Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
File: c8_hHopwk73JW8AeINtDduIqpRY.mft (raw, json)
Hash identifier: OkbrND5fZpIbey4P2CbWxDOKcfyCVCRbfh5g9UZTrmg=
Subject key identifier: C5:A1:E3:D9:F9:69:E3:F6:8B:73:46:55:C0:A0:27:F2:1E:DD:C9:BF
Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
Certificate issuer: /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Certificate serial: 01964FDAA54FB0804614DD641FD11C8079FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
Manifest number: 020E
Signing time: Sat 19 Apr 2025 21:00:51 +0000
Manifest this update: Sat 19 Apr 2025 21:00:51 +0000
Manifest next update: Sun 20 Apr 2025 21:00:51 +0000
Files and hashes: 1: SVFNCXAgs-J1Ur0M2wuVWaTBzQI.roa (hash: rGZg6LxxY7ku4GUoLGf94rOsH2eH6eg3rUYHF4vWHMk=)
2: c8_hHopwk73JW8AeINtDduIqpRY.crl (hash: 24A6W5DJ8h1D5oZCQpPyRps+mxvpwk+2a12wVOVlu0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:a5:4f:b0:80:46:14:dd:64:1f:d1:1c:80:79:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Validity
Not Before: Apr 19 21:00:51 2025 GMT
Not After : Apr 20 21:00:51 2025 GMT
Subject: CN=c5a1e3d9f969e3f68b734655c0a027f21eddc9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:1f:17:9d:af:f2:a3:77:f5:63:11:d5:e7:
fe:7e:4e:59:cc:01:cd:61:0a:90:c8:fa:1b:4f:96:
14:f4:9d:ae:67:b3:93:28:e0:e8:00:59:6e:87:18:
86:61:1d:30:ac:67:f7:ab:1a:6f:6c:17:4f:07:9c:
44:ed:c2:f7:91:d8:5d:35:64:7b:7d:74:58:d2:4b:
bb:f4:ab:7b:28:34:ad:6a:fc:ff:f1:fa:68:2d:ff:
2f:b2:38:37:e0:c3:47:31:36:9f:8d:91:e6:b5:0e:
8d:23:f8:21:61:46:62:a2:9d:f4:bf:75:99:dd:be:
35:75:85:26:81:9b:cf:1d:fc:fa:f8:05:11:ab:7e:
b5:11:47:83:b0:19:43:b3:83:88:b5:09:4b:e2:36:
64:d0:3a:c4:42:25:90:c4:a9:1c:80:50:c1:af:22:
5c:d9:87:77:cb:a6:22:05:2e:79:06:93:4b:14:9b:
b7:ba:48:3f:8c:00:4d:9a:d2:b4:5c:80:a4:b1:f1:
d8:23:da:fc:38:fc:5d:06:61:98:68:a6:7c:46:75:
b8:fa:5e:c4:e9:f8:3a:2c:0a:fb:72:c6:b7:49:bf:
4f:5d:b2:42:25:9a:bb:07:cc:20:48:75:13:27:7a:
55:96:2d:cb:62:86:c0:d4:31:89:71:81:06:18:e8:
38:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A1:E3:D9:F9:69:E3:F6:8B:73:46:55:C0:A0:27:F2:1E:DD:C9:BF
X509v3 Authority Key Identifier:
keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e4:e2:89:f1:3f:09:eb:57:bd:eb:00:f1:e9:9b:bc:51:41:
2d:89:02:ae:a8:21:7a:ab:b4:22:f6:d6:6a:9b:bb:7b:df:b5:
57:56:b8:6c:f2:5d:6d:cf:b9:bb:c6:f4:3a:df:93:2f:a7:3c:
b0:34:4e:0a:e6:c4:f5:8c:2a:10:c5:d9:6c:a0:48:00:14:5d:
f2:77:b6:7a:50:e9:fe:71:1b:a4:e2:ce:76:b1:53:67:0e:90:
bf:01:77:bc:13:85:d1:d7:4d:e8:af:c8:a6:b9:8f:6e:7f:7b:
29:c3:1f:95:27:a5:ef:96:50:9a:96:de:9c:98:34:58:b7:78:
56:06:c9:d6:d3:74:00:8b:4c:9e:33:36:0d:b9:b1:d1:b7:bd:
d9:e8:2e:07:99:4d:54:69:df:3c:66:61:c5:0d:a5:bd:64:f3:
f7:ef:26:e5:19:7c:68:39:21:88:28:23:a1:a0:10:58:1e:4a:
d1:86:cd:cc:01:20:cb:72:57:19:8a:5a:67:c6:3e:ca:81:11:
60:97:da:7a:d5:0c:47:63:56:1d:a1:6d:e8:97:2b:a8:c8:00:
0a:34:2e:1e:a3:af:b5:89:88:33:f2:af:fe:28:f2:17:2c:94:
68:a0:e1:7f:f9:e6:9a:4d:db:d5:fb:02:a5:f6:bc:d2:b6:21:
be:71:14:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:14 2025 by rpki-client