Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
File: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft (raw, json)
Hash identifier: yEGChl/qEakUTroWX8Th+DZH8w/Ud8NTg8dKBiGh6HM=
Subject key identifier: A2:29:56:25:71:26:76:A1:05:DD:CF:F3:73:16:AE:5B:08:B4:03:01
Authority key identifier: F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
Certificate issuer: /CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Certificate serial: 01964AB40279EDD4C421D81A07C1A63FC285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
Manifest number: 02C9
Signing time: Fri 18 Apr 2025 21:00:33 +0000
Manifest this update: Fri 18 Apr 2025 21:00:33 +0000
Manifest next update: Sat 19 Apr 2025 21:00:33 +0000
Files and hashes: 1: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl (hash: RdKhnfQBuv3KJR2aGsXOa8Av7rjs6sCFv1fLNpj1p0I=)
2: _MwQhKVnR_aG2vdLhL9GNdGXvOU.roa (hash: L7braIyd07lwFhqp60fjEjjTIhLctM+CjmNa1wVvJFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b4:02:79:ed:d4:c4:21:d8:1a:07:c1:a6:3f:c2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Validity
Not Before: Apr 18 21:00:33 2025 GMT
Not After : Apr 19 21:00:33 2025 GMT
Subject: CN=a2295625712676a105ddcff37316ae5b08b40301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:58:6b:82:99:b2:50:0f:a9:6c:aa:7e:3e:1b:
56:0a:08:38:9e:2f:8e:4c:b9:8e:76:06:07:e2:76:
fb:92:03:dc:f6:7a:9b:ec:28:b8:f4:f6:27:09:c9:
40:ae:e9:93:03:87:ec:4c:99:4a:b4:cb:46:c8:d2:
ac:4f:a7:f4:ff:8e:59:a9:25:34:aa:20:79:f5:c5:
47:17:55:cf:ee:b7:8e:ed:fb:92:c2:83:ff:9f:6d:
4a:be:80:e3:1b:a5:ef:d9:84:a9:68:7e:78:c8:54:
e1:4a:ff:a2:b0:34:87:d2:2c:9d:96:c1:c8:4a:52:
21:18:9e:b7:a3:78:9a:a5:e8:09:a7:96:6b:3e:d0:
4e:fb:4e:ff:cf:83:c0:61:22:15:9b:e3:77:fa:bf:
41:ff:11:15:01:0d:e6:9d:90:3f:7b:a9:1a:91:bf:
4e:13:52:25:8f:0d:2a:0a:6d:77:e2:e0:05:53:c4:
90:5e:a6:18:5e:47:aa:ac:ef:3e:51:56:b5:62:ef:
0e:21:09:50:50:dd:01:9e:4b:32:3b:8b:27:a3:48:
d8:5a:21:7f:0d:d7:93:74:74:0c:11:e1:b9:86:ae:
1a:3c:50:33:92:22:14:7a:09:fe:0f:dd:77:2a:66:
c1:01:e3:37:b7:39:a3:59:95:bb:5f:73:1e:4b:92:
33:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:29:56:25:71:26:76:A1:05:DD:CF:F3:73:16:AE:5B:08:B4:03:01
X509v3 Authority Key Identifier:
keyid:F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:68:fc:7b:76:b4:45:36:77:6d:38:4d:a7:a9:a4:ae:0f:3e:
23:28:73:1c:16:e0:85:c9:5c:35:bf:85:4b:ef:2e:bc:c1:f4:
c2:69:ce:10:75:10:c1:71:d9:4c:11:6f:eb:57:a3:47:78:4e:
cb:55:f1:89:27:57:ca:50:09:3f:53:2c:f9:45:01:06:df:26:
20:ac:3f:a1:43:41:14:9e:78:98:60:b0:6e:87:ac:00:80:4f:
a7:e6:f1:7e:11:a0:1e:8c:a4:63:37:ec:eb:92:20:33:5e:ae:
7a:e1:72:4c:b3:ae:96:82:f3:46:fb:29:42:bf:b2:af:9f:96:
db:5c:9d:d2:8c:d3:e8:d3:a5:02:f0:f2:75:0e:66:1c:28:6b:
90:65:83:08:dc:f7:75:5c:17:00:ed:f5:45:7d:38:85:72:73:
50:c9:b4:c1:b3:16:67:ff:d7:44:0d:0f:0e:a3:84:e0:d4:98:
6e:69:6e:7d:d0:4b:20:b1:8e:4d:87:82:0e:4d:f2:e7:f4:7e:
d0:87:58:1d:3a:4e:8b:3f:3d:b0:6b:77:da:bb:b2:67:1f:ab:
ac:b3:87:30:23:25:7c:76:54:09:23:9c:1c:24:b2:66:ca:45:
35:82:af:51:cc:d8:e5:db:0f:ae:ed:ed:34:ab:d4:80:6e:13:
54:8e:23:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:42:58 2025 by rpki-client