Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
File: mx8SO1ukvBt3k7np-htD2sSaZgo.mft (raw, json)
Hash identifier: fjic+iYw9EH/MATrkjAdrkTqFbywDCIFgh00vjQfnaU=
Subject key identifier: 3A:88:8C:F8:EE:07:A4:8B:F6:36:34:C4:E6:AC:10:8D:89:36:1E:56
Authority key identifier: 9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
Certificate issuer: /CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Certificate serial: 0196545C755E1996041F5914199DAA1D7086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
Manifest number: 0E27
Signing time: Sun 20 Apr 2025 18:01:07 +0000
Manifest this update: Sun 20 Apr 2025 18:01:07 +0000
Manifest next update: Mon 21 Apr 2025 18:01:07 +0000
Files and hashes: 1: fnSZn4bkLF5kZ3b1OPm6ARvkoQM.roa (hash: N/iSveQaUWb1ReObfQZCITPh3u+LQRq5t3sKbajN6Pg=)
2: mx8SO1ukvBt3k7np-htD2sSaZgo.crl (hash: +CUXq/X6q7guQ6UiKlioMZlqyZSbSKz0bVV9ZHr2jgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:75:5e:19:96:04:1f:59:14:19:9d:aa:1d:70:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Validity
Not Before: Apr 20 18:01:07 2025 GMT
Not After : Apr 21 18:01:07 2025 GMT
Subject: CN=3a888cf8ee07a48bf63634c4e6ac108d89361e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:d5:85:6a:2a:0c:06:aa:84:80:b4:1f:ff:
0c:53:e4:0d:1c:9a:b8:73:2f:fb:d1:e3:e2:fb:2f:
8d:da:18:0b:95:20:56:57:e7:28:8b:66:6a:6b:fb:
86:4d:f2:a9:af:5a:8e:46:37:f1:ec:e1:06:72:b0:
aa:33:e0:ca:38:62:bc:d9:8a:d8:29:b3:99:40:1d:
15:ce:c5:28:e3:8c:0c:27:b8:71:70:bc:1c:11:ba:
bc:b1:ea:4d:f9:51:6a:9d:08:47:aa:0e:18:fc:1d:
f6:31:5e:06:b8:f5:f9:59:26:de:af:1a:f3:95:22:
bf:92:2f:1d:50:de:0d:1d:05:b4:b2:2a:99:eb:c2:
00:a1:e5:d7:0d:75:5e:3c:b1:40:1f:fe:bd:42:15:
2d:64:ee:d3:1f:53:d3:53:3a:20:4b:e2:05:2a:3b:
ed:bd:b1:1a:8a:5f:3e:f1:60:9c:cc:aa:d9:00:c5:
97:38:93:99:d9:b1:c1:8c:02:c2:d7:7c:57:17:52:
ce:53:f2:81:d6:89:71:28:99:2f:63:e7:e5:b5:a5:
c6:8b:c2:65:ca:e4:87:49:c8:77:22:1b:7f:81:16:
c5:ba:2f:e3:9b:34:1d:77:a0:85:1e:fc:66:ab:11:
59:66:06:0a:33:2c:17:fc:f5:78:ce:56:69:47:d7:
8b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:88:8C:F8:EE:07:A4:8B:F6:36:34:C4:E6:AC:10:8D:89:36:1E:56
X509v3 Authority Key Identifier:
keyid:9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:82:c5:c0:75:5e:9b:98:fc:aa:77:c9:e0:23:99:a6:c3:55:
65:19:33:ac:8a:1f:84:df:24:a1:0f:4a:53:84:ae:15:27:41:
cb:ec:90:7c:c7:af:16:04:1d:6d:e4:58:29:42:ad:de:75:3a:
66:40:10:e6:be:9b:44:0d:37:9d:73:7e:8a:e9:df:54:3a:fe:
9a:9a:2c:a5:d1:88:fe:47:90:62:f5:d0:eb:be:8d:b1:d6:32:
b7:5b:d6:e3:71:02:03:7c:3b:53:66:60:df:4e:72:55:f2:6e:
c0:09:c5:8f:02:f7:93:e4:16:f9:7f:d8:46:f4:88:0d:58:45:
60:96:4b:c9:c8:d0:b5:df:80:9f:f8:37:35:81:16:eb:51:64:
c6:f0:87:a0:76:21:b7:bf:25:d6:f7:6b:04:93:78:25:a7:05:
a5:fa:a2:5b:fa:e8:06:5c:14:0a:5c:d2:4b:09:1a:6e:cb:d2:
6d:f0:17:1a:69:ee:e5:da:c1:1a:04:44:6b:e6:bc:b9:2a:55:
57:8c:83:f5:7f:e9:78:1a:41:a5:79:1d:df:2e:ac:7c:fd:04:
7a:a2:01:2a:27:06:7f:ed:8b:48:46:d8:a9:2b:29:94:4e:46:
80:9e:f3:d1:da:9f:40:10:5a:1f:2d:2e:bf:6a:d9:c0:6c:32:
2e:9c:3e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:07 2025 by rpki-client