Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
File: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft (raw, json)
Hash identifier: k/dWzk2h1dQGX6cC4Do2zMFTTg4lfSCrE+8KBomKyhw=
Subject key identifier: 98:6E:C1:62:13:87:ED:46:6F:22:FC:7E:11:21:08:07:2A:D3:F4:35
Authority key identifier: F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
Certificate issuer: /CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Certificate serial: 01969FE3D7C84526D380D9B65DB7D925212A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
Manifest number: 04A4
Signing time: Mon 05 May 2025 10:00:31 +0000
Manifest this update: Mon 05 May 2025 10:00:31 +0000
Manifest next update: Tue 06 May 2025 10:00:31 +0000
Files and hashes: 1: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl (hash: uTy1OZGQgyWzOdgrtM89sAO61xis+4F0JlqBzjFymTM=)
2: 9LD-hrLWBwUSPOko1WfMuzpukWE.roa (hash: IlW9fI4rY7r7GVZoUndhpUDRIk8UJ5M6N9Zdn/noO1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e3:d7:c8:45:26:d3:80:d9:b6:5d:b7:d9:25:21:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Validity
Not Before: May 5 10:00:31 2025 GMT
Not After : May 6 10:00:31 2025 GMT
Subject: CN=986ec1621387ed466f22fc7e112108072ad3f435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3d:6c:a2:f2:db:ae:ab:63:77:21:4c:76:d5:
04:eb:7c:17:ec:c2:aa:53:52:7c:25:89:9f:7f:bd:
a2:f2:73:0e:0d:83:46:a7:cf:2a:7a:a6:05:98:bd:
fe:c9:83:58:28:7f:f3:54:5b:cc:99:45:9a:cd:7f:
f5:d8:16:15:4e:8f:77:5f:9b:87:8a:14:a4:e2:a2:
f4:42:a8:0f:54:50:5b:b1:c8:b8:fc:99:a4:61:1e:
7a:22:4e:20:be:1c:0d:7f:54:58:05:67:0a:70:d6:
04:05:a8:3f:24:43:7e:71:43:69:87:90:f4:c4:e1:
7b:be:3b:1b:e3:bc:9b:7d:fc:f1:af:0d:48:90:e0:
f8:7b:23:ba:e1:8e:7b:d0:63:59:7a:2b:c8:f2:40:
43:fc:b4:2d:e2:a1:9e:b3:95:01:aa:b2:92:b2:12:
5d:b2:c0:da:b6:1a:15:8a:5d:fb:3f:36:d7:e1:08:
56:d8:f8:50:ce:b6:61:97:f7:df:58:5e:54:43:6a:
6f:16:fa:02:67:3b:dc:50:4d:2a:9a:ba:90:e2:1f:
65:ca:52:4d:0b:26:54:bb:a3:e4:2b:9c:b6:66:09:
f7:1f:e2:aa:24:5b:bc:dd:58:a4:1d:b3:00:02:52:
91:11:f8:64:6e:04:e1:f5:d3:b0:76:b7:b6:f0:6b:
69:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6E:C1:62:13:87:ED:46:6F:22:FC:7E:11:21:08:07:2A:D3:F4:35
X509v3 Authority Key Identifier:
keyid:F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0f:e7:b9:ac:7e:5d:bd:29:c6:36:4c:18:8b:08:81:8d:ef:
09:da:4b:58:2c:80:fe:12:d3:61:16:1a:47:72:be:73:ee:70:
92:9e:e5:7e:85:6f:29:b0:76:4a:1a:83:eb:5f:8c:58:60:fd:
9d:85:f2:a3:25:fa:b4:f1:87:57:8a:9d:21:13:67:25:44:d1:
a0:6f:d1:59:87:cf:b4:0c:6f:dd:b6:55:a1:42:ea:46:29:88:
ca:0d:e3:6e:19:9e:43:af:00:25:66:67:34:71:93:09:36:4b:
d2:6b:fd:d1:cd:1f:09:d4:8b:e9:2f:ac:25:7f:95:43:13:5e:
01:68:c0:7b:d8:ac:16:e6:e4:31:3f:f6:55:72:5b:70:91:8f:
df:9f:11:e2:5f:71:fc:eb:cc:5e:1f:55:00:af:85:58:af:3d:
4d:02:bf:6b:4a:25:63:e5:9a:d1:14:fb:59:d5:8c:18:61:18:
1b:59:32:84:c0:7b:a4:de:fc:01:ba:f6:b4:1d:11:b9:80:bf:
d0:57:8f:57:12:21:29:30:4e:58:7f:b7:3a:16:2e:98:7e:f0:
d6:ea:17:29:b6:d4:e9:9e:a5:ec:af:5a:a4:c0:ab:19:1e:7d:
4f:67:b8:61:09:5e:14:28:18:67:c9:87:84:10:9c:01:bd:4d:
32:0c:8b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:35:33 2025 by rpki-client