Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
File: a8GtFnaioypFoM85L3-cXqaOLeo.mft (raw, json)
Hash identifier: SGcbIVG32Cki9II5GFjeiwJ8fPd9ObZPT2ABdpVS/hc=
Subject key identifier: 44:59:47:10:43:4B:1A:9A:20:98:AA:CA:3F:62:BE:05:A8:CB:B3:8B
Authority key identifier: 6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA
Certificate issuer: /CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea
Certificate serial: 01965EA8C83B38B062D3691E1E39FCAB12BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 18:00:41 +0000
Manifest this update: Tue 22 Apr 2025 18:00:41 +0000
Manifest next update: Wed 23 Apr 2025 18:00:41 +0000
Files and hashes: 1: CkA5P7l5ePDJ8YtVI5RwljhHN3I.roa (hash: Rv4CNPYpNEer366FC8TAHEAISsXVQ6rJf8w+ppgPPgs=)
2: a8GtFnaioypFoM85L3-cXqaOLeo.crl (hash: Yus+yCD60xJL/J2VjxMJe97BZ33nn26gHyMynzm/nvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:a8:c8:3b:38:b0:62:d3:69:1e:1e:39:fc:ab:12:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea
Validity
Not Before: Apr 22 18:00:41 2025 GMT
Not After : Apr 23 18:00:41 2025 GMT
Subject: CN=44594710434b1a9a2098aaca3f62be05a8cbb38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cb:f3:47:2b:96:43:02:46:6f:fe:57:9e:27:
92:4b:db:8f:fe:41:b0:6c:72:c0:f0:d4:68:a9:f5:
53:15:47:97:13:bb:08:fc:04:91:32:47:eb:9f:da:
5d:2a:d2:10:e3:cb:2f:f0:17:10:a7:78:f5:38:3e:
68:61:a8:42:22:eb:cf:c9:7b:75:db:ea:2f:45:2a:
7a:bf:44:9f:41:ea:6e:1a:b7:34:6a:d5:0c:32:38:
ed:8c:01:9f:e4:39:07:c4:da:b7:8c:c9:fe:03:31:
38:6a:45:a7:f3:d8:20:25:af:d9:6e:cb:97:69:84:
e0:bf:7a:c5:9a:85:b5:90:9b:fb:63:59:ab:84:0d:
ea:42:86:22:5f:c7:cb:c5:a1:0d:be:62:42:1d:fd:
62:f6:8f:59:b2:39:f9:ec:f5:4a:11:12:40:e6:71:
71:e5:98:c2:62:9f:27:01:1e:df:31:5b:e9:7f:23:
d7:85:46:30:fc:3a:9e:c2:c3:ac:40:ea:3d:a8:0b:
64:da:e5:c5:a7:d7:48:d2:71:ae:66:70:df:4a:07:
1c:ca:31:c2:0f:d5:11:45:3a:9e:c8:0f:af:90:20:
53:15:08:cb:39:1d:ee:73:bc:77:cc:ef:01:06:e7:
33:9b:7b:ae:6d:fc:1a:0b:65:29:06:62:77:f7:b7:
96:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:59:47:10:43:4B:1A:9A:20:98:AA:CA:3F:62:BE:05:A8:CB:B3:8B
X509v3 Authority Key Identifier:
keyid:6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d7:c3:1c:01:ee:61:a0:f2:ca:3e:1d:e4:77:3a:f6:c5:d8:
7f:e1:95:85:9d:d1:8f:70:c9:b1:47:5b:b2:a0:8e:c0:46:d0:
26:31:39:d1:05:47:12:fe:c6:07:8f:36:40:3d:d8:ae:87:89:
43:f3:8f:3c:60:de:09:47:9a:42:96:af:e2:91:88:72:5f:64:
18:1a:db:88:84:84:6b:6e:60:29:b3:18:27:58:c4:75:d8:ab:
21:7b:4f:60:49:93:1f:04:c3:9d:87:ee:56:e7:4b:0e:c1:e5:
15:ee:f5:3d:13:eb:78:ff:2e:49:0f:a4:33:11:3a:0b:77:95:
06:13:4a:e9:3e:0a:12:6c:6b:14:23:35:7e:fb:f5:11:41:e6:
22:83:0c:5b:53:68:55:df:b0:26:ed:fb:aa:4c:a7:d8:2f:49:
c0:06:17:dd:5c:7b:d8:b0:ee:7a:29:b3:4b:28:45:05:d7:4b:
83:aa:78:f6:4b:2c:bf:d6:f8:74:1d:d9:93:37:28:79:92:f9:
d6:2d:ca:04:b8:5d:40:2a:cc:a8:dd:64:3a:f9:14:9d:ce:36:
10:d5:f4:e9:3e:32:57:97:99:23:3d:78:90:06:84:ec:3a:dc:
07:f6:50:a6:9a:a7:72:4f:35:e9:eb:d6:92:19:d6:20:51:25:
17:dc:2c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:17:04 2025 by rpki-client