Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
File: 8CDLT5tfebnaa0gnutnFSiqAxTE.mft (raw, json)
Hash identifier: SpOUlNIcW16M7nPHcWCvhSl3Q1yOL11hg/bABQ2cvm8=
Subject key identifier: 41:DB:05:C2:01:40:C5:90:F6:34:6D:A8:7D:76:69:24:6C:CD:39:0F
Authority key identifier: F0:20:CB:4F:9B:5F:79:B9:DA:6B:48:27:BA:D9:C5:4A:2A:80:C5:31
Certificate issuer: /CN=f020cb4f9b5f79b9da6b4827bad9c54a2a80c531
Certificate serial: 01969F75C8CC7469A3C87293C6CD05A3C866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
Manifest number: 0DBB
Signing time: Mon 05 May 2025 08:00:18 +0000
Manifest this update: Mon 05 May 2025 08:00:18 +0000
Manifest next update: Tue 06 May 2025 08:00:18 +0000
Files and hashes: 1: 8CDLT5tfebnaa0gnutnFSiqAxTE.crl (hash: x6jNPYInzv7GRQEyGcl9FSXCl3XiGC7XeGxuHCjyrzk=)
2: amkS5SoIvujCi9yce4d8VftUldc.roa (hash: +cELHuiQeJpKMXecyPF27q6ZAbek7zvwZNYTMIlI2SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:75:c8:cc:74:69:a3:c8:72:93:c6:cd:05:a3:c8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f020cb4f9b5f79b9da6b4827bad9c54a2a80c531
Validity
Not Before: May 5 08:00:18 2025 GMT
Not After : May 6 08:00:18 2025 GMT
Subject: CN=41db05c20140c590f6346da87d7669246ccd390f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e0:cd:45:ec:19:cc:2a:f8:31:6b:10:e9:6f:
57:b0:02:90:d8:ab:a2:c9:50:ef:4a:80:04:90:43:
38:b3:7c:56:bc:c0:b0:95:53:a2:4c:81:9b:72:38:
e3:da:be:81:02:c9:82:d0:08:db:63:e0:e9:24:86:
b2:25:4c:09:e6:d7:a4:1b:82:07:24:9b:3a:96:33:
c5:89:93:47:d5:4a:f3:09:24:50:44:b5:e6:0d:ad:
b0:c0:f4:45:c1:4a:34:9d:97:d0:37:ea:74:77:49:
92:8f:22:a7:9e:93:5a:b4:cd:ba:64:8b:9c:dd:b8:
f4:f9:83:df:5b:18:70:86:97:ee:ae:f3:1d:e5:ae:
a7:58:d1:7a:06:68:89:3c:fa:70:5c:8e:71:8f:73:
a4:d5:45:7b:9c:54:dd:3c:14:ad:d2:df:3b:04:8d:
9f:b8:11:fe:c2:2d:a0:4c:73:5f:d0:5a:38:62:80:
94:8b:45:24:6d:89:30:ef:fc:a7:d2:3f:ab:64:5e:
a2:5a:05:60:69:96:cb:47:a0:8a:16:1f:cf:14:72:
9c:1a:b0:e0:f9:d9:88:3f:fe:86:82:8e:cf:e6:50:
90:92:5d:f6:56:4a:3b:f6:fe:2d:b2:e2:7b:d2:48:
5f:06:f5:99:51:00:82:8f:33:7c:36:63:75:ae:cc:
59:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DB:05:C2:01:40:C5:90:F6:34:6D:A8:7D:76:69:24:6C:CD:39:0F
X509v3 Authority Key Identifier:
keyid:F0:20:CB:4F:9B:5F:79:B9:DA:6B:48:27:BA:D9:C5:4A:2A:80:C5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:82:7c:88:3c:e7:e6:18:41:e2:06:03:09:74:e1:6d:db:ba:
b0:cf:f6:7c:25:a2:f8:ff:17:66:a1:1c:4f:68:3c:b9:d0:ae:
7d:ee:37:60:3d:76:81:1d:a7:b5:7d:6d:5e:64:ed:fd:45:04:
68:d0:b2:3a:6d:5c:1c:17:0c:30:32:f9:ff:95:6c:d1:de:14:
4c:e5:cb:8a:5e:65:63:e9:31:c6:de:a9:6d:22:d3:02:03:e0:
7c:5d:7f:e0:0b:86:ba:77:f4:33:96:62:ce:9d:2d:61:a9:b3:
24:b8:c0:28:7a:6b:4e:11:96:ff:f3:31:2f:1f:b9:ef:23:3b:
92:87:30:8a:0e:75:4a:12:b9:69:d6:9d:58:cc:71:45:0c:8a:
c6:0d:34:48:b0:95:5d:af:7e:4f:eb:d8:02:ea:b0:72:68:92:
db:de:f4:5c:63:ce:61:95:5c:1a:d1:68:bc:43:2d:7b:7d:a7:
c2:81:f3:c3:9f:a3:b5:bf:59:e8:88:c5:a2:39:84:8a:20:be:
a1:25:d6:02:51:88:2e:69:c9:5c:c7:37:00:68:11:6a:14:eb:
d5:a9:9a:c0:a0:37:f3:32:7a:e3:22:6d:97:a3:7b:2b:44:27:
56:20:4c:15:23:54:b4:43:7e:cf:24:50:16:44:4a:7d:85:05:
8d:33:14:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:30:29 2025 by rpki-client