Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
File: 8gwo0Z4N-1NIJqojqlBq9oowW3o.mft (raw, json)
Hash identifier: imaXjf6HLxvYU6I5y4JzD5gaBNDNOXqxyZZouOej83o=
Subject key identifier: 98:7A:2D:4B:A1:68:28:F8:69:3E:97:0A:3F:D3:6D:7B:DC:4E:AE:A0
Authority key identifier: F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A
Certificate issuer: /CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
Certificate serial: 019510C7FBE2CDF70DC7DFEC0CB34074E6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
Manifest number: 13E8
Signing time: Sun 16 Feb 2025 22:01:36 +0000
Manifest this update: Sun 16 Feb 2025 22:01:36 +0000
Manifest next update: Mon 17 Feb 2025 22:01:36 +0000
Files and hashes: 1: 8gwo0Z4N-1NIJqojqlBq9oowW3o.crl (hash: QYL5okk8XODjj6c/C1kqBizQ/dAIRvQt1aCZ3m3sAlk=)
2: eCt_o7wQa4uTOlJ8RZzlmDoTQs4.roa (hash: PGIcRqsMSnRyuLEgYQdmyq8FNdFdg9Cwl+Xi/IOiL8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:fb:e2:cd:f7:0d:c7:df:ec:0c:b3:40:74:e6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20c28d19e0dfb534826aa23aa506af68a305b7a
Validity
Not Before: Feb 16 22:01:36 2025 GMT
Not After : Feb 17 22:01:36 2025 GMT
Subject: CN=987a2d4ba16828f8693e970a3fd36d7bdc4eaea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:53:6c:53:09:68:2d:03:cf:2f:c6:8f:f5:39:
91:2c:bd:00:5c:18:c9:b3:1e:87:02:05:7b:79:9a:
40:98:fe:ec:30:57:68:91:9f:cd:e0:aa:d3:a7:c0:
f0:07:de:0b:04:af:a1:a2:5e:1d:5c:5f:4b:88:87:
9b:3d:e0:a3:9b:43:df:99:39:3b:e0:6f:04:57:bd:
a6:ff:65:13:66:ec:3f:5b:95:16:fa:fe:f2:f9:e0:
18:c3:bb:62:f4:4c:4f:0d:97:73:75:9f:59:e7:7d:
1a:93:4f:8b:0a:0d:0d:65:ce:50:89:33:c1:ee:d9:
a3:54:43:0e:4c:b5:89:97:81:64:51:07:7d:73:6e:
dc:6f:7b:82:c8:d6:e1:2d:6a:cc:05:03:c7:bc:84:
f0:29:e4:b5:1b:71:9d:24:94:85:f5:c9:75:8d:74:
50:7d:bc:e1:8c:01:cf:a4:b6:72:4e:e7:d1:c2:b7:
dc:24:98:70:8c:70:28:4d:61:bd:45:ea:48:58:ae:
23:ae:b0:76:ca:a8:12:71:7e:38:75:10:87:0d:2a:
ae:af:a7:d8:38:af:8f:11:18:0a:41:44:41:10:41:
70:e7:6b:61:bc:da:36:63:68:fb:14:dc:09:2f:3a:
16:bc:d7:d4:19:76:a5:ae:07:9e:2d:20:36:47:e6:
75:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7A:2D:4B:A1:68:28:F8:69:3E:97:0A:3F:D3:6D:7B:DC:4E:AE:A0
X509v3 Authority Key Identifier:
keyid:F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:91:22:08:dd:7b:51:d9:50:e1:b5:4f:e7:35:df:34:50:5d:
47:59:79:c0:bc:1f:8e:63:25:f4:cd:56:21:49:3d:8e:2e:dc:
f2:da:eb:0a:8d:6b:40:d7:51:1e:6d:54:61:41:9c:44:9d:00:
2c:7b:3a:7a:13:d1:eb:1f:e0:a0:ae:bd:3e:75:07:c0:1d:0d:
6d:66:dc:36:02:90:71:b0:da:23:fa:36:f3:f9:92:26:26:f6:
48:5d:f1:1b:96:27:65:3a:14:b4:61:5a:49:29:40:6f:fb:fd:
4d:c4:75:14:d3:3d:b2:2f:09:23:a9:b1:bc:1e:f3:c6:b2:6e:
fd:fa:52:92:f3:b5:5f:1e:58:f4:38:ef:be:b1:84:fb:61:55:
52:f3:21:1b:69:0b:d5:08:5c:83:b1:aa:f0:18:86:7c:74:57:
62:bb:54:f2:0e:ec:f4:9f:e2:fa:30:0c:33:be:5e:92:86:81:
d5:76:98:c0:a9:b8:5d:9b:46:dd:1a:57:b6:0d:26:26:e5:ab:
e7:9a:d4:88:e6:63:c5:d9:f6:e4:c1:36:27:63:90:fc:4d:72:
a2:91:a2:cb:43:00:48:72:86:db:36:84:94:22:f0:75:a6:91:
5e:5f:6d:cd:2b:83:12:f5:aa:6b:82:02:8f:e5:a9:32:cd:24:
10:e1:25:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:05 2025 by rpki-client