Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: 5prKutlwnDITS20Abn8NH3xbLYacmmXMWZMQEvdcH20=
Subject key identifier: 33:D4:82:E2:31:E2:A6:29:B2:71:0E:8D:28:A6:41:C6:FC:78:90:04
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 019651C907919C321381086938EFC3337851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 0955
Signing time: Sun 20 Apr 2025 06:00:51 +0000
Manifest this update: Sun 20 Apr 2025 06:00:51 +0000
Manifest next update: Mon 21 Apr 2025 06:00:51 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: DpOesDhTyVSE7YkZixqTgo/XcXpkv8F+DRE0wyiqUr8=)
2: 9fWa2lfLkLJ8sCmivN6TQyBLwDA.roa (hash: IPb2Fry6AFROnpqPDxpsLGmfQRyiCcADkUuNtSOH1vw=)
3: M0hmVP_O7pmzGC1lZ8auVtUv08M.roa (hash: O6keKWXCa23CBnMYQ5j2NdMEa5h/R6dRjRYYfD56tpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:07:91:9c:32:13:81:08:69:38:ef:c3:33:78:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Apr 20 06:00:51 2025 GMT
Not After : Apr 21 06:00:51 2025 GMT
Subject: CN=33d482e231e2a629b2710e8d28a641c6fc789004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:2e:bf:2d:50:8b:74:77:d1:95:e2:e9:fd:
42:2f:92:d1:8d:be:1c:7b:5d:14:50:b2:05:36:52:
f1:d3:8d:38:60:c9:e3:e8:a4:8b:b7:a8:0a:9f:77:
21:ea:54:36:30:2f:15:cb:56:fb:5a:de:89:f3:e6:
78:e5:8f:25:30:c3:19:96:f2:bb:7f:32:3d:54:f2:
a8:a3:80:b9:4d:aa:90:25:a0:71:e3:ee:28:50:2e:
2d:a6:68:63:ba:77:e5:b0:a6:be:4e:85:5d:77:e4:
d5:0f:a6:f0:a1:61:2a:67:e3:51:a8:48:5f:fc:08:
d5:44:63:3c:6e:9e:28:dd:af:84:a6:38:23:45:7e:
c7:f1:7a:35:c9:ce:8c:54:36:42:bb:e3:90:53:30:
04:13:23:7e:62:ab:4e:71:18:43:2b:e3:9c:f8:04:
c3:b6:81:a2:ac:04:dc:77:04:f9:2a:7e:a0:12:14:
bc:48:cf:e0:29:25:16:cf:a6:08:c4:3e:b2:7a:50:
eb:b7:94:64:b8:03:12:54:a7:8f:76:e0:73:43:e0:
cb:10:57:78:b6:69:14:3e:c8:5f:40:91:b8:71:66:
0f:a1:67:01:fe:75:c6:83:7b:64:d0:07:7b:a4:75:
89:98:32:84:6a:2b:95:fa:a1:71:0c:9a:6a:cc:cb:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D4:82:E2:31:E2:A6:29:B2:71:0E:8D:28:A6:41:C6:FC:78:90:04
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:01:b2:ad:a9:17:75:ae:cd:11:20:e9:d9:8e:c1:d6:5e:9c:
7a:03:31:a0:f0:25:51:37:bd:a7:40:49:53:46:23:6a:b0:d5:
7f:dd:cb:44:6c:46:f3:3a:92:fa:69:f9:e0:e4:7f:1e:d0:b9:
85:4a:2f:b5:52:95:c2:28:05:d2:48:df:36:74:5b:84:5e:83:
66:e5:5f:57:55:8d:7f:93:2e:b7:3a:cf:60:8e:bc:c1:e3:1b:
b5:e5:11:6f:74:8c:01:4f:2d:2c:16:11:ea:9f:16:78:cd:71:
0f:ad:e7:99:2a:15:5e:c3:9a:06:0c:4b:df:ad:c6:85:4e:63:
b7:2b:55:04:fc:26:ed:40:20:16:e7:8b:3b:55:d0:4d:b4:fb:
50:2f:0a:cd:12:58:2d:f1:1c:55:14:d9:20:04:59:d2:9e:2e:
3f:02:fd:27:a6:33:cd:2e:34:fb:29:78:d3:74:53:e4:93:00:
1d:00:c0:92:46:90:e5:ef:6c:18:ce:91:bc:a1:1e:02:2d:62:
41:17:5b:cc:cc:18:54:67:98:12:26:8b:58:71:41:cd:e0:94:
cd:cc:da:61:74:d0:4f:a2:21:2e:22:2a:00:82:01:71:2f:c5:
cd:a7:90:1b:01:9e:28:c6:fc:61:ad:76:eb:a2:ce:25:43:23:
cf:25:b2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:22 2025 by rpki-client