Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
File: 8AI84rpaHU_QpeIn3nTLxB0rucg.mft (raw, json)
Hash identifier: eiAB/JnvlvLkJ/PC2uU4mtXQoa752IdTyVC8Gpf4DjA=
Subject key identifier: 38:08:1B:1B:44:6C:4A:0B:FE:AA:DE:F6:E9:A9:E9:70:75:86:6F:D3
Authority key identifier: F0:02:3C:E2:BA:5A:1D:4F:D0:A5:E2:27:DE:74:CB:C4:1D:2B:B9:C8
Certificate issuer: /CN=f0023ce2ba5a1d4fd0a5e227de74cbc41d2bb9c8
Certificate serial: 01964632F63E6B07F530C2A87F24D36C37BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
Manifest number: 123F
Signing time: Fri 18 Apr 2025 00:01:07 +0000
Manifest this update: Fri 18 Apr 2025 00:01:07 +0000
Manifest next update: Sat 19 Apr 2025 00:01:07 +0000
Files and hashes: 1: 8AI84rpaHU_QpeIn3nTLxB0rucg.crl (hash: vAIzUUl1DsJs1IWQH9wZlNgEqSYByp9bhlyakZjX+pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:32:f6:3e:6b:07:f5:30:c2:a8:7f:24:d3:6c:37:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0023ce2ba5a1d4fd0a5e227de74cbc41d2bb9c8
Validity
Not Before: Apr 18 00:01:07 2025 GMT
Not After : Apr 19 00:01:07 2025 GMT
Subject: CN=38081b1b446c4a0bfeaadef6e9a9e97075866fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:b9:c5:ae:d6:ef:df:db:a2:06:90:33:2c:
b4:b0:46:e2:f2:1a:85:31:3d:65:1c:88:81:d7:d7:
36:46:c7:65:ef:ae:3d:74:68:c2:23:3d:3c:49:90:
83:5e:f3:9f:38:c0:be:d0:c9:fc:67:63:29:76:0d:
24:54:4c:1c:8a:30:47:29:60:75:20:4c:85:13:22:
03:f9:b7:fc:e0:be:a4:1a:27:0d:79:12:22:89:c3:
1e:90:0d:f3:62:b5:37:ab:77:c4:74:ac:2d:0b:16:
68:0a:8b:d1:25:e0:ba:a9:79:7a:6a:24:72:3c:40:
ba:4d:4c:6f:f2:f8:5d:08:61:20:57:7e:06:fe:2b:
5a:d8:d7:a5:28:1f:3d:8c:b4:03:13:40:63:dd:c4:
e6:98:32:de:1b:bf:a0:69:07:79:70:06:5b:63:05:
05:cc:d1:43:ee:61:6c:ed:94:8d:d4:96:56:e1:0f:
1b:17:48:e0:67:4f:9a:47:63:da:04:0b:63:9e:f5:
4d:5a:b8:7c:38:73:c2:69:b0:d7:80:11:26:c9:4a:
94:b5:04:09:47:ad:82:51:99:4e:50:a6:1d:62:51:
59:19:12:14:55:7c:6c:35:5b:27:af:3a:93:81:c6:
5c:57:04:b1:4e:d2:a1:d8:81:6f:e7:d4:03:dc:22:
29:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:08:1B:1B:44:6C:4A:0B:FE:AA:DE:F6:E9:A9:E9:70:75:86:6F:D3
X509v3 Authority Key Identifier:
keyid:F0:02:3C:E2:BA:5A:1D:4F:D0:A5:E2:27:DE:74:CB:C4:1D:2B:B9:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c7:03:3d:58:a7:45:e9:cb:3f:5c:80:cf:fd:bb:15:cb:88:
1d:4e:7d:27:a7:9f:b6:bf:40:cf:1a:45:1c:d0:47:33:f9:8f:
51:29:37:b6:73:b2:0e:8d:0c:12:50:23:28:28:c9:31:a9:09:
62:58:ea:8d:48:6f:4d:71:98:ea:7c:dd:d8:9f:4c:1b:61:b2:
5c:c9:e5:30:1b:1e:86:1a:32:5c:14:14:a5:0d:b7:92:99:24:
03:59:58:89:18:8a:4e:04:99:1a:28:d6:41:78:e4:f2:44:13:
a9:bb:88:51:a0:ee:9b:be:97:c9:5b:4e:ad:18:44:09:ef:3a:
52:68:d8:93:43:7e:e3:07:e8:57:41:d0:fb:ae:c9:ad:e8:9b:
d9:e7:21:78:d6:96:60:a4:27:4b:f3:c3:7c:92:4e:80:7a:dd:
5e:12:c2:39:ff:3e:9e:5b:d4:35:69:38:c9:db:41:aa:aa:0e:
52:49:ce:22:a1:be:94:00:80:5a:b5:12:c3:2c:d4:40:25:eb:
bb:90:ca:31:5a:f3:37:00:f5:0b:f6:fb:9a:a6:b7:bb:21:28:
ac:b5:a3:7b:ca:c3:a7:2f:6b:cb:68:8f:f1:46:9a:4e:18:c9:
fe:64:8c:92:83:21:5f:7c:74:7b:8c:be:cf:2d:79:07:d8:65:
87:ae:9c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:55:38 2025 by rpki-client