Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File: sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier: /KzVymSXchuqJtLkMqZqgjXt3se7EI0CzFmDJusbJU4=
Subject key identifier: CB:BE:E6:58:4F:4A:37:C8:B5:22:44:61:95:9F:81:9E:C2:79:07:0B
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial: 0196531261CE900B5F1C6D984C6D986CF11F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number: 08EC
Signing time: Sun 20 Apr 2025 12:00:35 +0000
Manifest this update: Sun 20 Apr 2025 12:00:35 +0000
Manifest next update: Mon 21 Apr 2025 12:00:35 +0000
Files and hashes: 1: E6bot_tKJqCzADpBxFeKtsutgCs.roa (hash: IzVVajCV/IB0bxI8d5Bqo7CZjFjDagAuPrwaJPvu9o8=)
2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: LVUwB8z6qyygj86WBheH5x0EOeYVb3UNtLR99x0VT2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:61:ce:90:0b:5f:1c:6d:98:4c:6d:98:6c:f1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Validity
Not Before: Apr 20 12:00:35 2025 GMT
Not After : Apr 21 12:00:35 2025 GMT
Subject: CN=cbbee6584f4a37c8b5224461959f819ec279070b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:d2:df:fd:a6:e6:6d:fb:26:99:7f:b7:a1:
0c:7f:77:ac:2b:ab:1d:64:b7:69:49:85:49:66:11:
67:41:5b:9c:3b:b3:41:05:04:07:f8:22:77:ab:b4:
78:e2:f6:40:a6:84:8c:d2:cd:ea:ed:53:19:54:07:
bb:02:3a:82:e0:cc:2a:8a:60:ab:7d:fb:a2:58:57:
53:5b:50:e7:94:7f:17:6d:13:58:bf:14:93:07:3d:
90:eb:f8:49:9b:11:e7:4f:bb:0c:86:52:f6:40:86:
57:bb:4c:fe:1b:ca:56:35:22:60:11:f3:fc:e6:bf:
79:94:ab:29:3f:bf:b1:0d:0a:99:cf:da:1d:e3:f6:
07:aa:3f:0d:51:9f:31:1e:02:9c:39:f7:4c:fc:53:
17:8b:07:1c:af:4c:02:0c:a4:77:61:a9:1b:29:31:
11:04:fa:59:31:86:90:2a:d0:97:85:1a:9a:19:67:
eb:eb:20:0e:91:03:d3:cf:37:90:49:ab:9e:c3:45:
9a:89:21:ba:87:da:4f:75:4a:21:bf:28:69:47:7d:
c2:49:88:0f:0e:d6:c3:2f:7d:1d:9c:51:6f:2c:b8:
28:5e:f5:a8:1c:a1:37:74:71:31:e6:74:3f:a2:66:
d8:3a:c9:08:6e:9d:2a:d4:0e:fb:ce:ed:1f:ac:f1:
de:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BE:E6:58:4F:4A:37:C8:B5:22:44:61:95:9F:81:9E:C2:79:07:0B
X509v3 Authority Key Identifier:
keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e4:30:7c:3c:a6:8f:67:c1:78:aa:09:91:1b:d1:25:0f:f4:
e4:f2:77:4a:ea:ea:fe:c5:39:d6:70:ee:f1:62:49:b2:27:76:
f3:eb:ed:50:53:e6:be:43:d8:60:1a:c9:b2:d9:f0:14:b9:5c:
a1:37:47:8a:f8:00:9d:5d:80:92:c5:fe:ae:cb:21:c3:84:0c:
7a:1c:6a:b3:71:5e:f4:64:99:f0:8b:e6:c4:01:55:25:25:73:
d4:70:2b:83:4d:e0:dd:a1:7c:d9:aa:da:7c:42:d8:8c:58:b3:
6f:4a:67:24:73:61:62:a0:c2:fe:01:ed:d5:05:75:89:74:f0:
13:5f:48:f8:da:d9:76:80:45:18:c5:12:8e:7b:91:fa:3d:fd:
d0:83:ce:22:8f:cb:17:67:86:df:15:19:75:70:d2:b3:2b:7f:
6a:b5:9b:7b:44:c7:81:f9:74:2d:53:c7:5e:fb:63:bc:05:a8:
57:62:61:d8:a2:22:fc:76:68:53:d9:e8:e4:05:a9:80:ab:0f:
6f:4c:29:c0:8c:f2:d8:47:10:bd:1c:a5:67:8e:be:06:00:ae:
18:fd:f9:b0:68:fd:6f:53:5a:36:8b:5f:c0:a2:01:70:2b:52:
2d:0f:96:f8:e8:72:eb:7e:de:39:c2:8e:fa:aa:75:88:bf:03:
1e:b9:da:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:06 2025 by rpki-client