Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: 5FWoZ2u0+yne4t5gtu6u1INdl+GpVvus7vL50l482s4=
Subject key identifier: FA:A2:7D:09:89:93:D9:5C:C9:5D:B7:95:E2:C2:32:8B:72:BF:0C:11
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 019649D86BA5C4D73E52B57DA4BED76CB53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 13E2
Signing time: Fri 18 Apr 2025 17:00:42 +0000
Manifest this update: Fri 18 Apr 2025 17:00:42 +0000
Manifest next update: Sat 19 Apr 2025 17:00:42 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: eTjFxw83nS1N3xbO95QnMQIk+O8Gvyj3kzTeH/s25Ho=)
2: E1bqejAdTN3uYMBTKCwH33KmoEE.roa (hash: /XRVb9kLwHV21UKOVZ0MM6evc9apWkwvTlQRZL1Tohg=)
3: gAbWpwUUphvqV25CUB0maQ_pAx0.roa (hash: BLsk+LJxA+WagSmLj3Bzfhh4p3QvCZDF/XVfmTYGdec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:6b:a5:c4:d7:3e:52:b5:7d:a4:be:d7:6c:b5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Apr 18 17:00:42 2025 GMT
Not After : Apr 19 17:00:42 2025 GMT
Subject: CN=faa27d098993d95cc95db795e2c2328b72bf0c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:7a:0b:3a:8e:30:22:22:66:43:69:c5:40:
52:f4:16:e9:76:55:b5:25:bf:4d:a5:27:73:ff:69:
f8:4f:2f:9e:1a:ad:0c:4c:5a:2f:74:d0:58:3c:fd:
e2:a7:c8:9e:3e:73:e6:68:f9:39:af:62:96:a5:61:
a8:42:32:35:93:05:d2:3e:ab:f8:10:16:be:53:15:
08:e1:20:a4:ca:d3:b5:fa:2b:ca:45:5c:27:a4:fe:
32:2c:03:46:08:b8:7f:7d:ab:a8:11:5e:49:f3:f6:
8a:ab:34:f4:62:04:34:cf:df:ed:5a:35:53:06:b0:
38:87:2b:21:9f:58:6d:26:5f:f8:c0:36:4f:a8:be:
65:00:b2:60:de:ef:71:22:9c:62:5f:8b:35:58:9d:
c4:e4:00:8b:8b:4a:88:54:cc:2d:11:6f:4a:6d:ae:
db:76:c8:89:5f:0e:0a:43:6a:29:ea:a2:3a:ac:8e:
3e:f8:83:cb:8b:f3:9b:cc:77:ce:46:37:23:38:87:
77:19:90:14:39:2e:c5:42:34:68:90:56:e8:aa:96:
10:c1:59:02:38:9e:5c:46:7c:5d:b5:e4:62:30:39:
06:0b:58:c3:8a:1a:15:94:e7:2c:68:0d:ae:29:5b:
6f:cf:a5:1d:10:0f:f8:a8:46:10:78:4d:df:f2:5b:
6a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A2:7D:09:89:93:D9:5C:C9:5D:B7:95:E2:C2:32:8B:72:BF:0C:11
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:82:18:43:0f:c9:0f:5d:ea:d6:89:8e:b9:96:d9:38:45:cc:
9c:58:cf:6f:7f:b5:f3:7a:c2:09:21:ed:28:53:08:52:b0:ff:
07:e2:38:4c:0e:39:6a:71:b5:d9:bf:78:7e:94:89:bc:cd:95:
9f:7b:06:71:e5:98:03:24:4e:e6:fa:68:7d:3f:95:50:1b:e2:
b1:b0:70:01:c6:8c:3c:fd:cf:ae:fe:da:f2:f3:56:59:db:4e:
d0:60:2e:4a:52:0a:52:c3:00:c2:ee:e2:a0:dc:73:ba:99:15:
6e:71:5f:14:d1:75:a4:27:bc:46:d2:65:86:eb:5d:24:25:f0:
8f:75:ea:71:6d:e8:22:61:70:0c:3f:d6:14:24:0c:77:62:4b:
31:5d:33:5c:ed:ad:09:a3:48:15:1a:5d:c9:2c:4d:e4:c0:0b:
09:56:6b:86:1a:cc:c1:a5:22:0c:e3:91:12:81:1c:54:19:60:
aa:ac:31:70:e4:c9:d2:e2:8c:f0:60:0a:0e:e4:fa:fa:f4:80:
dd:59:c0:68:04:cb:0c:06:bb:90:ab:ba:9f:32:34:46:96:e1:
9b:67:3a:d6:c4:8e:91:ac:2c:c7:e7:de:6e:5c:8d:d1:64:ca:
61:4c:06:f3:3e:fd:4f:39:84:7d:c9:c1:9e:51:b7:f4:25:0a:
28:5c:b6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:39:02 2025 by rpki-client