Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
File: C8iTN1rRVbX_ztPL7iU1uGWf44k.mft (raw, json)
Hash identifier: zUkMcIvBZsxIz/9mQQ4vyPsgB8GqWp4RQEwP6QMuhCo=
Subject key identifier: 91:9B:1D:AD:98:43:29:FF:F9:91:4B:47:7B:C0:A8:3F:11:AC:3B:FB
Authority key identifier: 0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
Certificate issuer: /CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Certificate serial: 019658A68095A81B69EA2725A2235574C0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 14:00:28 +0000
Manifest this update: Mon 21 Apr 2025 14:00:28 +0000
Manifest next update: Tue 22 Apr 2025 14:00:28 +0000
Files and hashes: 1: C8iTN1rRVbX_ztPL7iU1uGWf44k.crl (hash: 6GBhyyOYc1bQCFwC7t2zjLSfjBuWQVxMrWhYaBCDq3Y=)
2: uYBmloio0v9Mj1oUCQ7dp4Uq2pg.roa (hash: k0vCLZfeunG/QoHpcwb7GJEwzSKtofkLLPDzKPrjJzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:80:95:a8:1b:69:ea:27:25:a2:23:55:74:c0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Validity
Not Before: Apr 21 14:00:28 2025 GMT
Not After : Apr 22 14:00:28 2025 GMT
Subject: CN=919b1dad984329fff9914b477bc0a83f11ac3bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:5e:25:c7:08:dd:8c:a4:1f:d7:91:21:88:
1b:79:cd:50:49:aa:a6:c9:f0:1e:fa:8d:4e:c4:ed:
e0:82:fa:fd:4f:65:35:1c:b1:8c:a7:91:93:06:96:
d0:82:13:10:73:a6:d4:0f:eb:37:0d:f3:80:27:ee:
be:8f:54:7c:71:0d:be:19:b5:9b:ef:98:69:0f:1b:
86:56:b8:ab:f7:bc:44:a6:dc:8c:16:ef:ce:2b:15:
bf:6c:49:36:89:a7:7b:6f:57:17:5e:5e:85:3b:d5:
eb:44:a8:5d:46:bc:9b:10:6d:5d:f2:6f:69:5e:12:
ce:2e:44:b4:fc:2c:01:c6:d5:54:d9:6a:38:c3:5d:
1c:9f:3d:3e:c0:e1:c4:31:8c:00:0c:99:68:df:83:
de:0d:98:58:a6:a4:12:63:05:36:dd:93:50:2f:3c:
91:64:9f:d0:5c:7d:5d:50:06:a4:97:9e:bc:21:bd:
19:2b:ca:4d:25:b5:fc:3e:2d:a4:95:69:9b:b1:de:
6a:ff:0d:4e:75:54:d1:9b:12:57:1e:07:37:cc:62:
14:fd:d4:60:86:9b:ae:26:7e:64:9d:15:ca:e3:c0:
70:cd:ff:0e:b4:8c:48:b9:fe:c5:54:3f:95:97:f1:
99:f2:31:f9:41:00:dc:ce:b4:43:24:29:1b:62:d2:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9B:1D:AD:98:43:29:FF:F9:91:4B:47:7B:C0:A8:3F:11:AC:3B:FB
X509v3 Authority Key Identifier:
keyid:0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:12:9b:21:91:36:7a:df:a5:e2:a2:f9:46:1d:e5:6d:eb:7e:
05:64:b0:43:19:a9:5e:de:51:49:ee:dd:10:da:64:02:63:97:
95:80:75:82:ea:aa:05:97:92:30:01:1d:96:85:61:1e:17:b5:
de:a0:71:73:32:3c:6c:a9:36:07:cb:e9:15:19:3e:07:83:4d:
79:0b:9e:31:5e:6f:66:02:88:be:50:2b:3e:71:bf:23:81:b7:
c1:cd:fb:28:23:4d:92:34:11:da:97:2b:58:52:48:df:30:05:
3d:f3:13:a4:f2:c7:6a:8b:55:52:68:48:c7:a7:a9:c1:46:17:
ee:50:27:13:b7:d1:7b:9f:93:43:91:29:3e:31:55:82:71:13:
91:ad:df:dc:ce:aa:6e:b0:40:2c:d4:b6:29:19:3a:45:79:37:
90:bf:f5:8a:a9:bc:49:a6:f5:3a:e0:10:d5:37:70:ca:c8:00:
d7:b8:7d:74:ec:bd:4f:b5:be:57:db:ae:53:e1:01:40:09:9a:
c5:06:da:26:fe:3a:ab:bb:7f:16:d1:da:7b:3c:64:e6:ac:45:
28:ab:90:cb:23:08:45:b2:28:ae:39:e0:51:a1:39:41:fc:fb:
a6:91:5c:ef:4e:57:c4:13:e8:2d:17:1c:34:bd:2b:9e:1b:d1:
c7:78:b1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:33:22 2025 by rpki-client