Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: nW2u0kWx6cvCMqtfeV0O+0zZdpIGt7c2kw0GQMfz7s4=
Subject key identifier: 01:D0:C0:A4:B5:0F:06:E4:EF:0E:84:B9:D8:05:0B:15:E9:55:80:1D
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 019646D73BBE89E9FE91F66F4C83F1AFE34A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 0B52
Signing time: Fri 18 Apr 2025 03:00:32 +0000
Manifest this update: Fri 18 Apr 2025 03:00:32 +0000
Manifest next update: Sat 19 Apr 2025 03:00:32 +0000
Files and hashes: 1: 4eZ-orLf3Sw1i9FoVC_BgUuV6yY.roa (hash: Hm2QNZ0IWwgkGkpS2MI3Rx4rLkOrxRzbQrRfD6XRt60=)
2: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: v22S9u9X9Oo1IQi4gk1nN1dX2rPTI1fZaAH8AyhSVjY=)
3: PvG7RaoFWA1C7HlDkfB4Ix4UWSE.roa (hash: 3vQKjjJTEuiCPTgwApvaXGsOiHre5b8+kVP9FzsOJUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:d7:3b:be:89:e9:fe:91:f6:6f:4c:83:f1:af:e3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Apr 18 03:00:32 2025 GMT
Not After : Apr 19 03:00:32 2025 GMT
Subject: CN=01d0c0a4b50f06e4ef0e84b9d8050b15e955801d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:7a:20:3a:c8:3e:4d:05:26:45:bf:c7:98:
75:1a:0d:59:93:a4:96:cd:e3:43:1b:94:4b:13:15:
d5:a1:91:3e:ba:11:81:57:26:0c:1a:d9:c7:eb:4d:
2e:0f:b3:51:25:c7:64:20:72:d0:91:7b:5c:ee:15:
2f:0c:bc:96:87:f7:bc:e5:66:00:87:47:61:c3:4a:
25:8c:40:c8:64:98:a6:a9:bd:60:1f:ae:d2:33:ce:
9d:68:03:3c:d1:d3:7a:83:e0:2a:c0:9a:3a:70:ad:
69:20:0d:2c:7a:60:db:8d:b9:8d:dc:dc:93:06:33:
b2:c5:91:01:3e:52:19:f1:61:e2:3b:ad:be:93:44:
f1:14:f6:46:45:0b:6f:5b:19:49:68:b2:50:dd:41:
93:68:7b:b0:96:68:c3:8a:27:72:b5:5b:bd:27:07:
e5:75:d0:e1:b4:fb:57:1a:c5:02:a9:fe:04:cb:15:
99:67:59:72:f9:a3:d1:ed:5c:d5:f7:9e:66:dd:bf:
77:a0:b0:c3:57:98:b2:3f:fd:32:89:8b:62:78:c0:
89:7c:70:7a:f1:3d:f1:33:1e:29:94:f1:2d:f5:a3:
32:56:ea:53:6d:ab:28:d9:a5:62:81:94:9c:67:0f:
6f:60:c8:c0:56:5c:af:a6:ee:8c:6c:60:9c:44:d7:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D0:C0:A4:B5:0F:06:E4:EF:0E:84:B9:D8:05:0B:15:E9:55:80:1D
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e3:72:21:5a:af:ec:20:9a:be:a3:15:9d:0d:d7:16:c5:85:
76:a5:c3:93:ef:44:29:87:c2:45:7d:65:c8:ad:c4:00:f7:a2:
c8:c1:d8:40:e4:0b:ed:98:05:b4:a4:9d:ae:ea:53:9b:54:ff:
49:ee:12:ef:12:c3:b8:5e:a5:9e:5a:74:70:f8:34:8b:4b:2f:
1e:2a:89:3e:aa:6d:15:95:04:45:c5:74:c8:cb:75:f2:a2:fe:
ea:4d:82:5f:51:37:d5:9b:72:05:cb:3d:12:22:82:be:12:d5:
f8:45:90:bf:8d:d5:55:50:bc:0e:4e:34:08:3d:97:3d:47:51:
d0:61:20:f6:a2:11:c4:a5:bc:84:1a:83:bf:44:71:dd:25:2a:
7b:fa:8c:ba:76:7e:db:2c:07:e5:69:2c:91:b5:66:19:9b:93:
26:b8:d6:9f:10:8a:30:23:2c:71:07:4d:0f:5f:f8:72:1d:55:
e3:2f:92:57:26:1d:4a:42:7d:03:91:77:6b:10:93:74:f8:be:
80:bb:1b:88:6c:f6:be:69:48:44:e0:5b:67:52:6e:5c:76:96:
f8:ad:b1:7e:fc:8e:36:63:de:ff:8a:fe:f2:8b:93:dd:32:64:
d0:ae:e4:1f:0e:6a:9b:b4:28:d4:fe:e3:c5:22:8e:7d:10:41:
2f:5f:a6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:40:16 2025 by rpki-client