Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: 9T1pEC8vKUUlF6OMw8/wOFad0wVHpWH08UYfM2Y4u0k=
Subject key identifier: A9:34:50:26:89:0D:56:83:4D:82:3F:29:1A:DF:6E:6D:9C:5C:3C:0C
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 019645C5C09611A2A336128453C74ECCF470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 0B9D
Signing time: Thu 17 Apr 2025 22:01:49 +0000
Manifest this update: Thu 17 Apr 2025 22:01:49 +0000
Manifest next update: Fri 18 Apr 2025 22:01:49 +0000
Files and hashes: 1: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: 59e40FSH8i8C8CYbM7wvJPVVZFpG2mLOTRBJeqxdoQs=)
2: f8mNy-1avonS_WiVxLnjQLPSSV8.roa (hash: Zx+TLSuG3LLevKeGkpvoHFC+rwTqCzGzO/bzI3CHmxw=)
3: s6pjMkaUMJH3bmFXp69HLkN6HiA.roa (hash: nbZzfTGEGLYlrEJQFB74A8uRuG/tPptj9lY9KUc17PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 22:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c5:c0:96:11:a2:a3:36:12:84:53:c7:4e:cc:f4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Apr 17 22:01:49 2025 GMT
Not After : Apr 18 22:01:49 2025 GMT
Subject: CN=a9345026890d56834d823f291adf6e6d9c5c3c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d3:40:0c:73:8a:0f:7f:11:e8:c6:06:3a:79:
f9:62:e8:7f:1b:9c:a0:c5:e8:98:43:62:3e:98:8e:
9f:5a:d6:10:b5:3c:96:e2:95:f3:f3:cc:16:64:1d:
e7:94:dd:12:57:6d:14:e4:90:a4:59:6e:46:07:17:
e5:1e:34:67:d7:90:0a:69:cc:df:ea:d1:09:2f:db:
66:45:5f:96:8c:fe:68:ad:c9:ca:55:4c:b2:0d:c6:
2f:d1:a8:dc:3c:9e:6d:78:fa:ff:8f:c8:d3:68:d2:
6c:57:bc:5e:c5:22:a3:f6:47:04:12:26:a5:02:76:
45:27:72:ae:c4:bc:77:5c:8b:bd:0e:0b:f4:4a:71:
29:fa:af:7f:0b:93:dc:52:fd:92:6d:98:f1:d5:eb:
d4:d3:98:6d:ad:ac:c9:0d:12:67:dd:4e:f1:d3:23:
86:6c:cb:11:9b:c0:a0:17:0a:d0:da:2d:5a:c3:86:
02:74:ba:7b:b3:08:7a:72:5b:a3:a6:d4:11:85:8d:
2d:fa:c8:c1:9b:99:7d:fd:dd:f7:30:6c:91:73:e1:
4b:e4:9d:95:7a:39:a0:a6:88:6d:5e:d8:8e:e1:01:
31:19:fd:f5:4f:e8:b1:92:2b:ed:d9:2c:d4:b9:a0:
cd:a6:b4:ba:0f:6b:5b:5a:8b:3c:f8:6a:c9:d8:5c:
f6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:34:50:26:89:0D:56:83:4D:82:3F:29:1A:DF:6E:6D:9C:5C:3C:0C
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:58:36:5d:f9:cc:5c:4d:7e:ee:ea:5b:9d:c3:25:e5:f6:5c:
17:29:4d:8a:bd:57:9a:d1:73:ae:8d:41:83:64:1f:e9:f7:3c:
fe:08:a3:44:f4:5a:b3:b0:12:41:a5:16:11:2d:b8:72:d2:db:
95:0e:94:e3:e1:07:90:55:0d:68:22:81:c7:92:53:9b:7b:2d:
ae:a5:8e:84:bb:a4:50:0a:47:47:31:c8:e5:00:dd:8b:7a:19:
8f:3f:d8:6c:82:73:d5:0b:d6:34:87:7e:82:03:97:80:c9:53:
67:e0:90:42:5f:d7:63:d9:78:e3:16:82:23:e7:be:04:9e:08:
5c:27:7c:b0:f0:ae:f0:2e:01:a2:6f:41:7d:eb:25:5e:50:09:
6c:82:29:7f:a7:0b:db:25:e0:5e:46:18:e2:72:3c:e3:f9:cb:
4f:7c:a9:f9:08:06:d3:64:25:e3:76:75:2c:9e:44:b5:d3:1c:
4a:5c:0f:3c:ea:92:eb:72:32:07:c1:74:ea:e3:8f:56:25:26:
12:7e:4e:91:fa:88:04:35:48:10:46:a2:49:4f:38:53:b2:9d:
15:85:1c:95:d6:e1:7b:b9:f0:51:9f:44:db:73:09:f5:af:e5:
5e:51:c6:18:01:a5:32:fe:d7:69:64:15:fe:73:f6:34:b2:a6:
04:87:8e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:01:57 2025 by rpki-client