Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File: 8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier: 0n3kt2T/GRO3I3u8zHk4ifp9zNYdKLnaU+ocNZ6yBFc=
Subject key identifier: 9B:35:8F:C8:AA:FF:32:22:CF:8B:2A:CE:50:32:5C:2B:2A:0B:24:C9
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial: 01958EBD1BB4127ED10A98A3B4F86BA640C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number: 0E5C
Signing time: Thu 13 Mar 2025 09:01:52 +0000
Manifest this update: Thu 13 Mar 2025 09:01:52 +0000
Manifest next update: Fri 14 Mar 2025 09:01:52 +0000
Files and hashes: 1: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: IljywDGU4BUuhD+SUpPVp3tx9d7TCOJLka1xMA4iWMs=)
2: Mkl44sEh_I1NJhSRpZogcHN-KpQ.roa (hash: UFBdvkUQHMElnZ7pMex1cDJSyxO3mce2NK6vzaKBwPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bd:1b:b4:12:7e:d1:0a:98:a3:b4:f8:6b:a6:40:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Validity
Not Before: Mar 13 09:01:52 2025 GMT
Not After : Mar 14 09:01:52 2025 GMT
Subject: CN=9b358fc8aaff3222cf8b2ace50325c2b2a0b24c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:88:55:e8:99:ed:f7:4e:27:b4:80:78:6b:
3b:85:cb:fc:68:a7:bd:d2:0b:f7:2d:b4:2a:4c:b4:
60:cf:f3:ae:c0:ed:b4:ed:b8:e2:41:c1:04:4e:d8:
05:21:5c:d4:2b:c3:43:7e:e6:0c:14:08:07:39:57:
da:ba:ac:6a:ed:ca:8d:29:d7:80:5e:bb:c4:17:52:
1f:16:28:69:bd:55:b9:56:96:af:74:2c:82:ad:c8:
db:53:ea:00:8a:52:52:20:8d:3e:a7:d7:50:57:d5:
e9:b7:63:07:52:4e:67:cb:3f:af:bf:55:da:6c:9a:
b8:82:82:16:54:3c:ad:dd:0e:c5:c1:93:48:3f:d9:
76:ba:82:0c:90:21:b9:72:df:34:44:b3:aa:bc:d7:
b8:87:54:b6:c1:c2:f1:90:c1:20:4c:4f:6a:2a:6b:
8b:f2:49:57:d6:2f:83:cf:4e:fe:30:57:e2:2d:1a:
77:66:4a:6a:db:d4:93:1b:6f:22:29:26:fc:3d:5e:
79:1f:99:ca:4a:7b:73:09:62:10:5b:86:79:8b:ee:
0d:a8:17:0f:7d:cb:5b:0d:95:02:7c:7b:03:6a:35:
ed:4a:ae:3a:bd:6f:cd:3c:5f:65:76:10:ee:1f:55:
26:86:a8:14:c1:d0:c9:a7:da:03:ba:4b:ae:4b:b7:
bc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:35:8F:C8:AA:FF:32:22:CF:8B:2A:CE:50:32:5C:2B:2A:0B:24:C9
X509v3 Authority Key Identifier:
keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:72:d1:42:fb:e8:1e:94:6c:68:f8:42:9a:66:ea:a5:ce:46:
f0:77:61:14:14:66:25:ab:22:26:a4:73:a2:56:22:e5:c7:fb:
c1:f3:56:ca:11:26:58:97:5d:81:5c:28:d3:a9:cd:75:3e:a4:
74:6b:6a:a5:03:98:9d:ae:30:5d:ba:30:a8:7b:38:4f:98:8d:
fc:7a:45:af:de:78:ef:31:f3:ec:24:85:90:00:67:b4:fa:40:
bc:8b:1c:80:07:29:92:b0:eb:47:1a:15:dd:ad:7f:fc:0a:6d:
49:f2:85:6e:89:ba:d1:4d:3b:c0:1e:68:84:44:70:cd:9a:c8:
11:05:5d:10:36:20:26:88:9d:02:ca:cf:ee:0a:a6:f3:dd:8c:
91:83:fa:80:0f:81:a2:c4:bc:5d:05:18:bb:61:ff:d6:e7:bd:
8e:41:88:c4:04:e9:36:b1:b8:20:c7:02:7f:ea:dc:0b:25:b9:
ce:a8:6d:61:97:2a:1f:6f:8b:10:55:ad:66:0d:5d:25:8f:c0:
71:01:1b:5e:1a:0a:0a:d1:10:bd:a3:c3:cd:2b:4d:0f:65:fd:
b5:99:3c:5e:ff:46:10:c6:95:69:de:96:a3:bb:8b:23:8a:42:
50:1b:7f:b8:c5:1c:88:db:16:ab:7d:a5:01:41:50:24:eb:d5:
c7:d2:66:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:51:15 2025 by rpki-client