Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: qKNLu1gbXodfR89tEromhyWkM8Kn+K/bonvRr9xXP5s=
Subject key identifier: 45:C7:3B:C6:06:93:20:E1:04:34:13:BA:05:A4:C1:EC:4E:1D:61:DB
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 0196B7EC56D6E97C5A14F601CF86B802D335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 02:00:41 +0000
Manifest this update: Sat 10 May 2025 02:00:41 +0000
Manifest next update: Sun 11 May 2025 02:00:41 +0000
Files and hashes: 1: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: oOhEEssPbXH6MiqCOqMUHQf9kcx/zACBQWj/HpkeK8E=)
2: tZdMpKDB98hJ9pZj681_6AcpB6s.roa (hash: i6o9Pghma18l7gMu2eMNZU5hQVcsb4HmVOsk/64sqkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:56:d6:e9:7c:5a:14:f6:01:cf:86:b8:02:d3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: May 10 02:00:41 2025 GMT
Not After : May 11 02:00:41 2025 GMT
Subject: CN=45c73bc6069320e1043413ba05a4c1ec4e1d61db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:03:ba:84:21:f7:8e:57:27:1a:8d:f5:26:45:
e6:8f:ee:e5:54:95:ca:fd:69:f1:39:78:59:e4:01:
8b:3f:b5:8c:c9:58:da:0a:2e:1a:bf:61:82:c0:f9:
5a:f6:05:be:04:77:8c:04:71:78:01:35:7d:bd:cf:
db:da:8a:2f:91:ec:21:ce:a7:c7:93:23:9e:bc:86:
c3:9e:1a:40:51:13:4b:d9:43:07:af:7b:86:50:65:
c6:78:47:5b:f9:b5:de:ba:5a:56:bb:0d:be:2c:9a:
81:c2:7e:97:69:0d:4a:eb:ff:22:9a:95:3f:1c:c8:
13:28:c1:37:88:38:a2:fd:d9:bb:43:b1:b8:88:d5:
37:7f:b4:23:64:0f:09:d3:cf:aa:9d:1c:94:6f:4a:
20:78:c1:67:62:17:a5:5f:01:71:74:b9:0b:f8:0b:
45:54:10:c0:25:51:4b:18:06:93:e7:83:83:f5:20:
13:05:82:77:5d:00:44:e8:09:45:ec:c2:df:ef:88:
93:36:d7:2c:2f:60:ad:06:37:6d:4f:7c:d6:3c:ef:
b5:18:09:fe:12:fb:c7:b2:43:ef:1e:d9:83:03:d5:
aa:47:6b:f2:32:33:93:24:5c:c0:31:48:ea:01:1c:
46:56:58:56:39:84:64:f5:d4:5d:40:17:22:59:20:
f8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C7:3B:C6:06:93:20:E1:04:34:13:BA:05:A4:C1:EC:4E:1D:61:DB
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:43:6e:1f:e7:d1:df:e0:db:7b:c9:c8:2b:14:eb:af:4e:1a:
79:17:85:79:e8:32:4c:7c:01:42:bb:b4:38:65:98:69:c6:cc:
a2:98:ef:22:a8:5b:0d:40:2e:6d:04:9a:ea:b4:57:ec:32:5a:
e5:0c:10:b5:35:ea:33:fe:d7:2e:6d:5a:7f:a8:53:df:f9:8d:
8f:1c:78:bc:0e:90:41:ba:dc:07:ac:be:65:d9:40:af:67:15:
29:72:96:74:6b:06:ad:ca:50:9d:c3:b1:8d:57:73:d7:9b:88:
84:49:35:0b:4b:93:06:22:21:0d:94:f2:50:3c:0c:a3:55:a1:
a1:3c:e7:1e:6f:07:ed:cd:1d:8d:99:0e:25:6b:b1:4e:7d:08:
b6:97:e2:71:f7:80:0a:8a:06:43:d9:50:d9:5c:97:a6:d7:75:
89:52:e2:3d:2a:d9:54:fe:4d:1e:c7:27:53:0f:4e:5a:a3:22:
af:28:18:58:fa:29:cf:a6:87:5e:2c:df:2e:cd:2a:f6:6d:c2:
0a:fb:b4:58:74:8b:06:45:06:cd:da:d7:17:30:40:94:48:29:
0e:c0:ec:f6:29:1d:f4:77:ed:f9:2c:bf:91:d9:74:5a:cc:ef:
16:83:c4:5c:09:f3:cd:37:ac:65:42:ba:82:3c:80:94:bc:be:
23:e6:01:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:49:42 2025 by rpki-client