Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
File: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json)
Hash identifier: k50dw8xnoSn0vuQsrb1cmtwBvAmy8A6x27gkv266msM=
Subject key identifier: 67:0D:BF:4C:A0:14:12:66:16:98:6F:F1:3F:BE:12:B3:B7:C9:0C:0D
Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Certificate serial: 01965537C594E72D6E65657AB97395ACAE94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
Manifest number: 08CA
Signing time: Sun 20 Apr 2025 22:00:40 +0000
Manifest this update: Sun 20 Apr 2025 22:00:40 +0000
Manifest next update: Mon 21 Apr 2025 22:00:40 +0000
Files and hashes: 1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: STx1mHYImQagN6gMy77WZnr/edVw2pdNGCd4WKyy9oE=)
2: GZ1s7d54viav3wnjL9leWDPX9XE.roa (hash: havZ3bJj+OM6go5VLxui+205cgsq5mlbJ3gC7fDy5Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:c5:94:e7:2d:6e:65:65:7a:b9:73:95:ac:ae:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Validity
Not Before: Apr 20 22:00:40 2025 GMT
Not After : Apr 21 22:00:40 2025 GMT
Subject: CN=670dbf4ca014126616986ff13fbe12b3b7c90c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:86:82:fd:64:d5:83:49:0c:06:25:fb:71:
46:2d:b0:ba:5f:15:df:56:38:fb:45:5b:b8:7d:af:
87:2f:b6:d3:58:36:b8:f8:9b:9a:af:e9:05:5a:e7:
fd:66:4d:fc:1c:57:35:46:22:7e:72:7f:ac:47:5b:
e4:2b:e6:06:21:26:2f:2f:c4:f3:3b:d9:75:6d:ef:
5f:2a:df:da:9c:23:30:74:4e:d0:54:ba:d6:16:f0:
a8:3b:98:c1:99:8b:cd:ee:a7:b3:77:bf:b5:21:2b:
f8:77:b0:ff:4d:9f:f5:02:6e:a9:47:c4:3c:03:54:
42:e8:17:97:4d:e6:14:fc:7d:1b:fa:4a:16:75:c6:
b2:e5:21:04:40:18:a9:c6:01:eb:f0:76:a2:92:7d:
64:f3:25:19:eb:36:ac:f5:75:a4:87:29:05:8a:1b:
12:4b:11:ea:ec:a6:fb:44:9e:68:60:ea:16:10:a8:
b6:5b:9a:3c:8c:a7:5a:c1:74:ac:f2:9a:ee:97:ac:
ca:43:1c:61:88:98:57:cd:50:2f:8f:64:79:a1:5b:
da:14:18:59:b0:59:09:a0:a7:3a:e8:9b:d0:9a:9c:
62:d8:0b:71:da:7a:5b:ec:7d:a8:a6:b7:01:74:9c:
2c:0e:46:af:84:9d:75:08:d4:bb:cf:6e:c3:b6:75:
b7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0D:BF:4C:A0:14:12:66:16:98:6F:F1:3F:BE:12:B3:B7:C9:0C:0D
X509v3 Authority Key Identifier:
keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:fc:87:89:cd:57:d7:1e:6f:e3:e7:49:79:9f:16:37:43:ce:
43:bd:f5:45:df:00:0f:3e:d7:d1:91:56:cd:1b:46:5e:b8:f7:
29:b4:d8:90:40:fb:d6:e9:b0:0f:78:81:d1:04:13:a4:65:c7:
9c:9d:e0:69:03:01:e2:78:bc:d7:48:ee:72:12:c9:28:fd:d0:
30:d9:79:1d:ef:e5:fc:84:2b:79:06:18:36:84:82:11:e8:b1:
8c:c2:b2:c9:f8:ff:be:09:96:60:b8:b5:7e:e9:2b:01:31:3d:
25:dd:a7:80:0c:81:e0:65:78:a4:29:05:02:85:07:ed:e3:de:
2d:fc:e3:ce:9e:ff:2d:bd:14:3f:84:6e:b6:a4:f2:bb:f2:57:
a0:b2:8d:c5:fb:7d:63:1b:55:f6:57:0e:cb:a8:aa:5e:50:da:
8d:50:88:8d:df:81:ca:5f:8d:27:c1:b7:c0:fb:f9:92:b6:f0:
9b:c5:bd:07:2b:f0:20:ee:c0:d8:86:23:99:30:22:f7:28:cb:
77:9f:56:f0:ea:14:70:8c:43:17:56:d1:08:23:24:3f:ec:fa:
17:78:e7:b7:a7:47:68:71:c5:20:39:5a:7e:d0:a7:a0:b4:1e:
3c:0f:a9:25:86:55:48:b3:19:b8:64:0c:07:08:76:8f:83:63:
6b:ff:45:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:48:35 2025 by rpki-client