Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
File: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft (raw, json)
Hash identifier: FTvB82CKDG5Jbq4+53qBGy4OwopkQTcB/QwAkzPSaBc=
Subject key identifier: 97:CA:3F:D3:1C:8F:FC:39:F4:CD:32:91:B5:13:67:6E:A4:11:A6:FA
Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
Certificate issuer: /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Certificate serial: 0196545C3B81D219405B479184D78E788355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
Manifest number: 07B6
Signing time: Sun 20 Apr 2025 18:00:52 +0000
Manifest this update: Sun 20 Apr 2025 18:00:52 +0000
Manifest next update: Mon 21 Apr 2025 18:00:52 +0000
Files and hashes: 1: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl (hash: Y6XicRalLPy6vO8To06JVg0KNoswHEev0Hh6LFlsyVQ=)
2: UroSMBJ-dWGGRFh5Y1mFEYghmuA.roa (hash: m8pCii9ZrFUBgw1JUoFjV1fAPuVi2H0sk6feFoafD2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:3b:81:d2:19:40:5b:47:91:84:d7:8e:78:83:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Validity
Not Before: Apr 20 18:00:52 2025 GMT
Not After : Apr 21 18:00:52 2025 GMT
Subject: CN=97ca3fd31c8ffc39f4cd3291b513676ea411a6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:20:24:b8:56:a4:36:c6:dd:1a:c1:61:4b:
5e:f9:9c:de:e4:ad:52:69:4d:3d:eb:8c:49:67:3d:
57:ed:c0:ec:28:a7:bd:4c:4b:a1:be:2d:04:9d:96:
4f:80:5f:c9:8a:bc:dd:f5:33:aa:e0:70:ba:42:e4:
7c:45:8d:9a:76:33:88:ad:be:32:6b:47:1c:ce:fc:
b8:cb:03:1a:6f:a3:50:2f:73:6e:aa:cd:4d:36:79:
ab:9f:fb:28:90:57:ff:c9:b3:30:94:27:8c:4f:b3:
35:84:32:5a:6d:47:8d:d5:04:ef:1e:5a:39:4d:a6:
f8:dd:ca:6e:83:8c:10:52:4a:bb:11:59:ad:29:f8:
80:5e:50:63:ed:68:e6:61:e7:79:71:71:7e:24:f1:
9e:24:98:e6:43:81:62:e7:c2:86:d8:0b:18:3e:3d:
f7:62:e7:e8:11:26:8c:2e:2c:bd:03:c5:8a:a3:bb:
59:61:40:64:65:f3:4e:a0:94:b5:40:a3:ba:87:17:
46:81:18:f2:92:42:65:b5:57:87:6a:8a:20:5e:d0:
fe:ca:ab:95:f2:e8:5f:5c:e0:d0:6f:2c:5e:ff:cb:
08:5e:6c:38:b0:c3:86:a9:80:98:42:a3:93:82:87:
6c:7a:8c:69:0a:5b:33:09:66:8a:60:d1:7f:6b:68:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CA:3F:D3:1C:8F:FC:39:F4:CD:32:91:B5:13:67:6E:A4:11:A6:FA
X509v3 Authority Key Identifier:
keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:11:66:ac:16:df:e0:84:0c:ac:f0:a8:5a:b2:9a:2f:05:5b:
d2:65:4d:23:f4:58:a0:1e:af:1c:05:9b:13:5e:0e:ca:36:8f:
a4:ca:5f:2c:ed:4c:09:7c:dd:22:a0:36:d6:c5:c7:d2:c9:f3:
e5:f5:5a:19:bb:d0:31:92:2e:21:66:d6:77:3e:3f:35:b7:26:
3e:c9:ff:e4:77:35:f0:7c:b4:06:e3:9b:26:ae:55:9b:64:18:
ce:00:15:b7:07:df:cd:b4:cb:40:ca:24:75:e3:d4:20:1b:20:
41:d4:f2:2e:71:2c:5c:4e:fd:c4:3f:06:fe:d6:83:37:d3:9c:
ba:5a:2f:6a:6d:e8:df:9e:df:ac:b0:ef:9c:64:c8:6b:07:66:
01:fc:b6:38:52:e5:de:84:ef:49:b6:95:84:3c:da:96:2a:86:
78:3f:74:97:85:87:57:41:5d:b1:0c:34:52:e9:a5:25:95:f3:
11:aa:86:3f:b8:c1:2b:a5:ff:e4:3b:02:ef:de:64:19:ee:a6:
55:1c:12:b0:9f:b1:7e:95:46:57:5a:b2:e2:42:41:c3:18:cf:
c9:84:1a:87:7a:e7:b0:d6:bd:e3:c9:59:93:e9:f0:8d:fc:6e:
dd:82:70:9f:c2:77:6f:93:3c:d0:ae:1e:d9:43:d7:f0:43:0d:
51:f0:07:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:44:03 2025 by rpki-client