Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: xGQKN56fF5ThQIrd93B355oyT1k2s0VanBgtxaY+MF8=
Subject key identifier: 84:A9:69:90:C1:78:B9:69:DD:89:23:87:D0:17:00:03:03:39:9F:B9
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 0196AC560508437C6B2563ECC25774143AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 043B
Signing time: Wed 07 May 2025 20:00:40 +0000
Manifest this update: Wed 07 May 2025 20:00:40 +0000
Manifest next update: Thu 08 May 2025 20:00:40 +0000
Files and hashes: 1: 1-L-JDC3WGOZA5twynjFnC7YtGIo.roa (hash: zVRNbVcQozH8al78fGXQUKnWEO8gs0JQUcFnFpNO9u0=)
2: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: dwJRcTbIUl5AfWC2s1TlD+E3wpvaW5ftu4T6BZ9GHRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:56:05:08:43:7c:6b:25:63:ec:c2:57:74:14:3a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: May 7 20:00:40 2025 GMT
Not After : May 8 20:00:40 2025 GMT
Subject: CN=84a96990c178b969dd892387d017000303399fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:f1:a9:58:2d:a7:20:ac:52:9d:d5:15:88:
2a:b5:78:4d:25:7a:de:10:89:91:42:49:29:e6:c5:
98:e8:99:77:98:a7:85:bc:cc:79:c6:c2:c5:c7:3f:
4d:0a:5c:13:dc:57:ca:de:3a:07:01:5d:18:3d:dc:
b6:42:d9:3e:c0:22:a4:ae:a3:b4:0f:d2:75:54:e8:
aa:42:25:d0:6d:25:f1:27:53:e8:58:b9:d8:96:50:
cd:33:e6:72:9c:cc:12:fd:11:d1:28:17:03:04:d7:
81:89:ff:fc:8a:ea:58:a2:80:db:f8:7f:f9:f5:aa:
23:15:72:7c:8f:29:9e:52:30:11:40:db:b8:f4:66:
26:ea:2d:34:e9:58:cc:84:b6:d9:fe:f1:c6:96:e1:
73:77:26:05:49:cb:a5:14:73:dd:30:74:09:83:f8:
1d:60:c8:0c:f9:a9:47:c0:b1:9f:ec:7f:bd:0a:34:
cc:78:59:42:8f:bb:29:3d:33:80:98:96:f4:81:14:
c9:69:d8:df:51:23:c2:a0:d2:a6:a8:01:29:12:36:
69:15:20:cc:c6:e4:df:e0:be:73:4b:a4:54:17:d4:
22:01:cd:10:47:14:44:36:25:2c:b2:c6:8c:85:69:
58:a7:e9:03:43:59:f7:31:13:b1:72:05:a5:e5:df:
80:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A9:69:90:C1:78:B9:69:DD:89:23:87:D0:17:00:03:03:39:9F:B9
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:72:fb:6a:9b:26:4d:fe:48:72:43:b3:25:fe:95:85:3d:b6:
ae:8a:90:3d:6c:40:67:f5:ff:f4:0b:67:4d:4c:f7:85:e7:fa:
f9:f2:b2:78:ab:2b:da:6c:83:60:93:3a:a4:0d:18:9e:b4:22:
e1:10:c0:2e:af:90:f1:5a:d0:4c:6a:b2:4d:66:62:73:4b:78:
cf:80:46:3b:47:d6:2a:66:69:86:2c:80:cc:2a:74:cc:45:f0:
18:24:1a:86:e9:40:c3:b3:7f:0f:0f:f2:6c:3a:df:59:d9:23:
d4:89:2f:ea:b2:c6:1c:bf:04:8f:82:a5:98:68:2b:3c:42:01:
e2:4a:b7:45:25:33:fb:f3:74:b5:bc:67:c0:b6:2b:6f:6c:ed:
41:0e:b8:65:98:94:55:a4:11:48:c0:93:c5:50:e2:56:26:82:
21:a1:a0:7e:54:ae:65:08:6b:7c:d3:33:1c:99:1f:29:31:57:
90:b5:9e:2d:33:1d:b6:d8:b2:26:53:74:1a:2a:e4:dd:60:54:
2b:15:47:3a:ff:71:a0:57:3f:62:65:18:62:e9:91:0a:ef:a1:
18:3a:f2:eb:e7:86:49:30:ec:b3:f2:52:33:7e:3c:df:a5:c4:
8a:55:7e:72:e6:ef:98:11:22:ff:2a:87:d8:fc:36:7d:98:72:
f9:2d:f2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:05:52 2025 by rpki-client