Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
File: 8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json)
Hash identifier: p/u3RN6jpCb8JBiqdCeH0CDNTe24ZkbOshYbwUdwKHk=
Subject key identifier: CB:7F:29:50:81:63:CA:87:B5:AD:45:78:4F:E9:D4:C7:26:CB:28:B3
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial: 01964FDB165D718EC43DD7C011EC497B88F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
Manifest number: 0BF1
Signing time: Sat 19 Apr 2025 21:01:20 +0000
Manifest this update: Sat 19 Apr 2025 21:01:20 +0000
Manifest next update: Sun 20 Apr 2025 21:01:20 +0000
Files and hashes: 1: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: jxl2ahh0P4PHjCFG5HjplDgYmGTGG9Z2hmJ0JsYwjhE=)
2: ZfrqB-JhfiqNRWe3zj0YhBh2Vgk.roa (hash: AZkZxydWTOa7MDw2bfdTftJLCSFU1oN9eZ8WQJFQzJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:db:16:5d:71:8e:c4:3d:d7:c0:11:ec:49:7b:88:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
Validity
Not Before: Apr 19 21:01:20 2025 GMT
Not After : Apr 20 21:01:20 2025 GMT
Subject: CN=cb7f29508163ca87b5ad45784fe9d4c726cb28b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:c6:10:24:03:6f:41:0f:21:a9:4d:e5:f5:
cf:53:fd:f2:ec:f5:1d:1f:9d:59:ca:dc:d1:3e:dc:
6d:70:dc:c1:fa:1e:93:31:a9:32:6b:af:f6:3e:d2:
d5:4b:27:93:5e:00:82:c1:34:61:df:8f:36:de:b5:
5d:c5:9b:2d:b0:90:10:5e:60:c7:47:d7:d6:b4:6c:
25:e2:3a:40:6f:8a:ef:2c:26:ec:62:43:4b:2a:20:
62:8f:85:56:ad:41:a8:ea:f1:d7:ce:27:c2:02:57:
95:0b:a5:36:7a:b1:1a:6b:e2:40:df:5e:2e:d5:6f:
16:1a:5f:25:7f:eb:39:b6:1e:74:04:52:d7:cb:f7:
d6:16:2f:ba:0f:22:15:25:51:01:27:bb:2a:a2:84:
66:63:34:d2:d4:0b:51:2e:8e:3c:43:39:1c:a7:62:
67:35:4a:bf:23:e2:d0:44:6f:ac:a9:17:fb:94:cd:
e0:37:17:71:36:62:b4:48:07:e7:22:53:3a:df:85:
57:df:aa:43:be:d5:2f:4b:eb:5a:c8:23:d9:a6:43:
1a:76:e5:ba:5c:fb:25:8e:e3:56:0c:65:7c:87:c4:
0c:b1:43:a5:e3:64:06:09:80:94:8a:cc:a3:ce:5d:
21:30:41:87:3e:51:2c:42:dc:37:36:c1:7e:83:52:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7F:29:50:81:63:CA:87:B5:AD:45:78:4F:E9:D4:C7:26:CB:28:B3
X509v3 Authority Key Identifier:
keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a5:c0:2c:78:44:36:e5:cc:00:20:f2:38:2f:d3:96:63:f9:
3f:d1:f9:4e:b7:03:b1:f6:88:4c:c7:e3:88:84:b7:17:10:49:
90:a2:ec:75:a1:b0:55:57:62:d0:47:7f:1a:04:c9:8c:5a:b6:
2f:20:91:d7:c4:73:38:6f:d4:91:1d:49:18:21:f0:fd:71:7e:
f6:16:36:d2:e0:19:e7:58:89:01:5a:05:d2:d1:e8:a2:3e:f3:
0f:51:c2:0a:cd:56:d4:05:fd:ee:67:da:c1:4e:97:87:e6:4d:
d8:12:b9:e9:e2:58:3e:22:61:ea:c4:8c:05:3c:d9:9e:0d:28:
0f:1e:97:e6:f8:15:fe:a5:58:d9:1a:e5:44:b5:55:db:9b:99:
08:5d:18:fa:41:9c:36:69:4d:8e:3a:f1:b9:96:12:bf:ad:21:
8a:a9:26:c5:ad:44:04:07:d1:57:23:a7:11:85:cb:42:02:19:
94:64:11:84:d3:25:25:45:fb:a8:7d:12:07:e3:5f:0a:cf:cd:
26:ca:4b:ca:af:de:b8:0b:e3:40:df:19:65:5d:00:d5:69:2d:
c7:36:b9:6a:a2:c4:71:35:48:a6:da:e0:c3:bc:e7:a7:7f:1b:
ab:21:3c:f0:e4:6e:3e:01:e3:b2:0f:b1:2f:7b:1c:2f:fd:7e:
fe:6d:22:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:52:23 2025 by rpki-client