Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier: P43+vBZ3/n891VyM+gez9xFmofPS/6wyBT0xG8X/b7g=
Subject key identifier: 89:82:80:6D:2B:2F:56:35:02:5E:B8:28:8C:0A:BA:6A:23:AC:DB:00
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 0196507F6AA3E56596DBF0695D81ECF4EEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number: 0F4A
Signing time: Sun 20 Apr 2025 00:00:49 +0000
Manifest this update: Sun 20 Apr 2025 00:00:49 +0000
Manifest next update: Mon 21 Apr 2025 00:00:49 +0000
Files and hashes: 1: 3hbfOacsgkP1pg9qyg2MfHcWFYc.roa (hash: cOfUIokArUM0fSLBq8ZJr6uobm8IIPK6h0yhiKwO2kU=)
2: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: v4f/hAYpsN0UIa+jmP+04XpEW77HJ8hUVZ5pthkxGb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:6a:a3:e5:65:96:db:f0:69:5d:81:ec:f4:ee:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: Apr 20 00:00:49 2025 GMT
Not After : Apr 21 00:00:49 2025 GMT
Subject: CN=8982806d2b2f5635025eb8288c0aba6a23acdb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ae:0a:c0:0e:49:0b:d3:c5:fa:61:f7:97:4f:
c4:c0:78:ce:99:7d:34:e3:9a:70:aa:ed:5f:4b:b9:
d3:9b:cd:30:6f:cc:69:46:cf:a3:3a:97:c9:08:d1:
36:0c:83:06:d6:ec:a4:79:91:8d:c6:05:d9:0d:d8:
ed:84:08:21:35:a0:76:54:c3:bb:51:65:08:3b:67:
82:13:8b:12:cf:73:fa:7c:8a:88:86:78:84:5b:6f:
6a:2f:b0:f5:9a:56:a6:d8:59:1a:04:f5:6e:b4:c0:
c3:4d:5e:ec:90:c9:d5:8f:a3:2d:59:59:fc:d9:cc:
e6:ac:83:ee:ee:b9:79:36:92:94:b9:f7:b2:1c:7f:
54:ca:25:d1:17:d6:61:25:a5:a1:f3:af:12:fe:07:
a2:6b:5f:00:2e:b5:9b:9a:e2:e3:a4:5e:8e:83:47:
fd:97:3a:50:87:23:2d:08:47:90:46:28:4d:3e:3f:
3d:32:1c:4e:5f:9c:aa:89:d1:26:8d:a9:a4:a8:9a:
35:85:5d:a6:06:13:af:5a:13:f4:e7:87:d2:4f:ca:
e3:e1:a6:bc:ba:cc:3c:e9:66:07:90:3f:e5:91:82:
6f:d3:2f:4f:65:9b:94:68:7d:11:6b:f3:77:4b:b1:
7f:7c:6d:82:a3:af:82:2d:14:f0:2e:4a:79:b6:82:
81:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:82:80:6D:2B:2F:56:35:02:5E:B8:28:8C:0A:BA:6A:23:AC:DB:00
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:09:f1:6b:63:0c:1f:90:92:34:07:94:19:e3:98:b3:19:1d:
76:15:51:93:68:2f:16:8c:cc:65:ad:b1:fd:d5:de:07:28:b5:
26:cd:1f:2c:48:5c:33:04:f6:5c:5b:1e:4f:cd:1d:1d:ea:1f:
67:d9:2d:dc:19:08:07:28:12:94:92:02:cb:af:74:e0:63:ea:
4e:53:21:4d:cc:eb:14:a7:b4:53:d9:61:5f:40:40:61:3b:31:
68:37:37:25:cb:7b:bf:f3:f0:c4:a2:b3:5b:93:d8:60:9e:2b:
b3:2a:f0:5a:06:ef:88:89:f7:1d:5c:6a:0e:50:b3:ed:71:90:
05:56:89:8a:04:1c:c9:08:f0:4d:f3:0a:fc:66:d8:e0:0a:56:
bb:12:d5:82:e0:b9:0c:6a:d4:b0:7a:53:b4:a4:b8:cf:1b:31:
63:b2:2d:23:32:84:61:93:fd:65:ca:ff:c0:c0:0f:2b:e4:b6:
f8:a0:0d:58:d8:13:c8:97:f7:e6:dc:14:e0:27:93:42:55:08:
d7:7c:45:54:55:30:7a:f9:58:58:69:a2:8b:2d:bd:7f:80:66:
8c:7d:ac:6a:a1:c5:8d:18:9b:f8:dd:ec:dc:26:28:1a:83:3f:
57:eb:0d:3e:6a:53:25:35:95:da:39:70:74:9e:a9:88:b9:bc:
26:df:fd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:39 2025 by rpki-client