Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
File: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft (raw, json)
Hash identifier: 9hwZxf3BwZkCl2glBGaueGCX3sXf1UOOtrvPyIuHgdk=
Subject key identifier: 63:5B:B5:17:A3:78:02:59:DE:81:E8:15:23:B3:B6:8D:14:9A:C0:3C
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial: 01964255F28B1DB30D9C6897574AAD9D5890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
Manifest number: 149B
Signing time: Thu 17 Apr 2025 06:00:50 +0000
Manifest this update: Thu 17 Apr 2025 06:00:50 +0000
Manifest next update: Fri 18 Apr 2025 06:00:50 +0000
Files and hashes: 1: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl (hash: PtlZjz1zFu8De5l/amFb64M+8uOEmAQFKHb31k3SdV0=)
2: f4A325yGj48RuMfkjcKdx35IWgg.roa (hash: j8y8oC78Ayis+Zl1DL+FUWPv5N+us3D0FIOg/cZJpDI=)
3: g4Nm3zw7BZCf660L7J2wB5s2-SA.roa (hash: +YfoAh+I7x70vYXeLBN3w6ZRtj/Ii78yrIjM344/IWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:55:f2:8b:1d:b3:0d:9c:68:97:57:4a:ad:9d:58:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Validity
Not Before: Apr 17 06:00:50 2025 GMT
Not After : Apr 18 06:00:50 2025 GMT
Subject: CN=635bb517a3780259de81e81523b3b68d149ac03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:63:b2:b8:9f:c8:ac:94:a0:2f:ad:8b:22:
fa:4d:36:f2:15:28:e4:0e:40:ac:70:24:e5:5c:ce:
49:ef:92:aa:ae:09:98:70:4c:67:b4:41:86:c4:4d:
82:2e:a2:fd:7a:e9:9f:a8:ae:d4:00:9a:37:27:1a:
bb:b6:23:4b:48:6e:ff:bb:32:c9:bb:81:53:e5:3f:
48:80:11:ad:cd:4f:df:5b:6e:0a:f3:04:8d:d2:05:
14:a4:d7:3f:b6:a9:ae:ae:4e:31:62:11:08:b3:7c:
f7:a6:f9:62:d0:31:3c:6d:8f:f0:db:51:3c:cd:d4:
19:5c:21:68:70:59:41:99:b9:db:07:b2:c1:a2:f9:
d2:26:04:1a:d7:9e:e8:0d:d2:a9:15:5c:d0:d4:3d:
1d:1f:ab:1e:4b:8a:39:42:aa:32:02:b8:34:8c:24:
10:59:9a:da:5b:60:08:38:b3:72:b0:7c:39:a1:bb:
30:46:03:ca:a1:e2:29:d9:2e:fa:5b:74:41:1f:4c:
5b:b5:56:d8:8c:f6:77:e8:e9:b9:e4:54:3f:ab:28:
be:8e:e1:ab:4f:f4:e4:5a:dd:74:d6:d9:7e:88:64:
7c:fd:76:6f:9a:88:db:57:4e:ed:1c:79:10:f3:d2:
93:f1:79:7f:cb:79:c3:a2:ea:37:d6:ef:e8:b7:fe:
ee:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5B:B5:17:A3:78:02:59:DE:81:E8:15:23:B3:B6:8D:14:9A:C0:3C
X509v3 Authority Key Identifier:
keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d4:e1:e0:00:7f:3a:6e:ed:9c:c2:eb:c3:e9:c7:75:95:44:
0b:ac:fe:49:92:ba:b5:3d:16:8e:97:13:90:86:f7:78:3a:8e:
c9:c2:b9:dd:02:46:78:1d:93:c9:3b:1d:5b:8c:57:28:4e:f8:
dd:95:f5:26:a1:7d:5d:17:d3:86:fd:71:f2:f3:c8:74:a6:f8:
7f:8b:59:24:71:95:83:a5:c8:db:65:a5:17:e2:94:5d:10:da:
a6:02:e9:2d:c5:df:d0:3b:87:50:36:df:f1:37:19:ca:94:a4:
b0:bb:c7:24:94:a3:25:7b:0e:35:2a:9f:12:9f:bb:48:ef:99:
bf:04:69:a6:16:e1:5f:2a:e2:e0:41:9d:c8:c8:f0:41:b3:db:
ba:c6:8c:d0:07:f2:e7:dd:ca:bb:3d:5f:e0:4b:af:26:4e:31:
0c:c2:a5:71:85:64:11:53:18:86:00:73:c1:86:8e:d8:a0:c8:
ed:47:81:45:87:82:ca:6c:fa:91:47:82:3b:43:0d:94:0f:03:
5c:63:27:a2:a2:bd:0f:66:1b:e2:c5:c6:fb:70:f5:d4:53:5b:
00:17:2e:db:2c:45:80:16:f9:ca:25:d2:30:db:41:71:d3:a5:
f1:a8:99:c5:d6:20:71:d3:6f:37:7c:08:bb:0e:51:77:5b:9c:
73:c6:75:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:46:21 2025 by rpki-client