Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
File: 8nBAx0Kee54hpf_IjZMrRwfMOgA.mft (raw, json)
Hash identifier: SJ997FuL8oVzGKo/bcKFLWVNoV4vbuEgCDjxBOY2Y1s=
Subject key identifier: 00:40:21:4B:88:3E:AB:8B:03:54:93:9F:25:EE:5D:B6:0E:C2:5B:00
Authority key identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
Certificate issuer: /CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Certificate serial: 0196507F4A20FE1878474CBF7929DCC4411A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
Manifest number: 14F8
Signing time: Sun 20 Apr 2025 00:00:41 +0000
Manifest this update: Sun 20 Apr 2025 00:00:41 +0000
Manifest next update: Mon 21 Apr 2025 00:00:41 +0000
Files and hashes: 1: 8nBAx0Kee54hpf_IjZMrRwfMOgA.crl (hash: W7Zp6MzQoqM6wW+knhs9eek/yfNEL/bSH4Kh3Na2QGY=)
2: r8IgxFWc9XzlcmWsiD3Z-WIyGyw.roa (hash: FGlOHNeym9mZlkgU9PVn/K4BszdTXj5x4PebqSOF0dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:4a:20:fe:18:78:47:4c:bf:79:29:dc:c4:41:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Validity
Not Before: Apr 20 00:00:41 2025 GMT
Not After : Apr 21 00:00:41 2025 GMT
Subject: CN=0040214b883eab8b0354939f25ee5db60ec25b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:10:33:50:82:83:ac:b2:90:d2:57:b6:05:
88:54:49:ee:35:91:a6:6c:03:cb:42:05:ad:53:cd:
4c:28:6d:2a:e5:2f:97:e5:72:14:70:de:bb:20:78:
c8:ae:8f:16:85:c6:23:6a:78:65:50:f2:af:aa:61:
28:c7:2b:07:d7:32:a8:16:5a:d4:4c:26:fa:d1:04:
ee:02:93:4e:e1:b7:60:ad:67:3e:fc:24:b4:fb:34:
ed:96:93:f7:c8:2f:23:f1:81:b0:a2:92:1f:ef:46:
f6:2d:96:ad:5d:72:35:8a:a8:48:4a:30:2d:9d:4e:
d5:13:e5:2d:26:fc:76:83:20:3d:97:4f:c1:1a:c7:
1e:8d:6a:52:48:04:1e:31:7c:73:12:37:37:14:c2:
9c:f5:63:f9:ed:e2:2b:20:fa:6e:f4:0b:7f:0b:11:
a0:f5:14:67:fa:c3:96:1d:1e:1b:ac:f5:27:4e:7c:
2f:9e:50:2a:75:9a:3a:25:09:c5:6d:a7:ce:6d:2d:
ff:02:91:ae:7c:0e:cb:f1:8e:f5:77:51:de:74:12:
19:d1:34:53:db:d6:1d:43:ad:a8:17:73:5c:90:77:
0e:c6:84:5c:2c:e0:ef:d3:ef:3b:0b:52:ba:a6:f0:
66:e1:fa:f9:ad:3f:5a:74:22:74:45:a7:43:ae:ac:
db:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:40:21:4B:88:3E:AB:8B:03:54:93:9F:25:EE:5D:B6:0E:C2:5B:00
X509v3 Authority Key Identifier:
keyid:F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:92:bd:82:a7:6b:0a:1a:a2:8e:60:b6:0d:9d:c6:a3:b1:46:
83:e4:cb:9c:4f:e8:72:6f:1a:d8:f1:d8:c8:10:7b:a3:95:03:
c6:cf:b6:ce:17:22:6d:31:67:33:02:71:4e:ac:0f:98:8d:b6:
c1:8d:04:99:c3:5e:6b:56:ad:42:5a:66:9b:d7:bc:79:1b:51:
1e:46:85:70:78:97:ad:09:a6:bc:dd:49:0e:da:0c:13:3d:f2:
df:38:87:85:c2:bc:ed:01:f8:bd:ef:36:6d:fe:4d:09:9d:86:
6d:07:2d:9d:63:b2:84:27:f0:3b:9d:fa:fe:62:c3:ad:0c:ef:
74:37:16:ed:7b:ef:7d:af:81:3d:c2:40:9b:67:4a:b5:0f:e6:
f8:7c:e7:88:38:5a:99:80:45:ab:b4:b6:ac:56:ab:03:75:bd:
19:54:a4:c4:4f:39:da:1c:04:9b:7a:67:84:b8:da:84:19:90:
f9:0c:8a:6a:11:57:3f:10:49:d8:36:7b:77:bd:11:1c:b2:1f:
bb:6c:7a:a6:0f:4e:57:9c:41:6b:c2:1a:5e:01:9d:2a:0e:75:
ea:c2:a8:cb:cc:d4:1a:29:28:c7:36:9e:cb:9d:5a:63:1e:d6:
3d:c8:53:14:67:38:e8:5d:b7:d4:35:c0:02:30:2a:ca:4d:0c:
a9:b1:cb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:29 2025 by rpki-client