Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
File: 8ppplYAYXWUQAV4dLKGe_0NkHtw.mft (raw, json)
Hash identifier: tEUicj1FStfiWY7W3YHyKnD/I1Y366v6QmyZXK1s9QQ=
Subject key identifier: CA:7C:BB:7F:F6:AD:21:97:B6:E8:96:6C:C3:A9:8B:F1:98:82:C8:D5
Authority key identifier: F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
Certificate issuer: /CN=f29a699580185d6510015e1d2ca19eff43641edc
Certificate serial: 01958C600E2F4D0BB58F4DD7484AEB73350B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
Manifest number: 06D2
Signing time: Wed 12 Mar 2025 22:01:00 +0000
Manifest this update: Wed 12 Mar 2025 22:01:00 +0000
Manifest next update: Thu 13 Mar 2025 22:01:00 +0000
Files and hashes: 1: 8ppplYAYXWUQAV4dLKGe_0NkHtw.crl (hash: m5n8NBXn342BadP26FuP2cxqtdEX2uS2D9jvbaHmbDQ=)
2: nTEco9mT1eULi7_9dIxqABgskB8.roa (hash: yHq4DLSIuBnBv74/JgQY/5bfqTpB6DfkqhhtGE6kqjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:0e:2f:4d:0b:b5:8f:4d:d7:48:4a:eb:73:35:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29a699580185d6510015e1d2ca19eff43641edc
Validity
Not Before: Mar 12 22:01:00 2025 GMT
Not After : Mar 13 22:01:00 2025 GMT
Subject: CN=ca7cbb7ff6ad2197b6e8966cc3a98bf19882c8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:11:d6:ac:03:4b:a8:ff:07:b7:87:33:37:80:
d1:61:f6:73:7c:bf:a6:13:11:c5:b0:93:6e:bf:95:
a2:e9:b0:6d:2d:9a:34:aa:cc:e2:bd:4c:a3:96:94:
53:1b:4c:db:2c:4f:a1:70:e3:92:c1:30:cf:8d:f6:
52:67:1a:c0:f6:14:98:00:2b:e1:24:40:45:0c:a1:
66:ba:3e:e1:8a:cd:d7:66:45:6f:99:20:e9:3a:4b:
53:9a:94:0a:df:50:60:ce:b5:90:d6:e8:b9:76:07:
4f:d9:64:f9:76:c8:12:1b:fc:47:dc:ab:1d:2e:2c:
bb:13:a0:95:fc:a4:c0:88:6b:55:47:cf:70:3c:85:
83:6e:75:94:fa:82:3d:95:05:04:80:e8:50:2d:cb:
51:75:54:27:cc:d4:38:03:4d:2e:3c:57:02:e5:d2:
a6:f6:1f:db:73:c5:be:31:fe:cf:82:78:ae:0a:84:
0c:b5:22:6c:5f:00:bc:31:30:dd:03:df:93:67:5c:
d4:c5:dc:c0:5b:b8:9e:65:31:15:98:e3:33:4b:d9:
02:27:da:af:dd:f4:a0:0b:79:2e:0f:37:be:4d:d3:
2e:5a:08:db:c0:8a:f4:f4:6c:0c:be:66:67:6b:9b:
77:6e:75:a9:a4:ea:a8:05:75:09:c7:61:bb:87:37:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7C:BB:7F:F6:AD:21:97:B6:E8:96:6C:C3:A9:8B:F1:98:82:C8:D5
X509v3 Authority Key Identifier:
keyid:F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c2:d0:d0:14:05:c5:72:46:fe:89:51:1d:02:bd:28:ba:01:
af:0d:16:d4:fc:72:7a:3a:16:03:56:25:74:6d:01:ce:4a:a5:
83:69:02:94:16:22:24:11:3c:a5:a1:b5:93:41:9c:ec:b1:6b:
10:75:89:56:6a:57:8e:99:13:b1:bc:de:37:f8:fb:f2:f3:a1:
7e:92:06:d7:c1:82:e5:0f:81:15:1b:fb:5c:19:89:08:c0:e1:
cb:49:57:6a:3c:d8:52:c7:5b:99:0b:13:96:b4:03:a2:a8:26:
74:fd:62:dc:79:b2:63:cc:4c:19:b0:c5:e4:b5:0d:b8:17:7f:
ad:ae:6a:8d:fd:e9:48:4d:12:dc:1e:b6:4a:3a:00:7e:a1:08:
aa:d8:4e:15:2c:06:8e:93:e1:2f:80:89:8e:78:e9:35:45:d4:
9f:7c:9b:c8:d0:b7:34:9b:d6:cd:1a:56:ce:6c:c2:b9:1c:49:
d6:26:d0:b2:19:f7:49:f7:67:73:00:11:b1:2a:25:d6:80:53:
7f:a5:9c:19:88:2e:4a:e2:8c:61:f8:64:71:f5:9d:f5:11:93:
46:ec:9e:5d:e0:04:70:42:b0:f5:d2:db:be:b9:62:18:3d:8d:
15:46:74:0a:bb:c7:c3:d8:0e:8e:d1:b5:bc:5e:ad:5e:7a:a0:
4f:90:21:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:14:51 2025 by rpki-client