Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
File: 8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json)
Hash identifier: Zg8D1/2Zd6cDocuCCdG4YjU5zeif9t3kjoSUj6yZ24M=
Subject key identifier: 9C:85:82:E4:80:45:FD:E3:E7:18:76:25:5C:32:6F:79:7A:F7:5F:49
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial: 01964CA21603E49A08BBF8BA48BEC923C975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 06:00:12 +0000
Manifest this update: Sat 19 Apr 2025 06:00:12 +0000
Manifest next update: Sun 20 Apr 2025 06:00:12 +0000
Files and hashes: 1: 3-RywYSjpl9yuamrGaiHfk5Mz6o.roa (hash: khi3zX71hfk8spUUIwuIJwDTfe1y2tzgOMplAgujSag=)
2: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: csb7QGbHNEMCXnBtMf9448Slu2cbntr6zQvEERL9r5k=)
3: qmufYg21c7b0gdjuY1ziryDKce0.roa (hash: cPNs19EWQmBAO/qKhHL4tQL9v8RMF/40vmmVOD5n7Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:16:03:e4:9a:08:bb:f8:ba:48:be:c9:23:c9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
Validity
Not Before: Apr 19 06:00:12 2025 GMT
Not After : Apr 20 06:00:12 2025 GMT
Subject: CN=9c8582e48045fde3e71876255c326f797af75f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:9a:23:90:b7:6b:15:b2:d2:fe:cd:f6:da:
86:69:42:f6:46:aa:44:c5:15:72:85:15:d8:38:23:
19:54:ba:a6:34:4d:40:ed:2c:e0:b1:93:e8:24:32:
a6:67:b2:c0:19:f5:06:9a:b8:e6:af:6e:51:5c:e1:
85:60:1b:5b:d3:74:61:e3:fb:04:08:96:7f:f4:31:
d8:d6:da:74:8a:49:95:9a:4e:97:80:99:b2:71:e6:
54:06:13:bd:16:61:f5:b3:dc:de:b5:80:b7:46:59:
fa:ab:7d:bc:76:a2:c1:34:94:c3:49:35:24:fb:ab:
93:93:bf:7c:17:1b:f5:a3:15:81:ad:30:49:fd:91:
ac:60:9b:99:3e:e9:99:89:6f:e5:91:87:d4:bc:61:
bd:9b:ad:f6:32:af:41:f7:13:10:5e:b6:97:d0:02:
82:d7:75:d8:96:39:f9:5e:8a:65:50:bc:dd:a9:f9:
5f:93:1a:d3:9c:60:53:52:ff:b1:fa:48:e3:a6:6b:
9b:21:51:35:64:6e:da:a7:5d:6d:1e:c9:c0:5c:62:
6f:fb:d3:cd:13:98:0c:3b:7a:16:34:c5:a5:e6:e4:
e0:70:9b:dc:6e:98:5f:84:74:91:46:b7:bf:d8:2a:
bb:fd:ee:68:00:db:05:f8:f5:cf:91:0b:66:ee:e0:
2f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:85:82:E4:80:45:FD:E3:E7:18:76:25:5C:32:6F:79:7A:F7:5F:49
X509v3 Authority Key Identifier:
keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:bd:b6:0f:5c:85:9b:18:a4:43:e1:39:f8:55:06:c7:c1:bb:
43:a2:3b:ad:7b:ea:d5:86:c8:d8:6d:0e:c9:99:c1:d8:ff:e2:
33:92:0e:7f:46:48:48:09:74:51:80:54:64:d0:9a:cd:c9:90:
7c:e4:6d:a4:a7:62:e7:08:ce:73:5c:dd:bc:2f:b9:7f:9d:17:
46:0d:db:7b:a5:5c:da:5d:92:ba:69:4b:93:92:c4:50:fc:8a:
c0:d1:bd:e9:68:70:fe:2c:3f:c8:4f:6d:0b:d2:5a:36:3b:2f:
ff:18:b8:20:72:10:2a:97:6d:b5:e1:d1:a9:40:27:5f:93:ad:
3e:91:e6:73:99:2b:2e:22:03:e4:e1:b4:37:b5:82:bc:48:35:
ba:a5:2a:b1:b9:5c:26:8b:fc:05:30:42:0e:11:40:f6:fe:5e:
c7:c5:71:56:3b:ed:40:c2:17:b7:0c:19:c7:3e:72:3d:6d:f4:
b4:28:60:50:38:23:66:7a:72:87:76:dc:32:69:e8:1d:d6:44:
89:dd:50:65:f7:34:8d:80:2d:3f:7a:c4:60:13:4c:78:8f:b7:
88:8f:17:f5:81:1b:c6:90:af:de:55:f9:03:b0:42:07:24:2a:
06:db:ff:72:e9:78:ea:90:9a:c8:1c:40:f3:85:6f:fd:ae:7a:
50:74:64:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:10:21 2025 by rpki-client