Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier: aLGtN9JTrk9JJlcsQGaSsg7cUIhHPdq6wuACZ3UD+yg=
Subject key identifier: A8:A0:17:66:4D:82:20:5F:4C:D7:25:56:1A:9C:0E:D2:64:7E:AC:5E
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial: 01960DC53C14A5102F49121B1BFE4031D380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number: 0658
Signing time: Mon 07 Apr 2025 01:02:31 +0000
Manifest this update: Mon 07 Apr 2025 01:02:31 +0000
Manifest next update: Tue 08 Apr 2025 01:02:31 +0000
Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: xYLi6gG6sZ0FcENOMfbOrEnXxj26tui9lewj3YYDKss=)
2: KzntsBKC6xHsM4irrwPpJqTMjrE.roa (hash: rsuAHxEKxQodmj4NlR88Fkx1NvrEvEln4AFpUG54lbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:c5:3c:14:a5:10:2f:49:12:1b:1b:fe:40:31:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Validity
Not Before: Apr 7 01:02:31 2025 GMT
Not After : Apr 8 01:02:31 2025 GMT
Subject: CN=a8a017664d82205f4cd725561a9c0ed2647eac5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:82:1a:fa:1f:6e:17:29:b7:2a:d9:2a:2a:
0e:98:e4:5c:04:8d:fe:e0:a7:70:d1:cd:76:fb:4f:
58:6e:db:07:dd:f2:de:dc:c3:86:07:eb:a9:5f:65:
de:89:b2:28:5a:67:22:9f:17:17:72:33:ac:7b:02:
cc:15:c7:95:0e:5f:de:2d:e9:63:42:00:9f:66:bb:
6f:82:9c:9e:67:b6:5c:2b:33:65:91:b3:91:34:94:
f4:a0:f8:93:b2:c5:4a:78:2f:3d:52:4d:ec:b5:4e:
1b:09:05:51:c4:9e:5c:2c:f1:d2:b9:fb:e0:a4:a7:
cb:b9:3d:e7:14:53:a0:dd:b8:49:58:95:9a:14:44:
f7:aa:aa:e0:67:1c:b1:4b:14:47:2c:63:e7:e6:c0:
9a:00:16:e2:10:20:72:2a:3e:54:94:7e:c7:23:ed:
5a:bf:f9:61:f8:26:94:c6:56:09:4d:ff:a4:b7:2a:
ed:56:6a:96:ee:8d:91:27:ce:1b:06:25:bf:7b:d6:
bc:c8:63:77:5e:32:f4:3e:58:99:63:60:33:06:c3:
13:94:88:52:9a:3b:9a:6d:d9:74:3b:de:01:41:c1:
2a:e4:3d:64:aa:73:43:76:33:5d:89:14:07:05:7d:
5e:d8:8a:0b:d7:95:05:63:df:11:e3:5b:68:2a:9e:
9b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A0:17:66:4D:82:20:5F:4C:D7:25:56:1A:9C:0E:D2:64:7E:AC:5E
X509v3 Authority Key Identifier:
keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ea:80:b4:c3:1c:36:f7:ca:51:e1:57:3e:36:12:cd:71:b3:
21:c5:93:6d:de:8f:02:b2:42:14:0e:1e:e1:16:4c:81:49:5d:
9e:90:47:76:e0:59:fb:09:01:d8:bd:00:00:51:96:f4:54:f0:
05:2c:51:ea:e6:5b:4e:43:81:be:db:a7:a6:76:62:1b:39:d2:
58:be:45:80:04:bc:d1:ae:cf:08:71:d4:ee:1e:01:c5:ae:2c:
3b:b8:fc:5b:06:38:1b:6c:4a:c3:3e:60:8b:fc:9c:a9:c2:0e:
93:8e:fd:54:4e:e6:e1:50:2c:61:c0:1f:ca:a9:b9:b2:32:ca:
81:cc:79:ef:1d:9c:ce:70:93:d0:ae:57:93:a4:57:6d:1e:6d:
18:e7:fa:5e:4a:7c:b0:e5:9f:04:e1:17:6b:29:63:0d:d4:ed:
b0:56:20:e7:f3:03:92:52:d7:a6:d2:8a:9a:d3:e9:ff:c5:d1:
f9:da:0b:e7:9d:c5:ca:fd:00:b6:90:05:7c:a0:5d:e3:0d:3c:
e7:0e:23:1d:4b:29:ef:2f:17:b7:1e:23:8a:60:b3:93:dd:fa:
5b:69:71:f2:0a:df:c5:c4:3a:2f:09:7f:3a:fd:1b:d8:6a:2a:
81:28:cb:19:c7:3e:39:fb:6e:41:47:e0:44:a3:79:8d:9c:ad:
c9:07:76:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:48:04 2025 by rpki-client