Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier: lgECczivzVoFuVaP3c/A6mNGqL2Z3y4KQEkv0or8Oac=
Subject key identifier: 64:95:CC:FC:6D:E6:30:CC:03:99:15:9F:03:CF:28:F9:94:76:27:0C
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial: 01964C6BF2ED05DACABF9E227478D11A6F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number: 0FA3
Signing time: Sat 19 Apr 2025 05:01:04 +0000
Manifest this update: Sat 19 Apr 2025 05:01:04 +0000
Manifest next update: Sun 20 Apr 2025 05:01:04 +0000
Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: +h3bpFSEtASqbVFhcNe7DXRr4ukCirwmz6Pbh8XCX9g=)
2: mre0Sbb8szBBX4GresgiiwdF634.roa (hash: KGpatw4GtK16xXPbD1RSTnF7RbGtyhCDwaJXsQ0f2K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:f2:ed:05:da:ca:bf:9e:22:74:78:d1:1a:6f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Validity
Not Before: Apr 19 05:01:04 2025 GMT
Not After : Apr 20 05:01:04 2025 GMT
Subject: CN=6495ccfc6de630cc0399159f03cf28f99476270c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:e7:69:22:23:63:63:23:8d:51:46:91:13:
fa:11:76:bd:fb:30:9c:14:3a:9a:03:19:0f:09:8a:
0f:5e:62:f4:04:b2:a0:0b:ee:b8:57:06:28:d9:ab:
e5:6a:9d:fa:c1:94:34:1f:b6:d1:1a:8f:ee:b1:19:
4b:b3:1e:5b:bb:f8:80:86:73:a0:8a:47:6f:41:3a:
4f:18:27:60:c0:57:1d:26:31:f8:a2:86:98:c7:3b:
c2:d1:9c:df:d4:4a:22:ab:0a:0a:4e:69:d8:c2:cc:
33:5c:9d:f1:e4:e4:c4:5b:63:f5:11:8c:0e:8e:cc:
c4:4e:cc:03:bb:35:ec:40:50:87:ca:ec:0f:5e:1f:
be:74:61:0a:bd:c5:3f:e9:19:7b:a0:13:4f:b3:63:
49:01:16:d9:56:73:51:9e:cd:29:12:3b:15:fe:d8:
89:d4:f4:e1:b2:65:ec:c7:ed:8c:10:93:b8:75:de:
ae:11:ea:42:d6:ee:88:33:42:92:ea:de:6f:b4:5c:
ec:8d:ca:57:7d:68:43:9a:53:73:5f:5f:4a:2f:d2:
5c:a1:b9:fd:b8:f6:6f:9a:ca:47:9c:09:b1:b1:36:
e4:b3:8b:11:4c:70:7b:71:05:1c:11:de:53:ca:bc:
ba:35:5e:ae:d5:24:d5:dc:4b:5d:fa:0e:25:5d:04:
20:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:95:CC:FC:6D:E6:30:CC:03:99:15:9F:03:CF:28:F9:94:76:27:0C
X509v3 Authority Key Identifier:
keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:c0:fd:07:2f:c1:8d:b9:12:59:b7:9e:98:34:2d:45:bf:85:
3e:55:7f:71:1c:32:5f:fb:01:9e:91:da:4a:0d:26:1b:ed:32:
5a:ae:38:2f:da:69:2e:2d:60:9a:67:88:c8:8c:c3:4f:b0:89:
42:1d:6c:62:32:09:a8:7e:fb:d4:fd:89:82:16:df:f5:fa:72:
7a:df:69:2e:97:3c:a0:e4:76:c2:71:9a:b2:af:21:7c:9b:48:
8d:3a:85:62:9b:d1:69:91:30:31:7b:52:d0:be:19:9b:db:a6:
bc:fe:94:59:4b:0d:26:ba:56:26:7a:6d:b6:29:5c:fa:89:d6:
f9:bb:4f:d3:3a:b2:18:4c:d4:2c:23:c9:6e:76:8a:d2:e6:d8:
6c:12:be:e1:52:2d:af:3a:ee:86:79:b4:1c:a7:4f:0f:fa:ef:
d1:cd:24:7e:6a:a0:39:57:cb:91:13:09:66:bf:0d:19:6a:1d:
af:f9:cb:a6:e0:06:88:bc:aa:59:ae:52:12:14:58:41:e0:01:
72:07:50:d7:ed:5d:fb:c9:12:c2:61:1e:a8:8f:5d:76:57:f1:
5e:a6:89:8f:78:ff:73:2e:21:ab:7c:bf:57:87:9f:c3:58:f7:
60:d7:65:7a:5c:38:41:7f:29:41:9a:da:33:e9:d5:b8:29:24:
70:59:a8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:08 2025 by rpki-client