Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
File: fI5wl5kOWmcXjil4daDZ9GBYkqY.mft (raw, json)
Hash identifier: aQI5z3Y3j3SWZ17nwknsMiNikfkZP8vS4CsMfE/MlJA=
Subject key identifier: 62:31:F2:8D:D6:F5:6D:B8:ED:D9:93:08:42:3D:D9:E4:4F:BD:BB:B9
Authority key identifier: 7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
Certificate issuer: /CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Certificate serial: 01965A5E4C89E566F68A709AD0F99738C75E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
Manifest number: 0BBC
Signing time: Mon 21 Apr 2025 22:00:51 +0000
Manifest this update: Mon 21 Apr 2025 22:00:51 +0000
Manifest next update: Tue 22 Apr 2025 22:00:51 +0000
Files and hashes: 1: fI5wl5kOWmcXjil4daDZ9GBYkqY.crl (hash: 5y6IL0+mwhaEhU0da0LbBUQ+WH8HD8vudCCB0UT1i4k=)
2: x5BCA2nXSzjfqsyhw28GUZqlIA0.roa (hash: XYC94H5SlTsc3HXQBpsVEd85N9+lJ9Ig2x3jNjrZbWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5e:4c:89:e5:66:f6:8a:70:9a:d0:f9:97:38:c7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Validity
Not Before: Apr 21 22:00:51 2025 GMT
Not After : Apr 22 22:00:51 2025 GMT
Subject: CN=6231f28dd6f56db8edd99308423dd9e44fbdbbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:85:9a:ea:7a:a5:e4:f0:f2:0a:95:cf:e5:
ef:a5:f0:3f:73:78:95:b7:ef:be:79:08:9d:8b:7b:
3d:1e:20:3f:1a:92:6a:c3:43:f0:ac:cb:b2:93:d5:
0e:97:6f:30:7f:6c:48:3d:b5:3c:16:61:15:0b:42:
70:c9:b5:26:5d:34:25:6c:4e:d7:6a:e4:5c:06:a8:
f3:10:4a:38:2f:6a:43:42:49:c9:48:f0:e0:fa:b0:
34:41:76:b3:7e:74:fc:43:cd:97:1a:0f:ba:ef:36:
4c:b6:fc:94:3c:ac:59:d0:17:af:8d:cb:3b:93:e9:
9f:87:d2:8c:5e:96:6d:01:bc:a0:87:a8:27:ef:ff:
a0:a9:11:3b:4f:38:89:e1:93:a5:b9:e7:08:20:99:
c3:10:3a:33:bc:eb:49:3c:be:6d:4b:cf:b5:f2:7c:
d1:ec:c7:6e:cc:df:f7:c2:8e:5b:59:c2:bd:5d:05:
58:24:21:96:50:62:ba:f1:ee:69:ef:dd:4a:4f:cd:
e3:30:48:28:97:18:6e:c1:b9:ce:cb:2f:f6:5f:ba:
80:f7:2f:5d:70:ef:af:33:95:fd:e7:07:1e:4c:45:
31:cc:dd:fd:ad:e4:19:1e:1c:78:80:12:b4:26:fe:
d9:fd:7a:66:4b:fd:90:00:bd:d6:8d:cf:ea:44:2f:
7d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:31:F2:8D:D6:F5:6D:B8:ED:D9:93:08:42:3D:D9:E4:4F:BD:BB:B9
X509v3 Authority Key Identifier:
keyid:7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6b:41:e0:3b:80:57:73:aa:43:d3:8e:83:61:0b:32:17:15:
03:ad:85:ca:3b:6c:11:e5:89:b6:a4:b9:b2:7b:08:fc:f5:a3:
b6:31:52:85:b9:7c:4f:ab:e9:75:0d:ef:1e:6e:d5:22:1a:c5:
4e:a2:17:67:ac:be:90:39:1d:1a:8d:2b:8d:d7:8c:1c:e5:c4:
1a:57:08:8e:ff:da:92:f3:47:2b:81:be:47:06:8a:fa:0f:28:
c7:73:c5:81:ab:b4:ca:12:23:e5:aa:7c:9d:e5:41:54:a0:5e:
20:d5:f2:de:c5:82:0f:0b:43:86:d4:b4:9a:fc:94:6d:20:a9:
c8:0b:96:55:e1:c6:2e:e8:54:0f:92:5d:b9:ff:2a:89:50:70:
3a:c3:2f:a9:ed:5f:4d:92:2f:85:81:5e:15:59:e3:02:fa:c1:
f1:d7:5e:b0:04:69:fe:6a:52:2c:5f:6e:46:9b:5c:3a:f3:7c:
2f:94:36:88:42:09:73:b5:e9:6d:db:b0:c1:9f:28:a8:5d:03:
72:5c:81:7a:92:3a:62:9d:b5:06:cc:18:3a:56:4a:f1:1a:17:
5f:ea:14:6b:98:44:4a:f7:0e:7e:03:c1:ec:9e:bd:c3:8c:0d:
83:1c:ae:92:40:75:3b:b4:aa:78:cc:e6:9c:1e:2c:58:ff:38:
4c:6b:62:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:01:15 2025 by rpki-client