Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json)
Hash identifier: FPg9A9T7s7gLnmO1eIeNcjxhqca6QznqBgTuvcdTXWA=
Subject key identifier: AD:80:92:5B:3A:A2:D7:20:C3:A7:FC:AD:64:4A:3D:C6:F6:82:2F:D5
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial: 0194C4639FF8B527536E65587B314B7E65BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
Manifest number: 23
Signing time: Sun 02 Feb 2025 02:00:50 +0000
Manifest this update: Sun 02 Feb 2025 02:00:50 +0000
Manifest next update: Mon 03 Feb 2025 02:00:50 +0000
Files and hashes: 1: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: MimyIDMIZS0xpCGtSomuSAjHfPA1nwY7g85ybeCRQHI=)
2: GNR3Xbsm0dYb1U2Z9nw19vfXm-E.roa (hash: eG4EFU3ARjgeiXZCOqWx6H616sJeslsRaSfwJS4JJAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:9f:f8:b5:27:53:6e:65:58:7b:31:4b:7e:65:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Validity
Not Before: Feb 2 02:00:50 2025 GMT
Not After : Feb 3 02:00:50 2025 GMT
Subject: CN=ad80925b3aa2d720c3a7fcad644a3dc6f6822fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:87:d8:86:ea:a4:1e:ee:8b:5e:33:5e:d0:80:
49:9c:98:c9:b0:4f:ff:bf:4d:82:ff:d7:56:c4:51:
f4:ef:cd:0d:0b:8d:5e:e0:b9:c2:ce:3d:7d:59:49:
27:c8:c2:c8:c1:9a:20:c1:ea:71:48:99:fa:30:09:
e6:8d:81:e5:f2:1c:36:c7:08:90:aa:52:4d:ad:c4:
e4:96:86:13:87:50:e6:b5:97:71:22:65:41:8f:f6:
92:2d:38:97:07:e7:6a:f7:4b:e2:fc:84:a4:31:2f:
50:cc:f5:04:26:d8:96:6f:33:77:53:6b:22:15:33:
7c:bf:5a:7a:4f:aa:42:7b:a6:42:5b:f8:c0:33:60:
b8:5e:a8:74:0e:35:ad:35:a8:c2:2b:7c:ca:e6:bf:
8d:49:e1:4e:8d:53:13:82:ac:b9:29:90:80:d8:cd:
84:eb:a3:f1:94:eb:8c:6e:75:2e:c8:ba:b6:35:e7:
be:37:b9:4b:04:a5:9b:10:8c:63:e3:33:ac:17:79:
a9:cf:51:ba:39:3b:0c:2a:97:2a:bb:d8:30:26:7f:
1e:14:8d:c9:be:00:89:fa:ac:9c:dc:8d:d8:41:37:
c6:b3:2b:0e:de:d0:76:6a:39:af:7d:f2:fc:e2:c2:
db:2c:94:2d:f7:4b:50:98:45:7b:1c:46:05:21:82:
1a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:80:92:5B:3A:A2:D7:20:C3:A7:FC:AD:64:4A:3D:C6:F6:82:2F:D5
X509v3 Authority Key Identifier:
keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8f:56:89:11:23:fc:e7:1b:fe:1a:f7:da:4e:dc:2d:75:44:
b0:11:f5:0c:8a:e2:a7:36:67:97:ce:38:4e:6f:61:67:b6:5d:
3d:54:3f:ec:f5:fb:b2:cd:2f:79:45:99:7a:6c:59:91:a6:c2:
a8:7e:a9:2c:a2:12:2e:96:97:ee:fc:22:38:6f:10:94:5b:50:
cc:95:69:a8:d6:f1:5b:1a:d6:ed:61:5c:16:01:df:bd:40:6f:
27:4d:ee:53:22:d3:30:58:dc:12:61:f5:a4:05:36:e1:57:55:
da:52:45:de:48:30:8e:13:86:e4:64:59:25:14:a4:00:d8:18:
3e:40:db:b2:bb:7a:b2:8d:e8:42:86:66:b9:6e:6c:88:a9:8c:
f8:59:83:d6:c3:57:65:99:44:20:4e:00:63:d9:89:33:42:e3:
df:27:12:9b:fc:46:29:2b:62:3a:29:f6:4d:05:cd:d2:15:d1:
1e:80:f1:fc:ce:20:17:f8:4e:5f:a4:ae:42:06:44:9e:77:d5:
17:6e:5e:7d:41:3b:36:dd:98:5f:a5:c5:ff:50:e6:7b:5d:a5:
3c:cf:64:ef:9b:a6:3b:e0:81:57:ea:de:f0:0f:c2:4d:fb:a9:
88:42:0d:fc:93:f1:95:02:ac:c8:00:b0:6f:82:41:7f:a2:46:
08:af:28:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:09 2025 by rpki-client