Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: IYRziP7SBJuL090tEJS3aMDVcEtdGqsdI3GlTCOz5h0=
Subject key identifier: 8E:56:74:21:CA:BB:D7:60:62:45:19:3D:39:35:89:B7:C4:1D:BE:B4
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 019645FB5B2EEE80F266D7A1409F6F99432F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 1488
Signing time: Thu 17 Apr 2025 23:00:22 +0000
Manifest this update: Thu 17 Apr 2025 23:00:22 +0000
Manifest next update: Fri 18 Apr 2025 23:00:22 +0000
Files and hashes: 1: 92LlPsnUIAq2_qCu90vUr2n0raU.roa (hash: foBfA1Aqx+KxyLS/ipFmoqJrrHi0Kf81SvkfmiaHeCY=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: 1z95yZrMhNf2myB/SQi9dPebDfAJytgC50G4UvY8HS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:fb:5b:2e:ee:80:f2:66:d7:a1:40:9f:6f:99:43:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Apr 17 23:00:22 2025 GMT
Not After : Apr 18 23:00:22 2025 GMT
Subject: CN=8e567421cabbd7606245193d393589b7c41dbeb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:bf:98:78:4d:32:c6:c8:58:e8:a4:2d:ce:
c5:93:ab:08:8a:7d:12:13:d2:8f:a2:fa:30:5e:a4:
33:7e:92:c4:20:b4:e7:6b:29:d3:3c:80:fa:c4:57:
d8:eb:d6:0b:b7:a3:ad:7e:b9:f1:73:01:e4:fb:23:
70:cc:18:86:6a:da:c9:3f:c5:dd:72:8c:f2:65:e5:
72:a8:f3:b7:1a:22:b2:24:4c:c7:7b:0b:e4:f2:1f:
1a:2a:41:44:29:88:15:d4:cc:5c:29:2b:aa:99:2c:
6d:a7:e6:28:b7:0c:92:81:75:03:57:df:bf:d8:0b:
dc:69:88:3c:cb:9e:47:f9:1d:de:75:ba:aa:9a:54:
77:0c:3c:83:e1:76:05:f1:5a:24:55:b6:53:80:29:
78:c4:31:07:66:e5:21:23:0d:b6:83:79:4a:87:41:
2e:d3:19:19:0b:1e:ec:d3:7f:b8:08:22:8f:e7:6f:
79:1c:8a:b9:68:eb:3c:1e:d2:4d:4a:80:7c:38:80:
b6:13:88:45:84:b8:b4:a8:ac:f3:b4:20:74:c0:da:
71:e3:1d:d8:c2:a8:ad:1f:42:66:31:a5:ff:32:0a:
45:a7:be:dc:2b:fc:d9:a3:03:4b:7d:e9:fe:64:39:
e7:65:d2:44:54:75:80:64:ac:6d:fa:c6:fc:2e:bc:
60:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:56:74:21:CA:BB:D7:60:62:45:19:3D:39:35:89:B7:C4:1D:BE:B4
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3f:ee:a8:26:2c:01:42:3c:52:74:c5:b2:bc:50:0e:7d:f9:
5b:ad:5c:a2:3f:e3:09:08:a3:be:75:ae:bf:fd:0c:5a:a4:d5:
01:7d:9a:4b:b4:97:7c:bd:ea:49:c6:d6:ac:f2:50:2c:a2:c6:
6b:4b:db:22:f0:a3:d8:01:73:ea:fd:e3:7b:6d:64:45:f1:bd:
34:9c:98:ea:fe:a2:e7:17:99:1b:7f:c8:54:1d:de:f9:a5:90:
64:bd:9c:79:aa:d7:7c:14:53:2c:4b:e0:56:1d:e3:3c:aa:17:
56:77:3d:47:ab:62:28:4a:cb:47:dc:d6:90:0f:aa:d7:bf:c9:
92:17:9a:6d:c3:96:5e:77:e3:8e:ec:6f:f4:8d:b6:d0:08:5d:
3d:81:db:c9:44:47:7e:b6:a0:0c:d0:f6:80:bd:7b:81:e0:31:
aa:38:23:ef:12:af:6c:3f:f8:c1:e4:05:da:2d:46:1e:e7:a0:
f1:f1:76:93:03:62:89:5b:9a:4a:87:17:e0:01:8e:35:96:8b:
a7:03:64:f5:f9:22:c3:8e:fe:a4:33:7f:b9:a9:5c:bc:17:90:
4e:20:23:9f:c8:31:e2:c6:2b:9c:1c:e5:89:e6:b1:fb:52:1c:
0e:25:40:36:2e:2b:a7:8e:fc:08:bc:a6:39:03:2b:7c:f3:22:
ee:f6:5e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:17:54 2025 by rpki-client