Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
File: 8SsbaOoQk7zueNBxkubYw_cDAs8.mft (raw, json)
Hash identifier: Ej0eYZIeYg/UUXiMCTXqX+dlIlQZT3EpVzDghHXe11U=
Subject key identifier: 0B:64:10:CB:62:2F:70:7B:0F:56:FD:77:CA:08:E6:C8:B7:11:41:76
Authority key identifier: F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
Certificate issuer: /CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Certificate serial: 01964F6CDD14F86E57A4D250532BD1DB323A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
Manifest number: 13E7
Signing time: Sat 19 Apr 2025 19:00:56 +0000
Manifest this update: Sat 19 Apr 2025 19:00:56 +0000
Manifest next update: Sun 20 Apr 2025 19:00:56 +0000
Files and hashes: 1: 8SsbaOoQk7zueNBxkubYw_cDAs8.crl (hash: yIWGOV2zN53MvKvD4YK2P4JSFJlWcvbkNIw+VL/QpY0=)
2: bKPhCw0mFqwfHuOY5bTkew_cDWA.roa (hash: GZO9dwOguzhoWcajFIoo6bMBVjK4nlEVTDqTZEZzar4=)
3: u_s4QKsF9p1kSN0KedlqNHJpJkI.roa (hash: 8YDGRlWAcN7f5DRHYPeywi/SAyIqYgv/xJQxk+e27Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:dd:14:f8:6e:57:a4:d2:50:53:2b:d1:db:32:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Validity
Not Before: Apr 19 19:00:56 2025 GMT
Not After : Apr 20 19:00:56 2025 GMT
Subject: CN=0b6410cb622f707b0f56fd77ca08e6c8b7114176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:42:a6:6c:8f:8e:94:be:c8:78:02:04:d7:
1c:94:a1:09:76:13:8d:a5:89:f9:16:63:06:b0:cd:
a5:8a:80:83:f4:0f:1a:8b:66:a7:53:bc:a2:e3:50:
79:58:5e:52:6f:96:90:48:09:89:49:c2:72:12:40:
67:cb:84:6c:33:97:06:b1:a4:d7:5b:c3:5c:96:bf:
c9:e1:0b:21:fd:d7:db:d9:99:fe:99:dd:0a:a8:61:
6d:92:19:7a:b6:8c:e9:51:28:af:7a:04:02:75:3e:
eb:0a:a5:69:1e:a3:56:bb:30:6e:27:f4:5c:cf:76:
ad:a7:69:bf:c2:4c:76:2f:91:39:3c:66:70:dd:f8:
17:57:14:63:bd:63:3c:68:fa:42:63:c9:c2:66:12:
89:54:19:bd:0b:33:79:26:e5:9b:de:3e:3f:fb:9b:
af:69:0d:fa:0d:38:6c:77:3d:11:91:34:f9:ae:33:
a2:21:53:03:1f:ed:fa:8f:00:b9:13:1a:c2:fe:b1:
25:05:1b:33:6a:2e:8b:b2:ce:66:1f:18:60:94:6d:
e4:69:ac:62:08:50:9a:72:36:f4:78:6d:23:5d:7c:
8d:d6:b9:d8:9e:41:34:f7:29:f1:53:84:a8:8b:4b:
cc:3b:30:06:a6:e6:5c:30:50:91:ef:c2:cd:71:f9:
6e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:64:10:CB:62:2F:70:7B:0F:56:FD:77:CA:08:E6:C8:B7:11:41:76
X509v3 Authority Key Identifier:
keyid:F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ef:23:1e:7a:a4:d7:c4:ed:08:bc:69:a0:64:a5:44:f7:0d:
15:bf:c1:e2:ab:78:d9:07:81:1c:e3:8d:7c:14:8f:e6:2f:7e:
ec:c1:0a:2d:ef:cb:0e:3d:a4:4f:06:de:e0:e7:e9:73:b4:0f:
4a:bc:04:39:74:d0:c8:b3:13:ca:7f:af:ba:0d:5d:37:10:70:
c9:33:d6:bc:b9:10:13:0b:6c:02:cb:b2:bd:bf:38:ae:ca:b5:
b9:00:cd:f7:e3:9a:6f:39:65:a5:91:a8:a2:63:4e:43:e0:42:
b7:ff:df:5b:d4:5c:ac:d3:86:7e:e5:c9:14:4d:14:06:42:e6:
32:c5:63:bd:b4:e3:ac:d1:74:06:6d:3f:a8:08:bd:4b:64:02:
6e:51:30:4c:eb:bf:33:9e:d7:80:19:47:8c:28:cf:d0:12:15:
03:0d:7d:15:d3:5f:0d:d2:09:fd:1a:c0:c9:49:25:27:a4:34:
45:6c:01:c2:30:df:a9:50:9f:dc:82:38:0d:4a:71:27:f9:14:
12:a1:21:9e:61:a4:64:90:11:00:34:30:8d:82:d1:a9:99:cc:
58:d4:63:93:3a:f3:f4:f8:69:bd:77:ca:5d:db:e4:5e:9b:f5:
22:ef:ae:56:5d:02:0d:ad:5d:cc:86:85:1e:10:d8:7e:c3:24:
b1:57:ae:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:05 2025 by rpki-client