Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
File: 8jJYqmuD7J-3vpZsYmqRZngcfzs.mft (raw, json)
Hash identifier: 2jvSl1kqg7utpfWq4MWCLL3RWpcyVD/dYGCNNaJpEi0=
Subject key identifier: B4:31:17:C5:DB:79:47:FB:11:7F:AA:4D:18:57:96:B3:58:FC:18:F3
Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Certificate serial: 0196BB5AE49DAB716918F8B104A213A6B6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
Manifest number: 14C4
Signing time: Sat 10 May 2025 18:00:18 +0000
Manifest this update: Sat 10 May 2025 18:00:18 +0000
Manifest next update: Sun 11 May 2025 18:00:18 +0000
Files and hashes: 1: 1-wkMXSOgCsAbfcTJoQ9M_9mEa8U.roa (hash: ChEU1antJRBwFOEOOm1ILlDCVAljbS+GMt59ceUbKBY=)
2: 8jJYqmuD7J-3vpZsYmqRZngcfzs.crl (hash: MGMdC47mtXKSasVHUc+vmvu9hbQUJZusV3j/jvMqboI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5a:e4:9d:ab:71:69:18:f8:b1:04:a2:13:a6:b6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b
Validity
Not Before: May 10 18:00:18 2025 GMT
Not After : May 11 18:00:18 2025 GMT
Subject: CN=b43117c5db7947fb117faa4d185796b358fc18f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:90:b7:16:4c:d2:56:d7:98:ee:f1:d0:11:
b4:f3:21:94:e9:b8:12:b7:10:49:57:c5:56:f3:cc:
2e:8b:fa:d4:e8:d8:c6:23:b4:d9:e8:b1:de:65:43:
ff:40:78:e1:a1:d8:47:18:1d:b0:c1:95:56:ef:15:
f8:c2:9c:b2:78:92:0c:2f:3f:31:52:35:10:c4:dd:
50:02:43:d8:ac:1c:cd:9b:68:a8:e9:e0:41:b1:0d:
40:59:02:65:1f:08:6a:b6:dd:3f:66:b8:8f:44:d7:
15:60:5a:2f:b7:2c:07:3b:fe:38:1f:c0:1f:33:07:
b3:64:4d:ea:38:8d:7b:db:71:70:e0:3a:ea:2d:93:
c1:50:1b:18:6d:7a:f5:e7:91:70:b6:55:24:c9:25:
8c:fa:75:e9:1f:19:74:5f:81:2b:ec:dc:80:9e:18:
e0:34:66:81:9c:a3:cb:dc:ae:8e:f6:3f:f5:18:88:
96:b6:7e:68:53:77:72:e9:ae:42:da:09:70:60:b0:
98:55:97:eb:1b:59:ed:7e:30:d0:28:af:26:78:0b:
97:25:57:72:35:ee:0d:41:28:ce:55:8a:eb:56:9f:
e2:02:ac:42:d9:62:c8:dd:cf:c0:71:81:35:41:76:
37:02:aa:64:0d:dc:83:59:cf:1c:62:38:3e:fe:55:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:31:17:C5:DB:79:47:FB:11:7F:AA:4D:18:57:96:B3:58:FC:18:F3
X509v3 Authority Key Identifier:
keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5c:39:06:6a:ae:d3:53:3c:26:9b:a3:71:70:8f:fc:16:a0:
32:05:ca:41:81:b2:64:a0:9c:d1:4d:33:05:de:4f:55:17:2f:
09:5c:56:da:41:c4:42:51:ca:d9:44:be:2f:4a:c0:8a:15:8f:
be:30:56:5e:8e:a4:56:fa:bb:2c:b2:5e:d0:42:35:f6:f5:dc:
aa:71:40:1a:12:45:23:1f:a0:f5:2a:bb:e0:11:17:b6:e7:a7:
24:76:b7:e1:de:fb:ba:b4:aa:5e:14:c2:f4:4f:c1:91:78:1b:
22:b2:c9:bc:e1:91:a0:e8:00:29:b0:55:e6:b7:55:34:13:fd:
37:a7:aa:2b:03:b0:e5:26:80:f1:9e:9b:8f:5c:7b:aa:b3:57:
31:53:08:6b:69:9d:b7:04:9a:88:28:88:f5:f4:09:fa:a9:e3:
5f:de:ca:99:0c:ce:e4:1c:95:99:bc:ef:c8:fd:de:2a:c4:3f:
c7:01:2a:66:25:18:4a:1f:d4:40:39:0f:9d:25:7f:1a:f6:72:
6b:45:5b:b7:c5:3c:47:df:a7:1d:8e:14:11:15:80:3c:f1:bb:
a5:e1:9f:20:de:5d:53:ef:dd:52:a6:db:81:f9:09:fe:95:c7:
cd:ec:ed:2c:cd:d7:c7:3f:75:f7:9a:12:e2:51:ce:32:ac:7f:
10:a1:63:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:16:13 2025 by rpki-client