Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
File: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft (raw, json)
Hash identifier: OLJSwmCg6YVt0Oalf0I4xemsLVt7ATnZu2OvwXddGko=
Subject key identifier: 0B:6B:8B:BD:C1:68:EE:48:E0:C3:9F:EC:6A:57:2C:99:D1:5F:D2:C9
Authority key identifier: F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
Certificate issuer: /CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
Certificate serial: 01965EA8E067C9C09498CFB21A04944722DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
Manifest number: 0173
Signing time: Tue 22 Apr 2025 18:00:47 +0000
Manifest this update: Tue 22 Apr 2025 18:00:47 +0000
Manifest next update: Wed 23 Apr 2025 18:00:47 +0000
Files and hashes: 1: 5706RB7xeG9S4d5Ob5hAT-sWDQM.roa (hash: 3YUiY2PHwBycE1YPX5AAcbWdNPxFb9hnL/xR1TAUp9s=)
2: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl (hash: Tf93ZoPWQ7QwJ3ruU/iTHSR7VCQO45gxaoKBegE37Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:a8:e0:67:c9:c0:94:98:cf:b2:1a:04:94:47:22:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
Validity
Not Before: Apr 22 18:00:47 2025 GMT
Not After : Apr 23 18:00:47 2025 GMT
Subject: CN=0b6b8bbdc168ee48e0c39fec6a572c99d15fd2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:ee:fe:55:b2:7a:5b:64:24:67:b9:43:88:
66:0f:7c:58:d7:53:16:6b:26:0b:69:c9:0b:26:58:
9d:ea:68:59:9d:6c:97:dd:d8:ad:b4:a8:5d:ce:94:
6b:b3:09:5e:b6:32:fe:ea:98:4c:84:83:39:c5:4e:
7c:bd:0e:74:1e:cc:19:8e:d1:79:cb:49:86:5b:74:
ee:07:eb:01:6b:e1:cc:21:ff:68:d4:e9:f8:91:52:
d9:06:09:31:4d:ff:ce:2e:2e:07:36:19:31:37:48:
7f:e8:0f:85:2d:23:22:df:dc:57:72:73:46:2b:d8:
f1:b6:57:ec:31:14:1f:2d:ff:e6:d6:9c:08:0f:e4:
69:78:75:fc:41:65:45:af:64:72:ce:60:1e:6b:43:
ae:6e:ad:ed:60:09:f4:ca:c5:39:92:c0:b7:c7:53:
c0:40:eb:48:9d:ff:b9:4b:09:89:97:58:84:63:bc:
17:67:6b:95:e6:7d:8d:0e:57:90:43:78:db:dd:38:
6e:a4:d8:93:f4:09:14:1a:8d:63:f3:de:76:01:61:
42:c8:56:ab:a4:f2:50:c2:84:f2:2e:c3:c9:75:9d:
64:d1:09:e8:2e:23:67:36:56:8c:98:81:d0:57:9e:
04:89:b5:fa:af:43:c2:01:9f:80:3f:73:bf:4a:4e:
57:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6B:8B:BD:C1:68:EE:48:E0:C3:9F:EC:6A:57:2C:99:D1:5F:D2:C9
X509v3 Authority Key Identifier:
keyid:F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:4e:d5:bb:51:6f:fa:ea:f7:87:f5:48:ba:14:41:86:2e:28:
03:8b:a6:12:47:9b:f4:98:ce:e4:fd:70:23:6f:ce:e3:ad:6e:
e9:78:6a:00:ca:c1:19:92:2e:b6:d6:34:fa:08:bd:74:f6:66:
06:38:9b:f1:a1:f9:c6:b0:7b:50:63:71:8e:65:3b:e6:6a:8c:
2d:2f:01:96:8b:6a:fa:e1:a6:f0:d8:c2:a2:f9:c6:cd:a5:49:
ab:e9:8d:db:39:bd:0a:12:db:10:79:8b:a2:ee:4a:ef:fd:0a:
c8:41:81:44:db:9a:be:45:67:07:81:12:58:2a:e2:cc:00:93:
02:d6:7c:e5:12:7e:c7:fb:0d:5d:d4:41:2e:e0:bc:43:ea:b6:
64:b0:3d:24:c4:57:40:6c:e8:06:f0:1f:16:be:6a:a9:c6:0e:
92:2b:42:ee:c1:7c:fd:25:ab:3c:2b:49:43:f2:01:91:8c:c4:
9e:00:a5:f5:8a:ff:37:38:eb:ea:f9:bc:de:a1:05:aa:16:10:
65:d6:5a:94:fe:ed:c8:67:ec:83:b0:66:0b:b5:e6:70:19:29:
6b:98:95:17:5d:2f:17:48:7b:11:fd:1b:af:9e:36:4a:de:99:
7d:99:b0:d8:5c:73:03:88:f9:18:6c:79:d4:af:f3:24:20:a1:
48:51:fa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:30:57 2025 by rpki-client