Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
File: 8KEVxxfliRNKVTZw8-K1uc2hLYM.mft (raw, json)
Hash identifier: AiYaqsnElzOYLAjHk1FZr5m802Thn/5vIL234Dl6CQ8=
Subject key identifier: 7D:A8:A9:9D:3C:53:7E:5F:3E:0C:6A:A5:7C:D0:40:4E:4A:86:55:8A
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 01958C290FC9D53569A5DBF68E0AB7743995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
Manifest number: 0B8B
Signing time: Wed 12 Mar 2025 21:00:56 +0000
Manifest this update: Wed 12 Mar 2025 21:00:56 +0000
Manifest next update: Thu 13 Mar 2025 21:00:56 +0000
Files and hashes: 1: 8KEVxxfliRNKVTZw8-K1uc2hLYM.crl (hash: +o+cWysAlPV7gl+rWoNNxnucmFcCIrA9+531ev9/j1I=)
2: pGdvSW9NlY7ggpWYdQxsgPpUkIc.roa (hash: +D8etcwAhuaAWN3gXHXLkRiaN5uUVNnmE3FwZNf0dCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:0f:c9:d5:35:69:a5:db:f6:8e:0a:b7:74:39:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: Mar 12 21:00:56 2025 GMT
Not After : Mar 13 21:00:56 2025 GMT
Subject: CN=7da8a99d3c537e5f3e0c6aa57cd0404e4a86558a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:93:5a:51:4b:b6:67:7a:4b:4b:6e:7d:5d:
d6:d9:c7:e7:26:7a:a5:05:6f:98:80:c7:e7:46:34:
97:9d:c7:84:08:9c:1e:2a:65:c3:e0:6d:13:50:71:
f6:5a:b5:80:94:cc:03:89:5f:74:8d:0b:cc:9b:a9:
89:01:24:64:a0:9b:f0:a8:bf:c3:c4:ad:6f:bf:a4:
3e:52:65:27:c5:10:e2:0d:fd:fd:59:db:e3:42:9c:
d7:2f:a1:60:07:23:6d:4e:a0:61:86:ea:54:80:25:
f3:61:83:e4:ba:52:f1:38:39:f9:06:02:a3:a1:5e:
33:06:d2:38:32:c1:f9:a2:a0:86:f0:01:ed:68:63:
f1:2e:54:74:7a:e1:b8:ab:6d:42:0d:0d:80:c7:bf:
1a:25:1b:ee:e3:51:cc:1a:0c:eb:fe:13:ab:0c:ba:
71:3d:8e:09:3f:3e:94:fe:4d:5f:44:49:8a:1a:fc:
ce:56:f4:e1:3a:1b:99:0e:3b:94:bc:29:6c:25:bb:
6d:0e:15:fc:78:73:62:eb:d2:5c:87:17:fb:4b:d9:
30:6f:d4:16:2e:bc:b7:a7:69:de:ee:63:89:c1:9b:
9f:1a:be:24:42:a6:f2:0f:fe:34:cd:1c:e0:95:5f:
c4:94:50:62:5a:de:cb:8b:45:22:5e:45:2a:89:59:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A8:A9:9D:3C:53:7E:5F:3E:0C:6A:A5:7C:D0:40:4E:4A:86:55:8A
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:78:80:2a:bf:89:c9:a2:ba:8a:62:a4:4f:42:a5:4d:27:14:
1e:e4:42:78:cb:31:9f:a9:7c:1d:35:9f:82:61:a5:bc:8b:c7:
fb:ad:78:43:8d:fc:14:e9:4d:b3:0d:7a:17:aa:32:94:c5:d1:
e9:39:0f:b8:94:04:a2:db:8f:dc:09:86:f8:7e:69:8f:cb:de:
c1:9d:ca:b2:12:83:b7:1b:cb:91:96:ba:22:ea:35:9d:6b:28:
fe:5e:ce:ae:cf:cc:bb:c4:b0:f8:b7:1c:2f:ac:c6:19:25:0d:
84:be:4d:d9:b6:61:41:55:53:61:f1:b2:ee:2a:34:ad:1e:7c:
ea:e0:2d:f7:59:8e:15:28:b6:65:52:38:b5:5a:d0:66:2e:02:
0c:6e:a6:87:3f:1e:b2:b3:19:96:ff:e0:ae:b7:14:8e:9a:0f:
b2:44:7e:fa:29:c2:23:4e:35:5d:d8:5a:70:27:6a:c6:46:11:
14:f2:82:ed:09:41:37:87:43:8b:01:f3:84:9e:d2:f6:79:67:
b0:d0:9f:bd:d8:18:cb:39:07:e9:a1:45:2b:58:c7:88:69:51:
08:df:f4:f1:e7:8f:9b:dc:e4:0f:88:b0:fd:3b:d9:c5:05:01:
b0:14:85:8a:16:f5:30:e4:c0:64:e5:5d:ed:ed:59:3c:69:93:
ec:23:f9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:58 2025 by rpki-client