Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
File: 8gLwqonAZ9ZjOLTVnSBSujmplEs.mft (raw, json)
Hash identifier: 3GfUbuuIVQnthgicDDwVKBYdWDpzA4hxtah6+cMCNr4=
Subject key identifier: BA:5F:89:FC:81:B8:B8:CB:E7:5A:01:01:E6:2D:19:C1:15:FE:90:74
Authority key identifier: F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
Certificate issuer: /CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Certificate serial: 0196CE3D40493034D154D3EA134033A83D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
Manifest number: 049F
Signing time: Wed 14 May 2025 10:00:42 +0000
Manifest this update: Wed 14 May 2025 10:00:42 +0000
Manifest next update: Thu 15 May 2025 10:00:42 +0000
Files and hashes: 1: 8gLwqonAZ9ZjOLTVnSBSujmplEs.crl (hash: ZXSIAhT2sDYIg+9HJm6cZpWBX8QpZjHpGqt1SKGzSp0=)
2: gxY3cqQ9AtbDjrB_-otpHb6Irb0.roa (hash: LD3l5OVkY9IZSD+ZJZMYqJis4oBCr+KMHwZEJzzuk0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:3d:40:49:30:34:d1:54:d3:ea:13:40:33:a8:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f202f0aa89c067d66338b4d59d2052ba39a9944b
Validity
Not Before: May 14 10:00:42 2025 GMT
Not After : May 15 10:00:42 2025 GMT
Subject: CN=ba5f89fc81b8b8cbe75a0101e62d19c115fe9074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:05:99:8c:5d:da:5a:7c:38:75:54:f0:ae:
e1:bd:9a:1c:11:16:41:68:43:e0:22:28:f5:61:2a:
b0:fb:1b:0f:10:ff:67:bf:8d:c7:e5:da:46:7a:f6:
db:2b:74:e0:f1:d2:78:ca:02:6a:62:b3:84:1d:26:
55:b9:b4:f2:b2:a4:44:48:90:5f:64:93:50:ff:98:
a0:7b:39:98:41:12:95:7b:d5:73:6a:41:b9:a1:0d:
2c:10:d1:7f:ca:16:f2:f5:84:e7:45:61:d8:72:8c:
9c:63:28:46:61:cd:08:a9:b7:7d:d8:ef:3f:44:26:
20:2e:b9:4a:eb:25:f4:35:27:f7:ba:44:1e:70:84:
79:f9:24:97:58:65:9c:5b:15:53:fe:cf:cf:69:5a:
0f:9f:c2:17:46:e9:10:b4:9b:e4:a3:d7:6d:31:4f:
4e:17:d8:b4:82:9b:bf:97:5a:4c:f9:15:bc:46:c5:
8f:58:32:6a:ae:27:7a:ed:94:5a:a6:b8:4f:8e:d1:
36:0e:97:58:30:24:7f:01:74:62:35:52:f2:4c:4d:
e0:ef:58:ce:1b:7b:56:fb:9b:c5:ba:b3:5b:73:8c:
38:85:d0:3c:22:93:06:59:0f:d7:4f:8c:d5:9b:23:
b4:bf:8b:3a:fa:8a:40:9c:12:be:6e:37:49:da:74:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5F:89:FC:81:B8:B8:CB:E7:5A:01:01:E6:2D:19:C1:15:FE:90:74
X509v3 Authority Key Identifier:
keyid:F2:02:F0:AA:89:C0:67:D6:63:38:B4:D5:9D:20:52:BA:39:A9:94:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gLwqonAZ9ZjOLTVnSBSujmplEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8769f1-b80b-4886-bb0b-f625700e8a90/1/8gLwqonAZ9ZjOLTVnSBSujmplEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:55:91:79:46:d4:7e:c9:e1:b1:2e:58:f6:e6:13:2f:7b:69:
be:c8:23:d5:ce:a8:b1:7a:fd:22:2b:9a:61:15:4f:10:a7:e6:
3f:ef:32:e1:05:57:d4:7f:27:ed:65:82:88:4d:b4:aa:a4:56:
42:49:82:4d:4d:67:50:46:5c:9f:b7:f2:c0:60:86:62:c5:bf:
3c:db:4d:6a:8a:0d:a6:c7:86:46:0e:51:f0:35:3e:38:75:e3:
0a:1f:15:ac:97:6b:14:46:bd:ac:fc:77:fa:5e:c0:3c:83:7d:
10:53:26:32:b9:67:8d:9f:69:6e:a0:29:50:fd:ad:54:0a:37:
83:bd:a9:e1:b9:7c:a2:3c:a7:91:e5:ba:76:a3:ea:9d:f2:43:
6c:7b:b7:da:27:ea:9b:97:9a:b7:9b:bc:56:72:32:ed:f4:cd:
8d:96:89:69:1f:f2:a4:6e:9e:e7:e0:ff:be:02:c3:7c:0a:f3:
33:e7:45:d3:04:ef:72:98:ed:e7:e9:d8:93:44:dc:e5:89:71:
b5:6d:db:e5:af:9c:d2:76:d2:48:75:88:db:ac:21:30:29:de:
21:f4:94:74:3c:77:6a:e6:20:d3:21:42:fe:4a:ca:d9:32:f4:
f1:57:5b:e3:39:48:f9:65:bd:11:c7:0f:e2:66:28:26:3d:74:
5f:b1:a6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:38:27 2025 by rpki-client