Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
File: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft (raw, json)
Hash identifier: KqceqN9V91vrtp3qOqS5m3643YHbVxo0fAlLWC4gLEo=
Subject key identifier: 13:FE:F6:0C:38:BC:24:2A:CC:C7:A8:37:CB:7C:2B:63:1A:4E:DC:C2
Authority key identifier: 44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
Certificate issuer: /CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Certificate serial: 019654C9CF374066C7F598174F05931A77F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
Manifest number: 027C
Signing time: Sun 20 Apr 2025 20:00:33 +0000
Manifest this update: Sun 20 Apr 2025 20:00:33 +0000
Manifest next update: Mon 21 Apr 2025 20:00:33 +0000
Files and hashes: 1: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl (hash: K3BaUY5qhwjPizoG4Sd3cc2M5PRktPg8OYtY/2qQorc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:cf:37:40:66:c7:f5:98:17:4f:05:93:1a:77:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Validity
Not Before: Apr 20 20:00:33 2025 GMT
Not After : Apr 21 20:00:33 2025 GMT
Subject: CN=13fef60c38bc242accc7a837cb7c2b631a4edcc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:46:cb:97:9d:6b:60:de:47:a8:50:c0:c3:83:
9b:0f:f7:cf:53:ed:00:eb:f1:22:e8:57:ea:d0:41:
15:75:45:98:82:4e:55:15:6e:d1:d3:a8:95:51:1f:
ac:cf:2c:e2:e0:35:c6:ed:54:d9:bf:a6:ae:e2:98:
f3:72:69:78:a4:71:7b:c4:8a:f3:96:6c:bb:d7:fe:
4e:b0:fc:b9:93:5c:60:f8:ed:33:53:60:ef:d7:67:
fa:fb:4a:05:80:7b:e9:1f:d0:a5:3b:59:5e:37:40:
57:0d:0c:6f:62:0f:54:9c:b1:c5:89:63:73:70:95:
68:98:a3:b0:48:0a:58:ea:a3:4b:86:1f:96:1f:b5:
5f:f6:1f:22:28:6d:af:63:98:3b:38:17:da:9b:d0:
f8:b7:59:2a:9b:d4:c7:76:11:c6:e2:ff:66:14:18:
4c:7c:4a:fe:37:a8:09:1e:5d:36:fb:0c:6e:95:a7:
97:28:40:42:38:f0:af:61:36:80:b3:36:70:c3:42:
b8:df:f8:ba:37:e0:3f:3c:2c:db:7d:c6:a2:89:1e:
0e:88:e0:b3:25:b4:70:27:ee:8c:ef:de:d1:d4:c2:
e2:ee:ee:76:4f:56:9e:b3:83:59:72:59:0a:d7:a7:
2f:84:e9:87:6c:b9:d2:17:35:09:3a:91:be:6d:b5:
7c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FE:F6:0C:38:BC:24:2A:CC:C7:A8:37:CB:7C:2B:63:1A:4E:DC:C2
X509v3 Authority Key Identifier:
keyid:44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:2a:e8:fb:56:a4:8c:61:11:fe:47:99:16:76:b2:02:61:f8:
0d:12:7d:92:d4:45:8d:28:1f:e2:05:d7:c6:cd:77:be:fd:e6:
4c:8d:47:0d:dc:8b:29:0d:55:c1:b4:1c:14:1e:0d:51:84:10:
ff:64:22:e9:fd:68:c6:d6:c9:f9:02:6b:34:0a:3c:96:79:a2:
e2:f2:c6:12:99:71:20:5e:18:3a:53:b6:3d:c7:e4:7b:37:e7:
b3:81:15:b6:dd:d3:4f:33:ed:cd:ce:c7:ed:bc:40:c8:e0:2e:
ea:72:72:e3:42:dc:c8:97:2b:47:5d:38:db:23:e0:fd:57:0c:
1a:c1:3c:65:9c:21:1e:66:56:88:3d:c8:e4:6d:2b:fc:2d:3d:
91:65:f6:76:2b:42:44:52:51:40:53:f9:36:35:00:1a:4e:b9:
91:50:9c:14:1f:bc:b5:f2:ff:aa:b5:20:aa:94:1a:50:92:eb:
19:33:6d:27:6f:c2:71:8b:50:73:3e:35:70:3a:3c:07:d1:4d:
e0:aa:95:7f:9a:b1:30:25:e6:cc:63:1e:e1:51:c0:79:07:bc:
d0:77:7f:23:ae:13:e2:fb:7f:ad:40:12:7f:40:47:20:05:d5:
84:19:a9:e8:c8:22:c8:c6:18:fb:d3:cd:c4:16:90:c5:3b:1a:
5d:c9:0f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:04 2025 by rpki-client