Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File: 08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier: BAF8fUl2zuk7+JhFc0cVs/+6IpurAR7LiNCqrTA678Q=
Subject key identifier: A7:07:20:B6:78:64:96:43:40:28:35:3D:EA:83:BD:E0:AA:47:DE:CB
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial: 0196B7B5337D895FEE88B70D94178FFAE8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 01:00:27 +0000
Manifest this update: Sat 10 May 2025 01:00:27 +0000
Manifest next update: Sun 11 May 2025 01:00:27 +0000
Files and hashes: 1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: NBW/FgfRP8X7WUo4JdUzLBon2c6BNX/Nv4NiSzo+DKE=)
2: vhpsA1QTyqlbOgTgwwiSOvjLosU.roa (hash: oOzCVm5vsYLrY+U1GpoNLtBM7Fbrqb31l0clRbwWzyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:33:7d:89:5f:ee:88:b7:0d:94:17:8f:fa:e8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Validity
Not Before: May 10 01:00:27 2025 GMT
Not After : May 11 01:00:27 2025 GMT
Subject: CN=a70720b6786496434028353dea83bde0aa47decb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:34:a8:2e:24:2c:c6:78:18:39:50:33:6a:
e2:b7:6a:f5:5e:c0:8a:b9:c0:ef:f9:d3:11:3c:db:
38:84:34:77:39:4d:88:57:c5:ab:3c:88:92:f8:76:
b3:d4:e2:b5:16:03:5c:36:49:3c:59:66:33:42:11:
e1:7f:32:6a:0c:7e:6a:26:70:9c:da:75:c6:c0:87:
4f:11:35:1c:ba:ec:a7:ed:aa:80:6a:1d:53:7d:2f:
5a:56:8a:d3:93:3b:e8:76:d1:1b:09:64:bc:0b:cf:
3a:b9:6e:11:2e:ab:6b:61:23:3e:d7:6e:f3:27:30:
75:6f:80:74:43:2f:56:02:a6:98:0c:05:df:7c:a7:
9d:0b:04:7a:18:ff:2a:07:0d:7f:dd:06:b7:80:ad:
db:b1:c4:7b:1e:5f:39:df:8a:25:80:f0:5d:b1:c9:
14:75:ca:6e:18:02:85:a8:a4:f0:51:e2:ce:ea:d7:
af:ff:65:87:75:1a:75:b4:17:97:07:1a:2c:59:77:
db:ee:5f:af:f2:cd:d9:de:1f:fe:8e:2f:3a:40:a9:
ca:f3:eb:49:00:27:f6:e4:6c:56:22:2d:e6:aa:e2:
fb:1a:72:fb:84:12:53:2f:36:c2:af:ca:60:36:05:
8d:68:cd:0b:63:f8:69:b4:cf:ee:e2:1a:96:eb:f2:
d7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:07:20:B6:78:64:96:43:40:28:35:3D:EA:83:BD:E0:AA:47:DE:CB
X509v3 Authority Key Identifier:
keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d8:90:f1:cb:58:c3:e4:ee:fe:b2:bc:20:57:45:33:62:ba:
35:ec:d6:52:11:2d:c7:6b:9f:e3:a4:0d:0d:17:17:12:45:f1:
16:07:4f:e7:15:56:ac:32:08:d7:9b:18:14:93:e0:11:d0:4b:
f6:48:ea:b7:39:44:6a:44:2f:2f:e8:6a:b1:6d:3a:a1:c4:b5:
a3:fe:ff:8a:9c:00:5b:c9:f3:05:9b:88:c1:43:e9:e4:ef:df:
71:8e:77:da:45:37:2f:50:16:aa:82:79:2a:c7:e5:f7:0c:6b:
e8:df:ba:ed:b9:ec:48:83:fa:fb:eb:61:76:69:60:0b:10:3d:
cd:b2:cf:3f:83:fa:aa:00:74:d0:4c:c6:f3:38:62:fd:83:0f:
61:2a:c7:bd:ac:b3:98:3a:86:e6:6a:d6:3f:01:93:93:a0:ac:
68:41:d9:8d:28:f3:12:46:d9:52:e7:51:f3:5b:15:de:7b:54:
09:c9:cb:95:7f:48:10:76:cd:6d:0d:fc:18:dd:ee:86:0d:73:
5e:f9:ab:7a:ed:dd:d8:92:54:85:20:54:b3:53:72:4c:cf:b1:
d4:4c:43:51:3e:46:ed:16:06:87:39:69:11:9a:46:82:af:a7:
70:f4:55:a2:8c:24:e2:cf:2f:19:03:95:23:10:3c:a7:d3:a3:
26:95:bf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:32:42 2025 by rpki-client