Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
File: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json)
Hash identifier: IuqaSLnDlFfJLZR966BUyrLkeDLGikmBchdUvWnP8LY=
Subject key identifier: D8:10:F5:34:C5:31:A6:E8:39:5E:88:2F:C0:75:AD:A2:42:D5:8B:27
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial: 01962C053F2B2BD1D2EB73FD9931B1ED047F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
Manifest number: 065A
Signing time: Sat 12 Apr 2025 22:01:03 +0000
Manifest this update: Sat 12 Apr 2025 22:01:03 +0000
Manifest next update: Sun 13 Apr 2025 22:01:03 +0000
Files and hashes: 1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: 7eJ2sbbGWIa19/x0qvH6VxG/5b+O6MlYlmzNOMv5fDM=)
2: nJ3bZDTF3klediLdsGzrGEizejI.roa (hash: XOv5pl5Y0ikBc3XP047Nh+8GGnppEmfe5vg+dWr14YI=)
3: qnlY-2XHeoB5T91L-eAv--psw3s.roa (hash: GlcTsLYuOrrcX+rD96Cshdq9OCpUu7GdPBcBG+rwyLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:05:3f:2b:2b:d1:d2:eb:73:fd:99:31:b1:ed:04:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
Validity
Not Before: Apr 12 22:01:03 2025 GMT
Not After : Apr 13 22:01:03 2025 GMT
Subject: CN=d810f534c531a6e8395e882fc075ada242d58b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:27:69:94:04:8e:4c:5a:eb:6e:4c:04:4d:
b9:19:9f:77:8b:3e:33:36:24:ac:88:1d:3a:08:de:
16:30:f3:a2:e4:94:db:de:3e:92:79:d4:3e:ba:3a:
93:46:f0:2c:23:09:d9:6f:53:52:e1:a3:f6:ae:9f:
a8:5f:a0:0a:cd:3d:99:a2:17:0d:eb:f3:d1:ae:e6:
01:80:54:6c:15:a8:75:13:e2:b2:81:a3:4e:16:65:
bf:c2:2d:30:85:c3:3f:09:fc:3c:ab:31:11:ab:36:
4d:6b:1b:d1:db:cb:bd:2f:70:ad:3b:2d:27:64:f4:
1e:ee:c8:9f:59:2c:78:ea:c5:cc:71:5d:69:37:03:
91:74:65:fe:92:90:9f:3f:c6:d7:94:a0:77:c2:32:
8d:0d:56:b7:f9:46:8c:22:1d:fd:d1:1a:f8:07:63:
2a:05:9e:2f:9b:ff:42:15:20:08:54:8b:5e:41:1e:
39:64:b7:db:4e:be:89:b8:ca:57:98:cc:5d:0f:2e:
8c:be:fa:bf:2f:7c:5a:e9:84:f3:17:41:82:50:00:
e4:5f:7c:bd:06:e7:ed:f9:90:fa:4d:1e:af:00:fd:
8f:16:a1:ec:ef:2d:15:e2:ae:b2:94:cc:7f:d0:ad:
c0:cb:c9:2b:79:9a:de:22:69:f1:a8:17:b6:1b:44:
18:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:10:F5:34:C5:31:A6:E8:39:5E:88:2F:C0:75:AD:A2:42:D5:8B:27
X509v3 Authority Key Identifier:
keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:79:61:46:6d:5d:4c:1f:03:16:66:32:4f:e8:02:fd:37:9b:
b5:64:cd:24:08:a9:cb:67:49:12:2e:25:55:46:0e:d9:fe:9e:
72:81:66:f5:d0:0a:fb:b4:3a:9b:2f:3d:60:44:68:c4:5b:f4:
c8:19:3e:ed:24:f7:d4:cf:62:42:46:8b:e2:43:78:a3:58:7a:
cb:f5:d2:ef:37:15:3a:d5:4f:c5:82:67:e8:60:92:89:25:64:
98:de:9d:6a:7e:d9:ff:28:d4:d1:5b:86:2a:0d:68:81:a8:ea:
21:a6:34:aa:03:c7:0b:70:a8:b7:a0:ca:52:fc:20:5a:0b:99:
68:2b:7f:05:6e:6d:0f:36:a9:44:58:4d:e5:45:3f:26:41:e3:
32:63:da:08:38:48:ab:c2:b5:71:63:91:9c:18:76:33:0e:26:
76:80:63:95:d3:1c:d0:e2:c5:a4:9a:a8:21:bf:fc:5d:ef:bb:
04:4e:2e:30:82:8f:be:0e:4c:49:f4:80:a9:75:61:16:c4:9b:
a3:07:ed:03:32:23:5b:05:10:4d:57:6a:09:87:3a:aa:c3:f2:
b0:40:78:ba:dc:4f:fe:27:c8:71:dd:ed:cc:9d:b4:88:c6:47:
6a:5a:e9:56:0b:9c:ef:4d:02:d1:70:63:4f:16:6c:81:49:28:
fe:e6:ff:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:38:04 2025 by rpki-client