Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
File: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft (raw, json)
Hash identifier: qkHcFEZGcmnU2UZZzM24z2f+fvXwlrS2B+xyBulC7Cg=
Subject key identifier: 92:93:CE:8B:73:CF:E1:08:80:34:CA:0B:09:90:74:0E:31:7C:4F:1C
Authority key identifier: AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
Certificate issuer: /CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Certificate serial: 019652A4C0D48A78CB304965809CF6D8A825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
Manifest number: 095B
Signing time: Sun 20 Apr 2025 10:00:51 +0000
Manifest this update: Sun 20 Apr 2025 10:00:51 +0000
Manifest next update: Mon 21 Apr 2025 10:00:51 +0000
Files and hashes: 1: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl (hash: N2RP3whcBOmHjMmLJ1xwRWWBMKTSpFBmm5TbQ8X7S9I=)
2: y434m32YaOSFWfdjMrvD69-28ws.roa (hash: 2wH2CADXRiwQAKzkBQR9rJEZcF/YGQDp6VtufnWzYz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:c0:d4:8a:78:cb:30:49:65:80:9c:f6:d8:a8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Validity
Not Before: Apr 20 10:00:51 2025 GMT
Not After : Apr 21 10:00:51 2025 GMT
Subject: CN=9293ce8b73cfe1088034ca0b0990740e317c4f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9c:33:f2:3c:f1:b5:a2:86:27:f6:f4:fe:61:
af:50:ef:a5:82:97:1d:3e:7b:92:6a:37:e8:1e:23:
73:9a:87:31:6b:4b:ac:1f:00:a8:9a:12:14:ac:92:
0b:bd:e7:86:1f:07:33:2f:3e:e4:2f:7a:9e:c0:18:
ba:8d:11:99:24:6b:c5:1d:b1:c8:8e:55:28:4f:08:
9b:84:45:1f:b6:60:93:82:6b:16:71:12:db:d9:c3:
6f:f9:60:53:97:7d:0d:d6:e9:98:ef:38:ed:4d:56:
5a:b0:05:36:c5:66:2c:0a:8f:7f:5a:13:9a:6d:a8:
4d:4f:b0:8b:12:86:ad:11:d8:3f:ef:69:37:ac:bc:
9b:79:bf:ec:52:23:9e:48:90:59:32:59:0c:25:ca:
a8:aa:93:0a:07:de:48:d4:32:57:61:bc:4f:57:18:
2d:be:0b:71:16:23:a6:66:6b:05:15:48:a7:09:49:
a2:e9:c6:fa:6f:ef:dd:69:82:e3:35:14:11:a7:95:
91:15:60:67:3f:d4:4d:5a:7e:99:de:74:8f:88:27:
12:fe:b4:0d:59:3e:31:b0:d3:42:78:15:56:fa:83:
d7:0c:7d:39:31:3a:6f:7a:26:fb:fc:8d:8c:a9:2c:
55:06:24:52:ca:be:d4:33:b6:e6:f8:fd:7f:d0:0f:
f4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:93:CE:8B:73:CF:E1:08:80:34:CA:0B:09:90:74:0E:31:7C:4F:1C
X509v3 Authority Key Identifier:
keyid:AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4c:b9:ec:5f:d5:19:99:9b:b8:9c:d6:96:d3:62:ee:56:fe:
88:8a:a5:e7:e5:c4:bb:fb:ae:cd:11:de:bd:ed:61:95:74:7f:
72:e0:30:65:b2:c3:c1:6a:ec:b2:cf:7c:01:f1:7d:b7:01:fa:
38:2a:a8:a0:94:bd:42:96:38:b4:79:ce:09:35:d3:33:4c:76:
a5:c3:24:e7:fe:ea:8f:f3:f3:e9:9c:3b:1d:1c:f6:76:7b:ac:
31:24:05:7e:47:9f:53:f1:e1:a8:cd:88:2d:1e:4f:c9:9b:6c:
80:05:b8:b4:52:ff:68:97:b0:8f:c9:63:33:79:2a:b6:1b:f5:
9a:e0:28:d2:e0:73:4b:dd:a7:bb:53:ad:a8:f0:ba:58:77:3b:
72:0d:14:04:0a:6b:9c:5c:24:34:40:e1:e7:c8:79:d4:27:a9:
bd:07:bd:11:59:1f:24:f4:4d:3a:b2:93:db:ca:44:cc:8f:bf:
ec:1d:a7:bf:7a:da:cd:33:bc:23:1b:21:67:9c:e9:bc:7e:b1:
07:91:b2:11:21:65:6f:20:d8:c8:81:ca:8b:2b:ea:1e:09:93:
92:1a:d1:cd:53:43:cb:0b:29:a6:69:e9:2b:30:8c:e3:5e:c2:
aa:be:1b:58:9f:f7:c5:71:f8:7d:a0:04:74:2f:99:53:5d:77:
c6:1f:ef:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:17:41 2025 by rpki-client