Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
File: 8IoI64-nvuajGD4y3lGi88zUrkc.mft (raw, json)
Hash identifier: 56VVRMpn6V17Ne5Um3Ahx7HSnXzFAPGiQ7veh+pwVMs=
Subject key identifier: B3:B1:E8:B5:C5:15:2F:7E:8B:9B:74:18:D9:C9:5E:56:98:39:01:4C
Authority key identifier: F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
Certificate issuer: /CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Certificate serial: 019612454E36BE52F8295674810316D5DA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
Manifest number: 06E7
Signing time: Mon 07 Apr 2025 22:00:53 +0000
Manifest this update: Mon 07 Apr 2025 22:00:53 +0000
Manifest next update: Tue 08 Apr 2025 22:00:53 +0000
Files and hashes: 1: 8IoI64-nvuajGD4y3lGi88zUrkc.crl (hash: b/9zNDRqpwEiqf9qW1ygraaf73FHo9CY7JDM6ESaEUQ=)
2: cTkzelFg_-EfS7l9udnxkMrP0Fs.roa (hash: UdEI1k400GkRcUTewdlzP2o8ezwAuPLRkhdPLsyI4ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:45:4e:36:be:52:f8:29:56:74:81:03:16:d5:da:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Validity
Not Before: Apr 7 22:00:53 2025 GMT
Not After : Apr 8 22:00:53 2025 GMT
Subject: CN=b3b1e8b5c5152f7e8b9b7418d9c95e569839014c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c0:df:c6:b2:fe:d0:52:3b:c8:f8:4c:76:d2:
20:e3:84:21:1c:04:36:0d:80:7f:56:9f:93:b4:c3:
83:b8:3a:aa:02:89:49:0d:0f:3c:08:8e:7a:38:3c:
a7:86:23:67:66:6d:1e:42:59:64:c3:a2:a2:60:3c:
14:07:c5:cb:77:16:a0:04:60:fd:82:b7:93:c5:e7:
4e:b7:cc:03:58:30:13:b2:04:6a:3a:0c:07:7f:0a:
bf:60:f0:1d:a4:a0:45:d7:ac:75:13:42:b0:c3:f7:
f6:7b:8a:d0:f3:b8:c2:cd:58:6e:96:29:97:77:a6:
89:9a:67:c5:58:2d:5f:3c:b0:31:0e:af:39:52:59:
f7:ce:21:88:6f:09:2f:cf:82:39:18:1e:5f:c7:1f:
73:3f:ae:28:9c:7a:23:92:c0:48:a9:87:46:55:bb:
f9:11:d3:25:e7:2b:58:58:ec:dc:5a:22:37:3c:51:
bb:aa:ee:55:58:07:03:49:fe:b6:c7:b4:59:b7:ba:
22:1a:02:04:c1:8f:2d:d1:5e:d7:9d:b0:e1:c1:1f:
04:4a:3c:af:bd:dd:9e:67:4e:e8:95:f7:89:1e:a1:
c0:10:6d:b7:28:c9:68:39:ac:b7:86:c1:a3:28:c7:
3f:36:0d:06:c1:aa:89:51:35:d3:1d:eb:92:f5:4e:
98:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B1:E8:B5:C5:15:2F:7E:8B:9B:74:18:D9:C9:5E:56:98:39:01:4C
X509v3 Authority Key Identifier:
keyid:F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:06:11:e3:70:49:77:65:79:cf:db:19:87:86:60:bd:a6:db:
ae:9d:08:c5:99:aa:25:b7:4c:59:27:02:a4:b2:6a:a6:c8:f4:
4a:05:e2:95:d6:18:5a:1c:c2:6c:8a:dc:ec:50:7d:1b:18:42:
40:68:98:90:c8:4e:4e:90:34:fc:c4:ad:25:e9:81:ee:ae:88:
b3:a8:53:00:c5:39:33:1b:2f:e0:d4:09:1d:60:a9:ce:07:3d:
39:eb:90:ec:22:60:5b:2d:a0:ed:97:94:67:ba:b7:40:f4:af:
df:bb:e1:85:29:c5:45:d8:2c:5a:48:0c:8a:9d:3c:59:0e:4c:
c1:62:eb:c5:42:b7:ef:0a:e5:95:0d:da:45:36:cb:59:25:66:
41:9b:be:c8:3b:82:0b:97:62:55:48:9e:36:62:ea:57:9a:95:
47:15:66:54:e1:56:0a:bc:6a:f9:19:78:3a:30:0d:de:94:a6:
08:e7:51:7d:bf:b6:43:63:84:1b:fe:3a:19:b4:52:36:49:eb:
4c:c7:fb:3f:99:4b:60:f5:f1:88:2d:4b:b9:e4:ec:2b:f4:29:
34:bc:f6:89:aa:93:80:92:17:99:b8:2b:74:37:a1:1a:99:bc:
fd:b6:8c:f0:96:25:a6:55:9f:7d:6b:5b:7c:52:21:08:47:8a:
6d:85:14:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:00:23 2025 by rpki-client