Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
File: 8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json)
Hash identifier: s7M/K+6QOWkdtJAJybYB9SnbNChbMvXIP/WYFHwcDJA=
Subject key identifier: 8D:BD:69:D7:AC:53:7C:5C:2B:81:65:A4:E9:F9:08:B5:B8:91:83:C7
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 01964CD90ABD6CC7B7BF91FF7AA761A28BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
Manifest number: 0934
Signing time: Sat 19 Apr 2025 07:00:14 +0000
Manifest this update: Sat 19 Apr 2025 07:00:14 +0000
Manifest next update: Sun 20 Apr 2025 07:00:14 +0000
Files and hashes: 1: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: trez3muFGtAA9nUldyKdeZai8w/2Lc69sH79zBhG9wE=)
2: fN8SYZ83oc_gHjiIm2H8fBBsylM.roa (hash: ITxtpDSVYxcGXneNxnFdZuRlc/rmrmnyY6/WYXyAU60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:0a:bd:6c:c7:b7:bf:91:ff:7a:a7:61:a2:8b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: Apr 19 07:00:14 2025 GMT
Not After : Apr 20 07:00:14 2025 GMT
Subject: CN=8dbd69d7ac537c5c2b8165a4e9f908b5b89183c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:d1:69:a6:cc:49:17:5f:d5:d7:62:bc:34:
5c:bd:a9:51:c8:e5:47:db:23:7a:1f:3a:bd:0d:1d:
52:63:c4:6c:67:7f:2d:0f:a6:ca:0f:81:92:6c:41:
1d:e0:9b:42:c0:8d:15:40:56:06:57:26:da:44:f5:
85:d5:12:f3:5a:f0:a5:b6:2e:e3:4e:a8:17:6d:03:
71:5d:e1:a6:d3:40:62:91:73:c4:ea:29:f5:da:3e:
8e:eb:51:6f:be:d6:a5:db:78:d8:19:8c:b9:65:09:
e1:0b:b8:9f:48:d3:c7:d7:03:df:99:95:50:3a:e0:
f2:c3:65:fb:b8:08:13:d4:a0:51:ca:f8:e0:2c:0e:
fb:c8:eb:f3:95:e7:51:fb:dc:80:fb:be:ae:7f:9f:
b8:0f:7b:83:bc:3d:42:eb:b2:bc:96:6a:5d:04:4c:
5c:7b:59:41:5e:ca:58:af:e0:20:5a:6a:2d:19:ae:
63:af:f3:67:cb:47:18:c1:b2:0f:24:e5:7a:43:46:
a7:ad:ff:e7:6a:3d:24:57:aa:f2:8e:dc:73:e5:21:
87:c7:92:94:e7:49:aa:c2:a4:c9:b9:b3:b9:d8:68:
ba:63:58:a3:2f:30:b2:11:0e:bd:8a:70:e0:b9:7d:
01:64:da:fe:96:63:5e:7c:7b:00:20:a0:f5:79:07:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BD:69:D7:AC:53:7C:5C:2B:81:65:A4:E9:F9:08:B5:B8:91:83:C7
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:74:28:d2:18:34:bd:5f:5c:3e:ae:89:c4:c9:a8:05:a3:08:
0a:cb:1a:3a:2c:89:61:e4:e3:2a:e5:e1:9e:04:83:a4:17:c0:
ec:6a:54:e7:66:2b:31:a1:fb:57:a5:86:96:14:f7:5c:4d:2d:
6a:d1:17:23:25:c7:d3:9f:ee:17:c8:4d:51:08:4b:98:56:d3:
84:78:02:85:99:90:6c:09:ef:95:2b:2a:82:8f:15:7d:59:1a:
f9:44:1c:2a:7a:23:74:be:37:21:1d:4f:f6:26:48:0f:e8:30:
16:e1:c7:83:dd:c9:71:9f:30:15:23:cb:c1:72:fb:e9:31:8b:
4d:54:ff:a2:a3:55:37:01:83:c9:de:58:a1:fe:55:9d:b9:47:
ae:f2:fd:5f:0d:6d:17:85:4b:87:0c:df:c1:7f:5c:55:a0:2c:
94:ba:7f:39:db:09:4a:72:48:ad:3e:9e:07:32:66:2a:80:a2:
00:99:65:67:2a:cb:03:8c:e2:82:9f:f6:20:53:15:81:d4:85:
aa:9c:41:f8:3a:29:31:eb:e1:19:e8:4c:32:e3:05:ac:27:fe:
04:b4:d9:f2:79:a5:64:15:8c:d3:16:eb:ee:e7:4d:a5:32:d9:
17:99:53:19:a9:02:0b:e4:e7:ee:4f:2d:5d:d3:9d:1b:c7:e6:
63:d9:89:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:21:29 2025 by rpki-client