Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.mft
File: 8pbiWBIRaAfIv3q6xcaVvrQbhc8.mft (raw, json)
Hash identifier: +Hk85WQdKtbSR2rNUbqpAq3usyF1dXFDsE2RT/SXer0=
Subject key identifier: BD:35:2B:83:85:20:66:78:49:EB:AE:10:01:04:A6:D6:01:AA:84:59
Authority key identifier: F2:96:E2:58:12:11:68:07:C8:BF:7A:BA:C5:C6:95:BE:B4:1B:85:CF
Certificate issuer: /CN=f296e25812116807c8bf7abac5c695beb41b85cf
Certificate serial: 01960FB2F1E2B10ACCC0965D4D23C8CDBC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8pbiWBIRaAfIv3q6xcaVvrQbhc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.mft
Manifest number: 32
Signing time: Mon 07 Apr 2025 10:01:47 +0000
Manifest this update: Mon 07 Apr 2025 10:01:47 +0000
Manifest next update: Tue 08 Apr 2025 10:01:47 +0000
Files and hashes: 1: 8pbiWBIRaAfIv3q6xcaVvrQbhc8.crl (hash: je4yNKY7qS2VXBTYA7vQUfp9qUvEe3CqD3ApiLmvFk0=)
2: C_9wJpC7N12kOu0pJ_D7XheLG4E.roa (hash: gH4AEfeN7fzJJXj/ip3PiHbGkEFNAd9HeLBxlPcZ0hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8pbiWBIRaAfIv3q6xcaVvrQbhc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:b2:f1:e2:b1:0a:cc:c0:96:5d:4d:23:c8:cd:bc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f296e25812116807c8bf7abac5c695beb41b85cf
Validity
Not Before: Apr 7 10:01:47 2025 GMT
Not After : Apr 8 10:01:47 2025 GMT
Subject: CN=bd352b838520667849ebae100104a6d601aa8459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:bc:94:9b:a1:3c:45:f8:e8:d5:5b:62:92:
50:c5:b5:cf:e6:d3:59:d4:84:ca:a2:f6:1b:fc:97:
a4:a4:d7:4a:68:4a:36:6f:98:0f:dd:ab:84:3c:75:
a4:48:b2:a7:76:00:ba:0e:87:fd:af:17:de:bc:d3:
45:cc:a0:94:59:47:8d:5a:7d:15:5c:03:44:34:9b:
da:41:59:34:28:9c:3f:51:ed:80:c1:f1:ca:8a:67:
68:fa:45:3a:e9:59:75:52:27:60:97:fb:da:bb:48:
1f:ac:0b:4d:59:65:a5:0d:75:5b:5d:9c:d1:8b:da:
9b:ea:d1:a3:22:ec:af:d8:00:8e:6e:bc:89:25:f1:
bb:f7:ed:82:8b:80:75:a2:06:36:60:ef:8b:f9:54:
54:32:83:ba:5b:f2:38:c1:d7:99:a2:f7:92:d5:6e:
92:27:95:cf:4b:c8:19:cb:43:b9:88:94:78:2f:e6:
c0:75:d6:5b:99:2c:ea:2c:f9:99:8c:0f:6c:51:ba:
24:92:6f:44:40:37:f1:e0:1e:08:e0:a7:cd:1d:cf:
21:f2:c4:5c:80:6c:73:84:69:9d:ef:dc:83:32:7a:
9e:99:9a:dd:39:5a:64:ff:21:55:19:57:64:0c:64:
0d:8a:9d:70:46:ba:80:ed:16:6d:87:36:80:f3:9a:
12:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:35:2B:83:85:20:66:78:49:EB:AE:10:01:04:A6:D6:01:AA:84:59
X509v3 Authority Key Identifier:
keyid:F2:96:E2:58:12:11:68:07:C8:BF:7A:BA:C5:C6:95:BE:B4:1B:85:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pbiWBIRaAfIv3q6xcaVvrQbhc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3d:df:33:1a:f5:38:05:90:18:db:72:b8:80:a7:1f:e3:13:
2f:1f:3f:04:37:91:04:7e:72:54:73:b7:92:c6:96:98:b7:04:
13:84:72:b1:28:04:cb:55:e7:79:28:f8:28:36:51:1e:91:d5:
60:5a:ef:a6:84:c7:87:94:53:d8:0a:35:49:6d:a8:33:ed:00:
aa:30:dc:0d:07:ad:e8:67:7b:bb:54:1c:6c:f5:35:75:f7:96:
8f:33:3e:ee:77:c5:a6:36:3f:6c:23:ed:06:39:03:eb:06:cd:
d2:c0:a4:13:1c:5c:5c:b7:05:e7:8f:b3:dc:04:36:44:20:71:
fe:a4:2b:50:c7:e6:ce:62:9d:dd:76:76:08:42:6b:ef:bd:ca:
30:82:a7:ae:7e:19:37:29:5c:68:81:e6:a2:0a:77:46:54:4a:
20:56:02:ff:17:42:a9:18:ed:90:d8:c1:c9:7d:ca:e7:d0:00:
c0:19:f4:49:cf:18:7d:1f:49:93:75:74:77:9e:cb:04:80:fd:
aa:80:bc:c2:2b:75:9a:77:65:5d:6d:b7:4f:af:e5:40:bf:34:
53:77:0f:d8:82:5a:a5:5a:4d:f9:39:02:7d:c4:db:a3:5c:cb:
54:a1:3a:9e:11:f3:f2:41:ab:46:d3:b0:be:0f:01:d7:17:c6:
40:c2:29:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:29:50 2025 by rpki-client