Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
File: st8A84zO2SGXmTB2yzaFvzK8Xmk.mft (raw, json)
Hash identifier: b2mb9peOxsURPDxYVutuL8AQGl78DqOjEqoFJlyVrAA=
Subject key identifier: 0F:BA:FA:59:58:BA:A4:70:54:47:DA:BC:57:9F:8C:04:73:49:49:5D
Authority key identifier: B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69
Certificate issuer: /CN=b2df00f38cced92197993076cb3685bf32bc5e69
Certificate serial: 019655DCBB699562F3BE212B08287C4F6FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
Manifest number: 1067
Signing time: Mon 21 Apr 2025 01:00:51 +0000
Manifest this update: Mon 21 Apr 2025 01:00:51 +0000
Manifest next update: Tue 22 Apr 2025 01:00:51 +0000
Files and hashes: 1: gbTQ5TFLqYdv3bxMQXRQSRcMIoc.roa (hash: rJ5djAjgxTYzs8j0EQsFjkKUrs3CGg0sgiibLKW68Ck=)
2: st8A84zO2SGXmTB2yzaFvzK8Xmk.crl (hash: +zAp2aM+lGY1qa5+k5dtsleE8T9CJ7KSmuOBe6a8axE=)
3: wu3L_A3dWSKUeaU4lbLH5tQFGhs.roa (hash: QMvHM8N7K9OdWcNx9rJFFp+Z7jXiktM21WFlvU4ZxMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:bb:69:95:62:f3:be:21:2b:08:28:7c:4f:6f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2df00f38cced92197993076cb3685bf32bc5e69
Validity
Not Before: Apr 21 01:00:51 2025 GMT
Not After : Apr 22 01:00:51 2025 GMT
Subject: CN=0fbafa5958baa4705447dabc579f8c047349495d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:8c:f6:cb:84:32:d3:65:c3:df:90:12:68:
0d:dd:2f:86:7b:a2:a8:e6:28:59:14:52:32:32:f7:
dd:10:c2:92:4b:9a:14:10:0b:d8:3b:87:32:75:94:
38:1e:4f:bb:f4:04:6a:da:62:e1:26:fa:26:d0:ad:
72:39:6a:5d:b0:92:b2:9a:9e:ad:80:30:b9:53:85:
64:dc:e0:95:9f:9b:6a:31:ca:c0:a1:76:e0:ed:06:
bd:c6:9b:a8:96:d0:21:b6:4d:ac:23:26:e6:ff:f5:
c3:e4:2b:06:c3:82:29:ca:09:03:d7:04:69:b1:b5:
9e:11:c2:7c:58:cd:d4:4d:20:32:da:55:ab:5d:f8:
4d:e5:bc:e9:b2:3a:f6:9f:47:a1:5c:03:aa:e5:38:
a6:19:d7:e3:1f:d7:08:11:91:02:a8:7b:22:29:8c:
b0:aa:8a:10:83:5b:cd:49:40:9c:ad:f2:3f:06:b9:
ca:fa:cc:ad:2b:15:84:e9:39:d7:9a:36:ba:d8:9a:
14:2d:e5:ce:66:85:c9:57:8c:a5:e8:63:b6:92:4c:
f1:82:bb:38:b9:12:87:61:84:c9:ad:1d:c6:45:e4:
04:6d:b3:03:83:db:6b:64:0d:4c:ac:05:00:e3:26:
45:ad:5b:77:af:a2:41:c2:59:60:1c:0b:e5:8a:e3:
51:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BA:FA:59:58:BA:A4:70:54:47:DA:BC:57:9F:8C:04:73:49:49:5D
X509v3 Authority Key Identifier:
keyid:B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ca:37:aa:0f:bc:18:61:63:0b:f3:88:a0:18:82:62:64:cd:
8f:d6:fa:5a:83:1a:18:43:8b:71:62:23:80:6e:74:70:7e:65:
c8:8c:e9:a5:22:6c:c5:21:7e:97:fd:ce:5d:10:da:f6:2d:2a:
88:88:49:9a:38:83:e8:1c:c3:19:65:1d:d7:24:6b:04:23:87:
96:3f:42:06:9e:71:0a:c6:7e:67:ff:3b:69:44:85:fd:03:db:
72:36:fb:87:6f:34:49:d0:b5:8e:a8:d3:34:c7:95:8e:3b:d6:
75:83:0e:a9:5c:1e:02:9b:f8:84:d4:e9:62:5e:7c:48:c7:48:
df:e4:1e:1f:6e:6e:d3:27:2f:b4:79:5a:9e:44:51:21:33:0b:
a5:b8:23:45:8f:f5:0e:c7:64:c0:79:31:3f:07:5b:18:50:77:
e0:92:40:e4:06:79:e8:72:f0:b8:d1:4c:23:f6:6d:6f:11:af:
1b:4e:8d:44:b2:87:20:64:65:ab:b8:17:35:a4:d2:0c:7f:03:
ee:a3:86:54:c4:c6:84:2a:2c:a6:8b:20:f9:3e:57:39:b1:03:
26:c2:d5:68:bb:38:f5:b0:60:2c:bf:90:9c:c5:33:d5:d6:92:
ac:fc:28:b6:72:9c:69:b7:7e:4b:f8:aa:fd:6d:97:61:ce:78:
a0:93:7a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:46 2025 by rpki-client