:bc:62:88:1f:05:4a:ee:cd:2b:99:41:0f:11:
66:41:c8:59:1c:0d:a8:92:a5:7a:d6:8d:f9:af:d6:
2d:f1:7a:2d:4e:3c:f9:f6:63:08:14:73:66:d2:78:
df:05:bd:34:99:2c:5e:2a:5e:3a:35:b8:f9:4e:10:
20:bc:ef:ed:e3:91:9e:b0:3e:de:be:f4:04:cd:c7:
92:5e:37:9b:52:e9:7c:a2:95:4d:ce:64:a6:93:2a:
2e:0d:93:1a:86:dd:06:71:2e:b8:83:fa:96:d9:f1:
ec:0d:0b:fe:ef:67:9c:f1:cb:98:10:2b:e2:26:05:
12:2e:78:9a:ca:0e:96:46:65:a1:a1:33:29:57:a2:
00:75:dc:02:5d:01:35:66:b2:44:3f:fe:16:92:63:
57:1b:2b:44:2f:55:dd:f3:8e:ff:69:ad:01:b5:a6:
bd:03:c9:f2:5f:fb:4b:30:32:0f:cc:49:60:4a:51:
32:1c:89:3f:0b:9e:13:cf:86:60:e8:91:9a:95:15:
1d:41:5a:46:68:fb:64:4a:86:7f:60:ea:bd:e0:2e:
18:5c:2c:c0:47:6e:2b:a9:3b:f7:43:06:b9:ed:65:
3d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9B:23:11:95:F9:0A:7E:2F:FE:FB:FE:69:D0:52:E3:FF:17:71:A0
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:06:2c:79:61:81:59:5d:34:93:47:9e:c5:9c:85:14:34:ba:
77:8e:97:0c:9d:a4:d2:d7:b4:81:c2:52:cf:99:c8:f6:21:0f:
23:bb:69:6b:8c:ad:42:8f:65:a2:ca:81:f5:e0:2c:b3:27:f7:
01:6b:d3:82:e8:70:f6:d6:62:82:ca:bf:79:4c:ba:f9:fa:5d:
be:57:a9:8b:a7:e5:f8:3e:94:2d:31:01:e6:08:75:6d:4d:1c:
88:ca:ee:97:4f:d5:71:94:c6:b6:e0:0c:4e:84:fd:b1:9c:20:
c9:6d:f3:a3:56:97:5d:92:f4:55:e0:e4:99:25:07:eb:2a:1a:
aa:d8:92:c4:4d:4f:c2:b9:9a:a8:b7:32:68:c7:39:c6:57:d1:
74:14:c8:b4:87:4e:f4:6d:3b:cf:1f:e4:d1:df:d0:c8:81:e4:
a9:fb:f9:7e:d5:dd:8c:31:ef:04:42:7d:47:9f:a5:f0:74:f0:
97:b4:90:37:17:90:e5:e3:d2:86:8d:bf:18:6c:f8:ac:c1:e3:
60:7d:ed:c9:ff:ed:f6:41:f1:e9:04:32:31:e3:09:9e:c9:c7:
bb:64:c7:57:38:47:bc:60:56:8f:78:4e:a6:bc:f8:4e:0f:6c:
40:66:8d:09:84:0f:7f:85:79:18:36:a4:57:a2:ea:7f:01:87:
7c:32:fe:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:23:53 2025 by rpki-client