Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
File: 8aqhbd2NihLf0OUyEXA62VLjshQ.mft (raw, json)
Hash identifier: 7Z5u418Z+MuV79yeFPfYChW2w5RfRitArQRxujEC8bA=
Subject key identifier: 02:86:89:B7:4C:59:3C:2D:46:C4:D1:6D:3B:1A:4F:47:AF:B1:E8:01
Authority key identifier: F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
Certificate issuer: /CN=f1aaa16ddd8d8a12dfd0e53211703ad952e3b214
Certificate serial: 0196C5DEA95C8172AD54CB859ADCC395A5E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
Manifest number: 0B86
Signing time: Mon 12 May 2025 19:00:25 +0000
Manifest this update: Mon 12 May 2025 19:00:25 +0000
Manifest next update: Tue 13 May 2025 19:00:25 +0000
Files and hashes: 1: 8aqhbd2NihLf0OUyEXA62VLjshQ.crl (hash: 6rEPRJLMarRQ3M0u1Basj9g5/lho6t/X1a/k3G/qqXc=)
2: lU08unvCcfUmoq9nA8rwwc_EGrY.roa (hash: r4fF+/jooZGKRffBCLRbLiandhCNSPTtKJ/Y1slqur8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:a9:5c:81:72:ad:54:cb:85:9a:dc:c3:95:a5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1aaa16ddd8d8a12dfd0e53211703ad952e3b214
Validity
Not Before: May 12 19:00:25 2025 GMT
Not After : May 13 19:00:25 2025 GMT
Subject: CN=028689b74c593c2d46c4d16d3b1a4f47afb1e801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:49:0f:93:8c:a5:ea:b2:48:0f:c7:0d:dd:42:
49:3f:53:ee:fd:88:7f:bb:c7:2e:fe:63:d0:27:34:
79:1a:11:bf:e0:99:de:6c:6f:ce:61:bc:6c:0c:3f:
f7:f2:cf:2d:41:cc:65:09:95:18:55:b9:29:69:e7:
3c:d3:d2:2b:3c:3b:7c:66:32:15:6b:33:81:1d:e2:
17:95:49:ae:53:26:3f:47:16:e0:65:48:74:af:e6:
38:75:18:6f:67:fa:e5:dc:fb:8f:46:c6:b2:0a:92:
d8:53:4f:ba:a2:34:c7:cd:ac:16:15:a6:22:f2:4c:
00:eb:51:a2:1f:f2:18:d7:ed:3b:8b:e6:8a:cb:49:
97:bf:e2:76:30:7c:72:ab:0b:53:70:3b:4f:dd:ce:
0b:94:b8:c0:e3:a8:3d:06:ac:29:a3:42:7e:fc:95:
24:c0:d1:7b:8d:fd:07:15:d7:30:59:c9:71:e0:10:
aa:99:37:9a:48:61:43:82:9a:62:30:00:e6:95:63:
18:5e:96:5f:40:8b:39:03:78:e4:2d:20:4f:bb:1d:
df:3c:20:83:7a:3b:19:1a:7b:ef:f9:ae:e4:bf:a2:
db:74:67:f7:37:1b:05:4c:93:69:bc:32:92:0b:84:
56:35:74:64:15:ce:a9:71:6a:eb:40:65:10:5c:31:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:86:89:B7:4C:59:3C:2D:46:C4:D1:6D:3B:1A:4F:47:AF:B1:E8:01
X509v3 Authority Key Identifier:
keyid:F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:16:df:47:cf:21:66:10:45:b6:c4:f1:3f:ec:a3:89:38:b9:
b2:7e:d8:aa:21:1d:a4:4e:a5:ba:e2:59:d9:16:6d:36:57:6e:
18:75:49:4e:ca:b1:b2:92:09:37:5d:eb:d4:29:a3:d7:39:97:
22:0d:0f:74:33:d7:36:b2:35:db:b1:ae:b2:ae:5d:6f:c4:97:
96:f4:0d:6b:74:bf:86:8d:41:2c:fc:25:8f:ee:b8:9f:58:18:
ee:09:0d:15:b2:db:ff:d4:56:22:f0:e4:f8:b7:ef:a9:82:23:
6b:e2:ad:42:16:88:92:ba:b4:c9:42:df:bc:d5:e5:8d:71:7f:
a9:36:ad:84:2f:ac:80:89:fe:3a:5a:b0:e6:de:c6:cf:7c:0c:
79:ef:a4:42:58:bd:f2:29:a1:79:a1:52:0d:71:7b:c6:2c:53:
21:c4:b5:4c:58:1e:ad:97:d6:1e:d6:8f:72:03:20:31:91:81:
fe:23:68:54:78:d3:e8:17:d2:3e:23:3f:20:61:e4:2d:bf:94:
55:4f:8b:b5:55:25:df:61:3e:60:9d:71:5a:1c:59:83:b7:c7:
8d:7c:cf:bd:e0:65:9d:ed:85:8e:92:e5:6b:a3:4e:16:d6:b0:
24:09:bd:1d:6f:f3:ea:7d:68:fa:1b:cd:5a:ff:67:be:96:98:
50:30:e5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:32:30 2025 by rpki-client