Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier: JSl2htIrS3OT0GkpIMHe37ReNHz3Cdumb/ETO5BOPcA=
Subject key identifier: 25:E7:1A:38:8B:C4:5D:5E:0C:7F:E4:C3:7B:CD:E6:3F:90:EF:AD:6C
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 01964C6BEC6BE59C8C7203E20E553C2A7E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number: 0DEA
Signing time: Sat 19 Apr 2025 05:01:03 +0000
Manifest this update: Sat 19 Apr 2025 05:01:03 +0000
Manifest next update: Sun 20 Apr 2025 05:01:03 +0000
Files and hashes: 1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: CdvCVaEDzkXi7bauOK6tyRDgoagm2Q4Ykwxcuy8Lf+M=)
2: hQQYuiHw_ItGv9okdSC3BrwS4FY.roa (hash: S8OKUgEid94ZlJFGvJwDBd4eSV8gnkUcY4GxU2YajOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:ec:6b:e5:9c:8c:72:03:e2:0e:55:3c:2a:7e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Apr 19 05:01:03 2025 GMT
Not After : Apr 20 05:01:03 2025 GMT
Subject: CN=25e71a388bc45d5e0c7fe4c37bcde63f90efad6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:4f:be:b4:2b:a6:75:34:3e:9b:cc:f0:23:
5b:57:95:a3:f6:ed:e0:ac:5f:48:2c:c8:c6:7f:6a:
0a:90:9d:2b:7f:09:2f:a0:68:e2:a3:3f:a5:a0:aa:
4d:80:49:2b:80:02:b0:9b:4f:22:22:bd:a2:98:da:
f0:9d:4e:be:29:8a:33:78:99:8a:ee:d2:57:f1:e9:
8e:00:ce:0c:95:4c:cf:fc:fa:34:51:9b:25:0a:c1:
2e:4e:0a:00:ab:19:ea:ba:51:68:f1:e2:c1:7c:2f:
9a:66:17:97:55:47:d5:52:2f:1b:85:90:f0:33:fa:
bd:98:ed:5f:40:0b:a6:d7:44:8c:6c:69:6e:7f:30:
8e:6e:8a:fe:b5:7f:1d:83:5e:1d:ac:a9:e4:72:dd:
2f:2a:1a:59:3e:b2:c7:e0:83:11:6c:b8:10:19:ea:
08:db:24:b9:35:ad:c7:85:75:26:9d:1e:44:11:b7:
41:d3:78:30:cc:fe:39:43:33:d5:56:68:20:a3:05:
1a:59:1a:da:c7:a9:a3:16:b5:31:45:7e:8b:4e:59:
c6:70:b3:46:46:59:20:50:39:7b:c1:51:5f:88:08:
e4:32:a4:4e:80:03:5a:14:6c:bb:8a:d9:55:49:af:
fa:79:dd:32:f4:8f:ca:16:49:9d:2e:59:cc:d6:0a:
a4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E7:1A:38:8B:C4:5D:5E:0C:7F:E4:C3:7B:CD:E6:3F:90:EF:AD:6C
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d2:6c:82:90:c7:00:51:e0:9c:2b:4b:7e:f3:47:1d:eb:87:
36:62:48:90:22:70:84:6e:f3:a5:86:61:b5:91:c2:92:34:7c:
d8:aa:93:a0:e1:46:3d:8d:cd:2d:8e:63:ed:96:c5:d5:2b:0f:
9e:6e:11:8e:16:ee:f1:b1:26:65:11:55:72:a7:79:ae:32:f2:
5f:ce:7a:60:88:db:c9:0c:b4:27:23:63:ab:83:3a:21:4d:1a:
26:49:16:75:fb:05:20:60:35:02:63:60:17:93:d9:3a:c2:19:
9c:11:17:ab:7e:09:2b:dd:14:20:34:3c:d5:b4:3f:3c:3b:84:
1d:eb:0e:84:0e:c1:96:f8:c0:2a:ba:58:52:78:38:bf:7b:51:
97:ab:11:6e:02:9b:f9:4b:fe:b2:39:0f:1c:bd:18:af:d3:5b:
2d:6a:9d:92:6c:ba:2d:19:aa:ba:c3:18:ce:b9:79:f4:4b:30:
79:ab:56:58:04:e7:26:5e:5a:06:93:35:41:4e:27:37:ca:03:
34:91:67:81:8d:dc:2b:b7:4d:a5:fd:01:e9:3c:96:c5:29:2f:
66:68:21:c7:62:2c:33:70:15:7e:53:1c:21:3f:fa:c2:88:cb:
a5:91:6e:58:ef:36:68:45:c3:22:41:80:93:f2:27:d7:77:46:
52:18:f1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:19:52 2025 by rpki-client