Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
File: 88q2j7sMl5R2WUvfxWwZIEK43t8.mft (raw, json)
Hash identifier: u8WeEQqZKIb7dny6K1nlGpcYzD5UY3IUiBiSrX41afY=
Subject key identifier: 00:F9:EB:2B:DF:4B:F8:B4:23:C9:EE:2B:C4:38:5D:55:E3:26:BC:48
Authority key identifier: F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF
Certificate issuer: /CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
Certificate serial: 01965ACBE7790864D0CA92B6C0D3FF7485C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
Manifest number: 1045
Signing time: Tue 22 Apr 2025 00:00:34 +0000
Manifest this update: Tue 22 Apr 2025 00:00:34 +0000
Manifest next update: Wed 23 Apr 2025 00:00:34 +0000
Files and hashes: 1: 88q2j7sMl5R2WUvfxWwZIEK43t8.crl (hash: tOo5COMDnrfBMiFW+5+OOvQCEwh4LVU3FVqtSqXVtuc=)
2: uhzHg_0oTjSNISZWz69g2JwlZBI.roa (hash: SYDZB0vXv8S1CegMsOsTpWapvWlbrYaUA5uYqL/hcv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:cb:e7:79:08:64:d0:ca:92:b6:c0:d3:ff:74:85:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
Validity
Not Before: Apr 22 00:00:34 2025 GMT
Not After : Apr 23 00:00:34 2025 GMT
Subject: CN=00f9eb2bdf4bf8b423c9ee2bc4385d55e326bc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:75:97:31:f5:56:19:8a:0e:46:73:7e:5f:
44:6c:42:56:9f:18:d6:28:6e:30:57:79:a1:b5:f3:
09:e6:49:ea:2e:da:1f:ac:d4:02:b7:75:90:6f:94:
67:c0:3e:31:7d:c7:1b:3e:bf:b5:7c:dc:53:90:cc:
8e:ce:78:5a:c2:10:f9:0e:6e:b0:a7:bb:7d:4c:1c:
7d:69:b5:42:69:ca:53:72:d3:68:39:5c:da:ed:c5:
89:fc:d8:3a:aa:81:ff:38:3b:40:4b:5e:cd:93:2e:
7c:3a:e2:51:6f:c1:8f:6b:f6:77:45:25:91:b2:58:
68:0d:95:2e:60:bb:be:0d:59:00:88:c9:20:5b:60:
94:8a:86:e6:5b:fd:c1:e6:58:92:4d:6e:9c:c5:06:
35:98:0a:e9:14:ab:68:1a:e9:1b:78:b6:50:2b:92:
56:86:3e:c3:8f:51:2f:76:29:6b:c7:0f:a9:2b:03:
32:60:b3:72:63:1a:39:14:a4:20:cb:95:85:b0:3a:
e8:27:5d:0f:58:e7:5d:51:bb:08:f4:a9:ef:9a:b4:
43:1b:82:e9:51:f7:a7:0f:09:a3:65:d5:23:0b:e2:
08:ed:8b:6b:84:47:a1:4d:e0:79:9e:5b:a3:af:db:
87:05:05:12:bc:0b:68:45:f7:27:92:a6:99:15:bc:
fe:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F9:EB:2B:DF:4B:F8:B4:23:C9:EE:2B:C4:38:5D:55:E3:26:BC:48
X509v3 Authority Key Identifier:
keyid:F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3b:ad:57:00:34:74:56:a3:e8:c7:94:2d:81:56:dd:d1:6d:
55:4c:55:3f:8f:eb:78:41:f9:fd:0b:08:36:d2:35:fb:c5:e1:
c9:c0:83:ca:5f:bf:9d:0f:e8:d4:fe:5b:b6:3f:48:49:ab:82:
62:b9:7a:14:f2:54:6c:33:0b:0d:08:72:f9:99:5d:53:70:2b:
85:eb:a8:3b:52:8f:cc:68:37:54:fe:45:65:9b:28:59:37:87:
e3:14:e1:d9:23:0b:90:ee:9a:b1:ad:95:dc:63:9e:8a:3d:4b:
63:8d:71:2d:31:ee:ea:c2:a2:7e:00:4e:3d:01:59:5a:85:98:
b6:60:5d:1d:72:1c:82:8a:e5:27:32:73:78:23:ea:29:f7:ee:
29:42:99:90:39:c0:9b:3a:29:ea:a0:ef:d2:3d:36:75:63:bd:
57:95:7a:26:00:41:4c:c9:17:15:a9:43:e9:60:6e:48:00:1d:
06:63:94:46:dd:92:2f:c9:28:01:79:76:fa:9e:81:b7:78:9f:
8f:4d:0c:ec:44:df:73:0d:b8:08:dc:02:ec:fe:94:11:5c:fc:
e1:b3:f6:f4:5e:c4:87:f4:19:90:9a:e4:48:32:83:34:d1:c6:
6b:68:3e:41:ce:ca:59:b3:d6:19:8b:2d:41:7c:3b:52:89:bd:
81:b3:a7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:28:14 2025 by rpki-client