Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
File: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft (raw, json)
Hash identifier: RQSkdaFMIz6cWTIxHsRWHjNzmU3D9sdzgoN9QRnGEyE=
Subject key identifier: AA:52:EB:D3:3E:B5:3A:1F:27:92:CC:13:80:A0:C1:1D:3C:4B:2E:09
Authority key identifier: F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
Certificate issuer: /CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Certificate serial: 01964D473F2AC4C35508B900C6CBA3A73C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
Manifest number: 01E3
Signing time: Sat 19 Apr 2025 09:00:36 +0000
Manifest this update: Sat 19 Apr 2025 09:00:36 +0000
Manifest next update: Sun 20 Apr 2025 09:00:36 +0000
Files and hashes: 1: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl (hash: qvnPaokOErc0aYdiKgoh8NE2m2/XW959mFlrlVbCMWM=)
2: xvoTABjzfOJqRlktELqO5-hThXE.roa (hash: x+oF0WQqCiPxjdbp2WUuqGjKnL/p9KwR8r/xmYFnEcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:3f:2a:c4:c3:55:08:b9:00:c6:cb:a3:a7:3c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Validity
Not Before: Apr 19 09:00:36 2025 GMT
Not After : Apr 20 09:00:36 2025 GMT
Subject: CN=aa52ebd33eb53a1f2792cc1380a0c11d3c4b2e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:12:3e:8b:a3:bb:e5:78:c3:c7:df:19:f7:
f5:2b:db:e7:41:59:0c:0f:d4:08:41:90:be:ef:08:
77:01:d0:87:7e:4f:cf:36:04:da:0c:dc:d6:93:fd:
63:6d:a1:d8:4d:a7:14:72:27:37:9b:ab:f7:d3:47:
f7:c3:dd:fe:81:28:cb:b1:27:0d:38:61:c9:71:f5:
3c:26:a1:7a:4c:ed:5a:dc:4e:ba:fb:52:f1:67:51:
8d:13:ee:af:2b:22:66:5e:c6:59:a7:6f:20:ca:69:
b2:9a:9d:a3:73:d5:67:03:85:f0:f8:0e:5e:3e:1c:
ba:a5:d7:ac:cf:38:ed:26:dd:6b:eb:c3:48:d1:e4:
45:3c:c3:0c:f8:85:7d:47:7c:6d:c2:61:9c:7b:7d:
b1:c7:ab:d2:cd:31:f2:9f:41:ef:74:f5:25:b5:87:
47:6b:d8:fc:ec:f0:ac:f2:ec:f3:03:c9:9b:e0:b0:
72:9f:85:8d:2b:e3:ab:f1:03:f1:7a:db:c3:dc:be:
31:dd:dc:37:a7:e8:bd:84:5e:20:d2:9d:20:bc:ec:
6e:c8:de:9e:53:49:f9:f3:61:71:6b:07:18:04:fa:
83:46:33:db:3a:d2:c3:7e:cb:e3:24:a2:d4:af:a2:
54:87:e1:e4:54:b7:80:3a:44:77:d8:35:2c:f2:73:
56:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:52:EB:D3:3E:B5:3A:1F:27:92:CC:13:80:A0:C1:1D:3C:4B:2E:09
X509v3 Authority Key Identifier:
keyid:F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5e:ab:62:83:63:d3:0b:98:b0:96:27:db:32:83:a4:34:38:
50:1e:2c:84:31:e9:76:92:a9:6b:b1:a2:8a:91:a6:ac:ca:03:
30:de:5d:9b:43:27:3f:67:1e:42:45:ab:3d:12:2b:88:bc:8f:
cd:97:80:e1:7b:c3:4f:33:25:89:09:0b:99:ae:ff:b5:4b:14:
21:77:ee:e6:67:95:ac:1b:db:2a:7e:2d:81:1b:fe:6a:20:5c:
11:66:a0:5e:33:73:11:9a:ac:26:fb:73:ac:f6:66:4b:be:8f:
d1:87:00:8c:f6:e3:72:25:0c:93:45:a9:ab:e5:f6:e0:5a:16:
fe:1a:fd:98:f5:b1:57:3d:e3:f2:ca:ce:46:3f:d7:36:2b:20:
4b:3d:13:0d:97:c8:87:e3:c3:44:5c:21:ec:3d:d7:0a:cf:2f:
91:73:6c:91:68:85:ea:e3:d9:29:53:25:0b:26:7f:c3:3b:94:
1a:9e:b5:03:5d:0b:18:25:48:64:f1:08:1f:5a:3b:cc:77:e1:
4f:00:6b:c5:83:18:a9:ea:8e:01:70:26:43:7e:7e:de:b3:2d:
2b:b1:8a:a2:68:ba:fc:d0:04:2b:e8:60:bf:88:56:4e:ce:62:
db:78:8c:13:28:86:d0:c9:7b:d1:99:bb:af:15:73:a1:af:87:
42:d7:5d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:03:24 2025 by rpki-client