Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File: 8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier: YtDPeyvHWAE6qCaWAJ8vM+/pWREOUVjmRC8kxohN4wE=
Subject key identifier: 4C:0A:4E:92:5E:A7:A2:F1:BC:FC:CE:16:C1:4C:C2:4F:CD:2B:CD:43
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial: 019655A5C1DF102DF23AA9277D30CB2CF242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number: 0EC3
Signing time: Mon 21 Apr 2025 00:00:48 +0000
Manifest this update: Mon 21 Apr 2025 00:00:48 +0000
Manifest next update: Tue 22 Apr 2025 00:00:48 +0000
Files and hashes: 1: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: 1QG1boUmAuERkGhxKjRu48Ea2uHUStmZmTljuJcjrZ0=)
2: Mkl44sEh_I1NJhSRpZogcHN-KpQ.roa (hash: UFBdvkUQHMElnZ7pMex1cDJSyxO3mce2NK6vzaKBwPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:c1:df:10:2d:f2:3a:a9:27:7d:30:cb:2c:f2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Validity
Not Before: Apr 21 00:00:48 2025 GMT
Not After : Apr 22 00:00:48 2025 GMT
Subject: CN=4c0a4e925ea7a2f1bcfcce16c14cc24fcd2bcd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:bf:72:80:8a:fd:eb:43:12:14:6e:3b:78:
4e:5b:d2:90:f8:5d:0f:a4:03:b7:9f:32:24:c1:f7:
e1:da:61:54:6c:66:cd:77:c8:df:be:ab:50:9f:2c:
c8:88:da:de:09:c1:82:95:46:e9:e6:5f:25:2f:f0:
94:8f:87:54:c4:66:54:0a:c9:ff:9c:be:0c:50:f7:
01:26:66:a3:f5:f3:8e:7a:0f:55:13:58:64:f5:c8:
fe:71:39:2c:43:2c:e9:31:fd:ea:99:f7:7e:8f:ce:
21:1e:5a:73:38:3d:6b:89:26:ec:8e:34:72:f9:61:
78:3d:90:6b:15:b5:b7:b6:f7:3e:e3:88:53:44:61:
1f:28:3d:d1:c9:15:06:a4:04:65:f1:f6:4b:c3:f1:
ed:cb:c2:5a:f3:c0:ec:1f:5e:02:17:cc:8f:f3:57:
cc:1a:74:03:f0:63:81:0a:b1:b5:3f:08:f7:45:50:
5b:a0:a9:6d:d6:a0:51:be:ca:17:f7:53:b8:f1:64:
13:94:7b:5c:72:6e:b4:05:45:fe:73:8a:ae:09:91:
16:09:4e:69:5a:f2:43:f4:37:20:98:f3:10:71:8e:
36:5c:5e:21:ea:7b:ec:d3:4a:0b:ed:75:e3:37:d8:
dd:3a:d7:ff:11:dd:37:52:26:5c:f3:bd:42:60:0e:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0A:4E:92:5E:A7:A2:F1:BC:FC:CE:16:C1:4C:C2:4F:CD:2B:CD:43
X509v3 Authority Key Identifier:
keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:14:9c:46:db:59:86:fc:77:a1:46:12:37:7c:83:c0:9e:f4:
7e:ad:91:51:00:b0:a0:10:83:c1:bd:d9:f7:58:87:c8:25:cf:
43:27:dd:f6:c5:ea:87:35:7b:89:5a:7d:4d:e8:45:12:b0:9d:
d3:40:23:07:95:c3:d0:16:9c:66:f6:19:b0:07:6f:a7:e1:7a:
83:70:88:cb:72:13:5d:80:06:f8:62:c3:c2:d0:80:43:b5:07:
1f:97:4a:29:c7:74:0e:27:fd:8c:6a:ec:10:0e:04:28:96:eb:
29:61:4a:05:91:52:0d:55:84:22:2f:5a:c6:8f:dd:45:6b:4b:
86:7a:1d:36:95:d8:88:f7:1c:a9:ba:ba:07:58:42:a6:ec:9c:
ee:86:e9:29:72:33:e2:84:a2:ae:15:5b:c8:b3:2d:9d:02:26:
d8:4f:83:40:60:4f:08:f7:93:d2:eb:7d:1e:83:14:81:b4:73:
64:eb:59:a8:15:53:27:7f:b6:67:43:e3:52:13:27:ef:2c:cd:
59:ea:d7:62:51:64:dc:a6:43:8e:fd:0e:a8:b4:a4:38:6a:92:
55:5c:33:31:bf:5c:8b:a0:a5:d5:81:41:8f:e0:be:39:0b:bd:
d3:60:d3:0f:63:b5:4a:db:d6:5c:40:a8:90:05:64:cc:39:c4:
46:34:a4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:34 2025 by rpki-client