Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
File: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json)
Hash identifier: FsH5oBewNtpH9R0+CSxxEesXFZweSaDp5KG8UkkWEb0=
Subject key identifier: 76:E4:C9:FF:12:A7:B2:60:1B:E5:2B:37:5D:18:2F:94:3A:97:4B:24
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Certificate issuer: /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial: 0196BB5ADC15F12A582715F01462F0D9119B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
Manifest number: 0F23
Signing time: Sat 10 May 2025 18:00:15 +0000
Manifest this update: Sat 10 May 2025 18:00:15 +0000
Manifest next update: Sun 11 May 2025 18:00:15 +0000
Files and hashes: 1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: CQXDWvE0DgXHsWq3X/5/Y5Xw8Vg/hFf7jcRU7D5Snv4=)
2: qPfR7RG57f18LNEfOXECDUWuxuU.roa (hash: QgXqOHY45cNI3RJ9Yex5GhM6/GX8GPU2S0Ij2p9Y640=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5a:dc:15:f1:2a:58:27:15:f0:14:62:f0:d9:11:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Validity
Not Before: May 10 18:00:15 2025 GMT
Not After : May 11 18:00:15 2025 GMT
Subject: CN=76e4c9ff12a7b2601be52b375d182f943a974b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:bc:77:d1:42:4e:00:d7:38:6d:9d:f9:e9:
0f:97:31:fc:ad:f6:9e:dc:ea:4c:49:48:15:b7:1a:
05:4b:34:75:8b:c6:8f:e9:9f:60:26:2e:9c:1c:dd:
a4:fd:b8:0a:08:23:0f:ce:dc:55:bd:69:c6:21:e8:
e2:0c:ec:4d:5c:f7:18:0a:55:4f:c7:b5:b8:a2:c1:
ce:d7:50:b2:09:20:7d:c7:8b:fa:7e:d6:e8:6a:98:
78:dd:7e:73:09:61:6f:33:09:e2:8a:cb:2e:ee:bf:
23:c6:e9:82:db:58:9c:27:d2:cf:a1:e7:fc:2e:10:
a2:4f:88:a1:c4:ea:a6:24:ca:d9:f6:2e:29:1e:30:
e8:97:f4:ba:6c:88:68:b2:7b:e4:cd:67:ec:ef:a6:
fd:fe:92:13:c7:bc:e6:3e:d0:8c:f0:72:84:9c:6f:
04:31:ab:f3:e7:b9:17:18:38:41:b8:fc:25:9c:55:
16:03:c2:a1:8c:f3:9d:ee:0e:cd:c0:39:d3:c3:18:
9a:ab:15:f8:03:6c:08:cb:38:81:2f:65:fb:64:3c:
a4:c2:45:00:a4:54:8b:16:08:2d:ec:24:b3:4b:dc:
59:c3:8c:59:41:59:91:e6:a9:6d:85:7e:50:c2:da:
e6:6a:bb:d4:ff:03:3c:17:79:b9:fb:27:1e:0a:dc:
02:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E4:C9:FF:12:A7:B2:60:1B:E5:2B:37:5D:18:2F:94:3A:97:4B:24
X509v3 Authority Key Identifier:
keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:08:ee:9a:66:f5:cf:99:9d:f2:9e:c1:85:25:66:b3:ce:18:
7b:29:8c:3a:49:75:45:c3:a1:98:14:95:68:c5:d0:c3:15:44:
d7:0b:90:e7:c5:58:eb:73:47:ab:41:aa:7a:e7:63:e1:13:08:
cb:7c:0c:75:9a:ac:ae:0c:f7:b7:63:ed:46:df:64:38:3b:f5:
07:82:9c:09:dc:b0:1a:01:e3:92:ef:27:96:53:13:a0:de:32:
43:14:86:9b:8f:aa:6a:18:ff:d3:a4:da:3b:14:22:a0:f3:cc:
1e:98:36:84:2a:f3:52:3e:61:24:57:f7:92:26:61:94:96:3b:
0e:44:fb:22:20:21:c3:50:b7:bf:08:0f:c1:c6:7e:b3:6a:19:
b8:b6:25:f8:46:c5:81:f7:6e:36:58:ba:50:fe:8d:0f:22:6b:
29:c6:7a:42:a1:96:25:44:2f:40:9f:4f:34:de:f7:d4:14:a6:
31:65:08:c3:32:a6:9b:34:0a:f3:92:cd:6b:ab:bb:ed:df:6b:
75:41:52:7a:01:7e:28:82:89:43:42:6a:9f:29:0f:23:d4:99:
52:e9:22:73:88:5c:37:bb:91:1b:52:c4:ac:d2:b8:6a:f9:63:
36:81:53:b8:10:4e:27:e6:c0:b2:94:86:6e:70:29:c3:02:68:
8f:5e:bd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:34:35 2025 by rpki-client