Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
File: v8pT8KWH822Jqcq4K_WlA2xhQKI.mft (raw, json)
Hash identifier: heQqoI+QJqzy4CMWttKPzzjNwWd57xzB0ZI/HihAJrM=
Subject key identifier: A9:14:7B:85:AD:BB:8F:5D:77:E4:8E:E1:A9:8B:F4:FC:0C:47:69:46
Authority key identifier: BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
Certificate issuer: /CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
Certificate serial: 01964556A5B699B57E654517C1B6283B8BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
Manifest number: 14F7
Signing time: Thu 17 Apr 2025 20:00:28 +0000
Manifest this update: Thu 17 Apr 2025 20:00:28 +0000
Manifest next update: Fri 18 Apr 2025 20:00:28 +0000
Files and hashes: 1: QDWmx_ik_mzSmaKaFjMrEYPMK6E.roa (hash: JZeZqTP/kJM8f2vw7vOLQj4DQbxRzuI8jkZc142sebw=)
2: v8pT8KWH822Jqcq4K_WlA2xhQKI.crl (hash: tJGmIgwKxwboCCuIAup2AuP+fWSDoUXpt8ZWMbSbVbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:a5:b6:99:b5:7e:65:45:17:c1:b6:28:3b:8b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
Validity
Not Before: Apr 17 20:00:28 2025 GMT
Not After : Apr 18 20:00:28 2025 GMT
Subject: CN=a9147b85adbb8f5d77e48ee1a98bf4fc0c476946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:c3:5e:39:fa:03:54:bf:15:15:e3:0a:90:
d0:51:fb:49:7d:7b:3d:f2:47:fc:99:f6:b1:bc:1e:
f9:a6:c4:f4:3b:a3:ae:41:ab:7f:04:6a:e4:f8:82:
a3:aa:0f:9a:94:86:fe:46:13:7d:d8:9e:d2:50:12:
2d:46:e4:8f:78:2f:ae:b7:9c:bd:98:a5:a6:16:72:
37:b7:ac:de:9c:0e:25:fc:67:79:7c:bd:87:6b:6c:
f3:c7:02:5e:62:81:e4:85:7b:0a:cb:2b:cc:79:55:
22:5c:c2:82:06:ad:e3:1e:be:ca:dd:77:ed:39:ed:
45:7f:dd:5a:d3:c4:2e:ce:23:12:25:17:f3:b3:63:
5a:b6:e6:c3:a7:12:c0:3a:fd:7c:4d:64:6a:5a:3f:
1b:fc:ef:2e:d2:e1:4e:93:03:b2:43:2e:b0:ca:6c:
e0:6c:66:79:12:04:e2:a4:d8:b5:83:ad:55:4f:22:
c3:9f:2b:f0:d7:97:64:61:3d:6e:30:49:85:80:54:
2d:f2:14:a5:8e:2f:88:ab:0d:e0:63:b7:78:54:5e:
7e:af:fb:86:eb:ac:55:a3:53:17:7e:86:9a:3b:d2:
46:9b:e6:59:20:c2:48:71:3b:7e:1f:36:cd:f0:79:
75:0e:05:fb:93:42:0f:d6:f7:0e:73:9e:45:6d:95:
83:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:14:7B:85:AD:BB:8F:5D:77:E4:8E:E1:A9:8B:F4:FC:0C:47:69:46
X509v3 Authority Key Identifier:
keyid:BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:79:a7:b5:ec:8b:90:5f:35:66:0b:e4:14:c0:18:ed:ef:ef:
28:ce:3e:cc:57:a9:f6:2c:9d:53:01:74:e8:43:7c:ec:fe:76:
31:98:36:43:aa:d5:ec:8e:b9:70:ff:78:a2:ea:ff:94:31:ef:
ed:56:53:39:f1:60:88:28:67:02:0d:42:32:96:14:8e:1f:2e:
20:ca:51:72:44:18:11:73:82:07:25:42:98:62:68:fa:12:0f:
2c:04:ff:a6:68:74:8a:04:0f:a6:dc:62:46:88:9f:88:a1:1b:
d7:d2:eb:28:40:a1:f4:cf:5e:4c:1a:3e:9a:b5:44:4e:dc:20:
e0:42:f1:5d:65:51:8f:54:f6:5a:39:c2:99:84:0b:3a:3a:56:
20:75:13:ee:70:fc:0d:2b:f0:cb:4e:55:85:ef:6f:15:51:9c:
47:71:69:28:b2:fd:49:23:ad:dc:0b:38:5e:87:85:2f:92:b5:
2a:dc:90:97:b1:3e:49:fe:c9:11:49:93:de:00:b1:08:96:4a:
00:88:50:b7:36:00:fb:45:77:ae:6f:5e:b2:86:ca:69:b9:86:
2a:7c:c6:5b:f0:70:82:9f:99:24:d6:95:1e:e7:75:e4:54:8c:
63:d2:7d:00:84:97:d5:53:dd:6e:22:66:cd:2e:3b:67:5d:0a:
77:ea:3e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:03:20 2025 by rpki-client