Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
File: 8o-houRJGJHBmw8QsIb2VZhPWHk.mft (raw, json)
Hash identifier: 3YRWMdq1suPLYXD0wlTwGxskRAyYMn2tH1dvS3+ghtM=
Subject key identifier: 02:DE:6D:AE:68:D7:C6:64:62:06:DF:00:A8:55:F8:23:97:DD:5E:20
Authority key identifier: F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
Certificate issuer: /CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Certificate serial: 0196A842FCD468240E0A3D68365DD0A4E58E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
Manifest number: 097A
Signing time: Wed 07 May 2025 01:01:24 +0000
Manifest this update: Wed 07 May 2025 01:01:24 +0000
Manifest next update: Thu 08 May 2025 01:01:24 +0000
Files and hashes: 1: 8o-houRJGJHBmw8QsIb2VZhPWHk.crl (hash: aJCH6HcAreNRK75vmPmAccmsNbITwP6QZkpo8X143eg=)
2: IAJBt24rgV_us-DgHGqft-brDOM.roa (hash: EYG4N8j/B/VmDjgrJQXF6wEvv1LkIhmvGFmYVI9Ke7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:fc:d4:68:24:0e:0a:3d:68:36:5d:d0:a4:e5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Validity
Not Before: May 7 01:01:24 2025 GMT
Not After : May 8 01:01:24 2025 GMT
Subject: CN=02de6dae68d7c6646206df00a855f82397dd5e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0a:f5:9b:03:b2:f5:c4:ae:7a:2a:e6:38:23:
9e:81:fb:94:f0:e6:97:b5:2d:fc:5a:c2:50:43:13:
a7:e5:d2:b1:44:2d:ae:30:79:6a:96:2f:33:92:1f:
55:b5:4a:a4:88:e3:d9:cd:63:20:af:d6:d6:b4:44:
bf:90:bb:83:8f:3d:17:6d:d3:41:e6:05:31:5f:b3:
e8:9b:b1:c1:60:71:36:89:4d:57:7c:25:c7:4e:d0:
04:55:94:30:8b:86:96:95:36:f1:48:35:84:dc:7a:
04:0f:41:8f:fe:dc:16:91:78:5b:b2:6f:1e:6b:4a:
3d:46:34:3a:29:1d:55:c9:cf:43:e4:c0:cd:4e:9f:
19:9c:3a:dd:a8:5f:3f:7c:8c:a0:92:de:37:75:4e:
99:4b:f5:73:6a:0d:d6:d8:2f:8a:51:12:67:00:58:
b5:87:02:b6:53:89:4d:18:07:37:c8:8f:1c:ab:25:
b7:cd:ab:99:88:6f:0d:8f:13:2b:ec:a1:f8:27:32:
69:ed:d5:29:df:fa:fc:d1:c8:b5:0d:da:d7:dd:b5:
48:5a:11:a7:47:03:1e:5b:fb:5a:21:e3:2f:21:b1:
84:6e:52:31:62:00:6e:64:81:33:cc:eb:7b:fe:43:
26:2b:d8:35:00:e4:c2:a9:94:da:5d:34:20:3a:63:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DE:6D:AE:68:D7:C6:64:62:06:DF:00:A8:55:F8:23:97:DD:5E:20
X509v3 Authority Key Identifier:
keyid:F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f6:fc:93:3e:94:fe:61:b8:d9:06:07:81:02:8d:41:e8:e2:
bb:f1:eb:80:41:9d:2c:8d:6f:18:4b:54:5d:79:69:f5:c1:42:
ed:c8:9f:0e:a3:27:76:dd:12:fc:2e:be:46:94:36:0f:1b:45:
40:89:5d:6b:a6:7a:de:ce:ba:9e:18:9b:a4:6e:b2:35:61:8f:
55:71:35:fd:64:6e:fd:a2:b2:e0:bd:61:cf:6c:91:d8:cf:4d:
ae:65:d1:e0:54:10:17:42:22:71:27:3f:3e:1e:81:5e:53:08:
c0:8e:12:5a:cc:34:e3:d4:45:65:26:ec:d6:cd:9b:54:24:32:
ec:bc:db:5b:3a:19:91:a7:23:61:fc:00:5d:13:ac:ee:35:a2:
f4:cc:f2:e8:36:21:6d:ad:d3:53:5f:85:66:bb:59:cc:ed:bb:
40:63:31:12:00:f0:46:ae:ef:bd:51:c2:56:5f:8e:50:a9:a0:
3f:79:39:e6:3c:d9:be:22:2c:18:27:a4:b5:f3:93:41:d2:d3:
79:fa:bd:fd:5e:b6:19:06:20:21:ab:10:53:59:10:b3:e8:01:
00:29:6a:32:63:c2:4c:87:1b:fe:91:55:fe:2c:80:48:8d:f2:
61:61:5d:18:00:24:df:d7:b7:7a:9b:28:2e:45:5d:97:e2:fe:
bd:58:23:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:53:19 2025 by rpki-client