Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier: XQOf7A46Xqu5T/BMoRQ0qL5xj/vlV51HWH8PtRV7Uz8=
Subject key identifier: 6E:D3:53:19:8A:90:05:D1:D8:8B:CE:AF:01:7F:88:3A:CD:18:13:E6
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial: 0196556E8CC176FE255CB1FA57AC5C640F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number: 047E
Signing time: Sun 20 Apr 2025 23:00:30 +0000
Manifest this update: Sun 20 Apr 2025 23:00:30 +0000
Manifest next update: Mon 21 Apr 2025 23:00:30 +0000
Files and hashes: 1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: A4BCJzntFf08odSLC/fmUc6krqjjVq+ci9zGlBVK/JM=)
2: CGcYt6qx267X0glJTA7aL9VX3lc.roa (hash: C7Akg4uPsnwTrDUVpipPgKYJ70rbAz3rIOj8sk4nXFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:8c:c1:76:fe:25:5c:b1:fa:57:ac:5c:64:0f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
Validity
Not Before: Apr 20 23:00:30 2025 GMT
Not After : Apr 21 23:00:30 2025 GMT
Subject: CN=6ed353198a9005d1d88bceaf017f883acd1813e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:6b:33:21:62:fe:ad:e9:7a:00:e1:48:19:
e5:dc:3a:53:db:ed:08:83:29:10:c0:5a:17:1f:70:
3b:3f:44:ec:6a:5c:cb:3d:9e:99:97:55:40:60:3a:
fe:2f:50:db:dd:48:9c:f7:01:44:cb:60:40:39:13:
22:29:ed:ff:d8:f2:c0:b2:56:48:bc:da:42:54:3c:
52:00:89:22:4c:0d:09:de:fa:ba:39:a7:56:fa:03:
67:b7:51:40:31:43:00:38:7f:72:1f:c3:4e:70:97:
1c:87:d5:ff:82:51:95:03:45:25:46:53:7b:ba:f3:
5e:29:d2:ec:ca:cb:c1:7c:f9:79:47:1b:4e:d3:27:
0f:82:07:7d:69:10:17:e9:8c:28:a7:97:a0:6e:d8:
66:74:b2:b5:72:17:05:8c:2b:6d:8f:50:38:9a:77:
9e:df:e5:65:b8:4f:da:3c:58:26:93:0c:85:61:60:
00:dc:b4:a7:22:4a:58:99:53:2a:4c:44:18:92:a4:
b3:0c:c6:52:4f:4e:77:3d:69:ad:ac:5b:cc:5b:d6:
1d:d2:5e:63:40:ee:26:dd:bc:0f:81:57:d8:bb:d3:
84:03:81:a4:7d:b2:77:24:f3:09:28:b5:39:57:8e:
72:ba:36:3d:28:86:01:ca:62:c0:d7:b3:2c:74:6a:
5a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D3:53:19:8A:90:05:D1:D8:8B:CE:AF:01:7F:88:3A:CD:18:13:E6
X509v3 Authority Key Identifier:
keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:95:be:ea:80:4c:9e:a6:3c:6f:52:ba:a4:36:7b:dc:4a:46:
ff:9d:8a:09:3e:b1:7b:cd:57:6e:fa:8d:37:72:8e:a4:a2:e0:
46:57:ae:d2:f1:a7:6a:43:4f:26:c9:46:4a:ff:14:b9:2f:96:
a5:17:52:dd:93:62:32:66:b3:66:16:69:9d:e8:70:60:02:cc:
e3:52:70:7b:dd:36:a5:f2:da:40:f5:86:58:c5:e5:d3:41:05:
26:f9:2c:c0:5b:fb:3a:32:0e:41:88:3f:3a:b9:e3:a0:28:e3:
0f:99:a4:ba:79:d0:60:e9:e7:04:9b:47:05:66:b3:41:7a:1c:
c6:c6:d5:39:3c:e6:29:a9:a8:09:3f:9b:f4:54:bd:a8:ae:82:
5f:90:71:50:a4:52:5b:c0:6b:f6:a5:0c:31:a9:f4:19:46:fa:
c7:8b:7b:50:19:49:79:94:2f:97:45:ec:a6:95:c8:72:ec:6b:
cb:3d:12:73:c3:cc:84:19:6e:b8:0a:aa:66:7a:86:2b:a3:9c:
f0:95:d0:75:7f:24:44:e0:5c:a7:99:2e:bc:da:58:d0:07:c6:
c8:40:9d:da:15:f0:09:17:70:76:00:bd:2a:a7:0a:b3:6a:d2:
b1:9b:bc:ec:a9:5e:34:b9:2d:b3:3c:95:32:63:f5:59:87:bd:
07:a6:ae:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:04:01 2025 by rpki-client