Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: 7vGoE1gYYdD21hCtlyscld8SwyQEnezghE1njGI54Kc=
Subject key identifier: 36:0C:D3:17:63:40:25:47:9D:EA:CE:FB:17:EE:7A:2D:98:DE:22:04
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 01963A9C1C62F467950CA850A4A8B3DF37ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 05B1
Signing time: Tue 15 Apr 2025 18:00:31 +0000
Manifest this update: Tue 15 Apr 2025 18:00:31 +0000
Manifest next update: Wed 16 Apr 2025 18:00:31 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: A311vK/aymRQw4KHCJ0XQU+QmmUk02HQisXNeroOEgw=)
2: NoirTMocfMUxRX4SSF3NnN1MXMg.roa (hash: k1dgXUxG201nPT5HWgsPlWuxupL/o/GsnkXTowkj8SY=)
3: kBL0NGTyltK_bUGqu0ZT8FN5oyY.roa (hash: RQ7q9e83VNSzPNBYQofT5w9K3HiXcrFugBatkkxu9/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:9c:1c:62:f4:67:95:0c:a8:50:a4:a8:b3:df:37:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Apr 15 18:00:31 2025 GMT
Not After : Apr 16 18:00:31 2025 GMT
Subject: CN=360cd317634025479deacefb17ee7a2d98de2204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:25:e6:27:5f:4d:27:cb:f6:aa:b5:9b:98:
71:d1:ef:37:68:23:9c:88:c4:86:c9:65:b2:38:ac:
bc:e5:d7:8b:a9:b4:25:6b:39:d0:fb:84:17:5e:fc:
c6:bb:0c:0c:65:bf:9e:92:89:09:de:97:d4:1e:c9:
db:e0:ba:73:2e:cc:0e:6c:38:24:7a:ad:fe:2d:b0:
22:2d:34:c8:1d:d5:cf:50:21:cc:b7:7b:0c:09:90:
a1:12:bc:d3:16:aa:c3:0c:91:ca:92:ee:8d:d6:aa:
a4:c9:20:6b:d5:63:0c:20:f0:aa:9d:51:f3:7e:39:
77:d2:ee:c5:18:d6:98:03:81:58:6f:d7:d3:e7:94:
4e:c0:a1:4b:55:2b:96:3c:da:60:7b:bc:50:7f:9b:
41:7f:c3:3d:8c:4d:4c:e7:93:d9:e0:0e:c0:72:84:
90:20:84:96:4d:47:a0:5c:e5:82:d8:db:31:71:88:
db:3b:83:36:e1:ad:cd:c5:c7:be:86:b3:aa:d9:75:
fe:47:da:56:01:7e:3f:a4:2b:ac:61:f0:d5:22:5e:
74:66:79:1f:cb:3d:33:3b:f5:aa:3f:0c:a0:d2:45:
c2:a0:e2:7b:7e:a6:f6:2b:6d:f9:68:8d:17:80:65:
15:2b:29:57:3d:c4:c3:cc:18:c1:9d:39:81:a1:30:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0C:D3:17:63:40:25:47:9D:EA:CE:FB:17:EE:7A:2D:98:DE:22:04
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:9c:a4:96:3e:a5:d1:1b:6c:17:8c:70:a1:b5:c6:26:b7:b5:
93:5a:83:53:7e:69:0f:23:1c:70:b9:14:f7:60:ea:a1:3f:0c:
19:1e:5d:d3:5a:d1:3b:bf:8f:cd:4e:57:1e:87:5e:0f:67:14:
b5:3a:35:cf:16:b4:fa:b8:58:fd:55:c3:6e:e9:ee:69:24:41:
a0:56:95:be:72:06:cd:98:53:70:f3:8e:0f:a6:27:08:e2:42:
fa:c2:a4:16:90:33:b5:88:9d:df:0e:da:1b:0c:e3:ba:6c:a9:
ff:55:72:9c:22:35:a8:f4:bb:8b:93:d0:94:40:08:6e:b0:6c:
aa:86:ca:00:f9:82:3a:56:b7:e2:fb:47:fd:1a:26:72:49:3a:
d9:8a:2a:ef:ff:ad:2d:16:28:0f:76:30:9c:9f:44:3c:75:f6:
c6:f2:91:b6:c7:aa:04:a2:17:f3:53:12:a6:dc:86:d0:0d:28:
16:58:b6:06:8a:9b:1a:d9:41:ec:49:e7:e1:d5:af:69:b5:b2:
d6:00:ac:af:9c:4b:8d:9b:51:e7:37:76:e8:e3:96:57:8d:56:
66:18:ce:8a:78:03:c1:30:23:dc:7a:ae:0e:73:da:c6:f4:ac:
f3:38:a5:78:44:41:c6:47:29:02:bd:5b:3d:02:16:dd:62:ee:
1a:c6:fd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:43:45 2025 by rpki-client