Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: po05iaBGvpGYG4XfATMEzvnGtqFsEVflsTWlrVuDrLE=
Subject key identifier: F3:7B:DB:0E:18:F0:E4:3A:85:0A:0A:77:27:F0:F1:FA:AB:01:23:89
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 019654C9A7AD20F339CA22D4FB81C9F08502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 20:00:23 +0000
Manifest this update: Sun 20 Apr 2025 20:00:23 +0000
Manifest next update: Mon 21 Apr 2025 20:00:23 +0000
Files and hashes: 1: 7XoxbsiH0tvuamwOaZJkHsbncU8.roa (hash: eOLDYEBs+ePiFOo04IA8xxSpoLseLj4knNzwy/AuO7c=)
2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: ZZY2SX2jWvZI3XpV30cWEMsLg/QIR5pzicA1Bkzmm/g=)
3: jMGhTNUb7i42fBQA0pNbTbsvC0w.roa (hash: 3rIrbzRKv4rGgOKlFAltJmUMNb9Mmay1gOYKugMTp+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:a7:ad:20:f3:39:ca:22:d4:fb:81:c9:f0:85:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Apr 20 20:00:23 2025 GMT
Not After : Apr 21 20:00:23 2025 GMT
Subject: CN=f37bdb0e18f0e43a850a0a7727f0f1faab012389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:64:59:ce:02:c3:90:53:da:b8:22:c3:56:39:
41:ee:72:51:9c:db:e3:c5:14:84:4b:6b:c6:25:86:
04:15:af:de:e7:2b:18:10:39:f0:9d:2a:56:95:49:
3e:0e:06:3f:c6:e3:46:56:d3:d1:6e:e8:0f:2b:e1:
95:34:f2:6d:8a:bf:41:4c:5d:37:79:40:c3:4c:0f:
55:2a:65:8f:59:45:1a:e2:1f:d2:98:04:c5:35:61:
43:7b:b1:63:32:8c:44:a9:21:28:e4:32:62:e3:ef:
db:e8:be:8c:cb:ec:9e:0b:d1:40:ee:b5:26:a3:22:
36:d5:16:4a:14:71:20:a4:d9:14:41:4f:59:94:57:
4a:96:68:09:4f:f4:70:16:a9:ed:25:a5:cd:b2:6b:
62:ea:c7:6b:25:39:14:58:94:7e:36:f3:51:19:06:
91:7f:ee:0a:2f:27:61:8c:1c:cd:e2:02:a7:28:1f:
cf:cd:38:ad:78:f3:a3:cc:f7:d8:4c:cf:66:d1:85:
c6:0d:2d:38:e7:69:de:f1:02:7e:9d:fd:3e:c6:5f:
40:21:25:37:0d:57:00:43:2b:e2:d8:60:dd:dd:f0:
f8:19:23:a0:71:86:73:98:2f:56:62:84:ed:a3:1b:
65:3a:f9:81:9a:9f:ee:2b:08:80:40:d9:35:a1:ae:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7B:DB:0E:18:F0:E4:3A:85:0A:0A:77:27:F0:F1:FA:AB:01:23:89
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:59:81:18:ef:67:d5:fa:99:34:4e:6f:46:ce:20:26:c7:7c:
e1:13:dc:55:fa:d8:a9:25:7f:de:bd:3a:fd:0f:21:7f:61:d1:
1c:a6:b1:ed:05:6a:35:de:15:ff:c0:0b:bd:59:a3:e8:87:6e:
c8:31:9f:38:71:0e:2e:03:f7:03:dc:e7:08:43:ba:c6:f7:e3:
84:e1:87:00:22:36:2a:04:38:27:9d:6f:f1:ed:92:c5:77:43:
48:47:e9:54:9b:f0:50:fc:a0:35:6e:f2:3b:4d:74:ce:1d:9f:
37:c5:a3:dd:79:38:44:c1:14:b6:79:35:56:f1:86:cf:8c:f2:
08:31:15:f1:81:a3:ca:65:47:20:28:68:eb:47:84:d2:e0:ca:
bc:f0:eb:e1:5c:5b:6d:23:60:be:cd:64:72:7e:c6:9a:8d:95:
d0:2b:b3:2f:10:88:49:8c:2d:4e:4c:91:b6:9e:a9:50:c5:ce:
61:d8:cb:d3:6b:ed:dd:02:a2:e7:cd:26:9f:da:67:d3:1e:58:
e3:57:e0:fc:f9:28:b6:76:34:c0:e4:2a:4e:38:93:39:14:f1:
dc:37:02:6e:ff:f6:e7:1b:9b:32:10:d8:d9:07:bc:29:de:5e:
8b:89:ad:d9:d3:44:fb:25:eb:af:d8:10:91:17:67:38:7a:13:
39:ba:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:36 2025 by rpki-client