Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft
File: i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft (raw, json)
Hash identifier: 2G8PxYIkrpTIil9BO87yzO5CSRucZIwQehgcyQoBHKg=
Subject key identifier: 21:0B:E2:7B:6C:04:2D:DC:A7:17:08:36:C6:C5:3F:ED:20:7C:39:63
Authority key identifier: 8B:C3:94:8D:8B:93:A2:1E:6D:57:D9:C6:55:4D:5E:DD:10:7D:09:AF
Certificate issuer: /CN=8bc3948d8b93a21e6d57d9c6554d5edd107d09af
Certificate serial: 0194C4D16F5F40F9E08695F2C668A6C0AA90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8OUjYuToh5tV9nGVU1e3RB9Ca8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft
Manifest number: 30
Signing time: Sun 02 Feb 2025 04:00:47 +0000
Manifest this update: Sun 02 Feb 2025 04:00:47 +0000
Manifest next update: Mon 03 Feb 2025 04:00:47 +0000
Files and hashes: 1: fvjwad8hv5M8RT1bW6F3smOFB2Y.roa (hash: at0gl2Sa+um/oWDDDgR4biQkEbCFJi5QlnnXaGwjc0g=)
2: i8OUjYuToh5tV9nGVU1e3RB9Ca8.crl (hash: m/Cyc42yXcF345i3t15e1zyuI9GzRWey2e3IUMV2kHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8OUjYuToh5tV9nGVU1e3RB9Ca8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:6f:5f:40:f9:e0:86:95:f2:c6:68:a6:c0:aa:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bc3948d8b93a21e6d57d9c6554d5edd107d09af
Validity
Not Before: Feb 2 04:00:47 2025 GMT
Not After : Feb 3 04:00:47 2025 GMT
Subject: CN=210be27b6c042ddca7170836c6c53fed207c3963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:e4:44:7a:17:5b:5a:b8:46:74:7b:7e:9d:
64:dd:cb:19:d3:5e:03:8b:66:b5:7c:31:d3:5b:93:
95:10:36:a3:59:47:a9:24:44:27:93:9e:39:7a:06:
36:22:ff:0c:43:98:3f:1b:7c:db:28:16:24:37:cf:
7f:63:7b:c9:32:35:71:19:10:cd:72:64:4c:c5:c0:
fa:75:b9:19:72:08:6a:c2:d1:70:44:b6:7f:0b:b7:
da:d5:58:0e:81:45:98:0d:51:44:c4:f6:5a:23:dc:
ca:7e:8a:47:1c:cd:2d:3d:b5:eb:1e:cc:c8:cb:3d:
49:38:c6:e8:36:08:0f:10:6f:a3:1c:1b:e4:5e:76:
e4:6c:65:1d:18:9a:7e:4c:3d:b5:cf:b1:72:6f:c6:
9e:db:e8:f8:da:06:fa:8a:a6:39:fd:c7:09:3f:d5:
d5:d5:a2:3a:ff:20:ce:88:1d:24:a0:34:82:b9:6f:
26:da:81:29:fe:dc:fb:1b:3c:69:21:ed:ed:64:f9:
2e:db:04:88:bb:d9:1c:4e:3a:d1:93:e3:1e:ae:aa:
f5:6c:0e:cc:da:50:84:70:95:7f:b5:1d:2f:2c:60:
d0:ff:e4:e7:e8:c2:4d:1b:bd:81:f1:e6:4e:ce:f9:
65:f4:e9:94:ce:b3:8c:48:ed:fc:9e:41:93:46:f0:
45:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0B:E2:7B:6C:04:2D:DC:A7:17:08:36:C6:C5:3F:ED:20:7C:39:63
X509v3 Authority Key Identifier:
keyid:8B:C3:94:8D:8B:93:A2:1E:6D:57:D9:C6:55:4D:5E:DD:10:7D:09:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8OUjYuToh5tV9nGVU1e3RB9Ca8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:91:9c:e8:4f:9b:14:ee:87:f9:9b:46:1d:14:4b:0c:8c:8b:
b1:fc:93:c3:70:a1:27:fb:98:6d:55:6b:7a:8e:95:95:f9:9b:
1a:80:aa:64:a1:22:28:e0:74:cb:22:92:88:20:fa:a8:cf:63:
7b:7d:29:d4:3f:ab:84:08:8c:f7:66:18:ae:83:c3:fc:01:48:
fa:99:71:68:ac:d6:f4:8f:fb:50:cb:7c:00:a3:d5:a6:ce:10:
01:d8:f2:d7:b9:ad:43:76:a8:a3:17:54:09:ca:c3:07:70:2f:
e5:20:43:f6:51:94:05:5e:e0:69:ae:11:af:08:38:b8:00:18:
b1:df:e8:5d:c4:57:9a:ac:20:a0:c7:36:e3:17:90:8c:2d:38:
52:16:d6:e3:60:df:7b:47:68:63:f3:67:8b:8b:1d:1a:81:b2:
3f:05:7b:ad:59:06:63:de:1e:38:7a:a6:d2:cd:dd:e5:d1:5b:
49:77:ea:b9:be:81:f8:0d:0d:38:3f:cd:2c:0d:dc:76:e8:2a:
4f:12:e3:46:d8:44:51:95:5c:84:d9:56:2c:57:06:e3:1c:83:
9d:aa:42:ee:25:80:15:f8:c5:05:57:b9:8d:70:5c:e4:d9:89:
26:6b:8d:93:09:20:28:8a:f7:58:85:95:4b:84:e1:c8:22:67:
18:1b:71:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:13 2025 by rpki-client