Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
File: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json)
Hash identifier: yS0MukNe4tDsgX62Vvrx4Xk0GKpYcdSWV/dmFCGIePo=
Subject key identifier: 04:8C:FD:83:89:09:39:3A:24:D9:79:A1:9E:6E:D5:87:A5:AF:AD:21
Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e
Certificate serial: 019610FBE71CB56AF59125EC655C9BA71844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
Manifest number: 09BC
Signing time: Mon 07 Apr 2025 16:01:06 +0000
Manifest this update: Mon 07 Apr 2025 16:01:06 +0000
Manifest next update: Tue 08 Apr 2025 16:01:06 +0000
Files and hashes: 1: XKCgbBOF2hVHKDo78niiU6jULHg.roa (hash: QEaRFAJhUUsQeo4vGH+Fx3VQmk/EsBaPpLYF/MqkgOs=)
2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: Ix3AISh4MH36iIDgul0vgP8yjwvZCJEtagI/HFP5Hhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:fb:e7:1c:b5:6a:f5:91:25:ec:65:5c:9b:a7:18:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e
Validity
Not Before: Apr 7 16:01:06 2025 GMT
Not After : Apr 8 16:01:06 2025 GMT
Subject: CN=048cfd838909393a24d979a19e6ed587a5afad21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:3b:35:1e:18:12:71:93:22:c8:75:16:a4:
f2:96:94:d5:c1:60:03:e9:e3:54:06:a7:65:bd:45:
5d:8a:28:6d:38:74:74:57:bc:18:ba:0e:e4:9d:44:
50:f6:9c:8e:97:d9:fe:54:8f:fa:43:bd:7d:f1:20:
8d:4d:ff:aa:86:0a:c2:16:ba:56:91:f8:cd:53:a2:
77:20:42:76:7b:23:ff:73:4d:70:0f:6c:d6:94:64:
d8:39:43:c4:8b:2f:4b:8d:f1:0a:c9:29:ff:2e:06:
ef:56:3f:d6:6c:61:33:f8:57:39:4a:82:1c:c6:f6:
26:0f:03:f1:e3:18:55:79:be:c6:d0:f8:bc:00:54:
31:e9:70:9a:d4:fe:d4:4f:18:e3:8d:66:4f:5a:fb:
f8:a5:5f:37:9a:35:2a:69:d9:81:c3:bb:68:f9:bf:
65:55:53:87:82:24:73:44:51:75:ce:4a:02:ad:3f:
b6:69:da:08:6f:11:ca:ea:9b:51:c8:0a:01:5a:af:
df:f7:1e:08:9f:b8:f2:70:c5:9e:a3:49:b0:d5:a0:
09:fc:54:d2:68:e5:cb:9c:36:6b:b5:ef:6b:30:db:
0d:72:93:8e:3b:a9:b6:96:7b:61:85:b5:30:ca:c9:
03:18:d2:78:04:d2:20:91:7c:62:6d:a7:a4:b7:b9:
48:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8C:FD:83:89:09:39:3A:24:D9:79:A1:9E:6E:D5:87:A5:AF:AD:21
X509v3 Authority Key Identifier:
keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4e:ef:db:63:fa:85:27:22:43:a1:96:77:78:b9:17:c1:f0:
bc:8f:6c:a7:b5:29:6d:0c:1f:13:16:48:a3:1d:66:3a:59:be:
0d:15:f3:fc:51:7e:84:49:3d:66:c7:a4:bb:d0:4d:b1:5f:ff:
86:cc:fb:16:5a:42:b0:b3:2f:35:69:f6:ea:af:03:6d:75:85:
84:d6:ee:81:33:5d:de:65:83:f4:0a:37:dd:90:e7:60:fa:3e:
cd:a3:55:52:1d:d1:1f:da:8b:6b:2c:98:af:30:83:89:c3:a8:
14:e6:8d:68:47:ad:51:74:df:cc:fe:3e:3c:67:16:86:d4:15:
86:da:d4:04:bd:7b:95:59:0b:a3:b7:a0:01:c1:2d:2b:58:9d:
84:4d:09:ec:73:4d:bf:df:8e:37:c0:33:cd:d3:ae:7c:59:02:
90:a7:20:10:ac:c3:fd:c6:fd:90:d9:14:16:43:3d:2c:93:3b:
31:21:a4:64:bc:c2:e9:f8:4f:d2:7f:5a:ba:ec:cf:12:a3:5b:
17:9b:e1:31:eb:8e:5d:12:5e:2d:50:de:31:7f:20:f9:61:7d:
8c:9e:e0:ae:bb:bf:9c:50:c5:94:42:9a:5a:7f:d1:db:10:a9:
d2:68:4e:e4:72:78:3c:ae:45:0d:61:33:8a:1e:f9:b5:18:cd:
6e:dd:75:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:49 2025 by rpki-client