Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
File: a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json)
Hash identifier: 4xbV2n2uon7EiohkrrSTvLol9vjWDQPRgVFVib0KDfs=
Subject key identifier: DA:ED:5C:90:FC:8D:4E:6B:8E:00:3D:36:DB:CC:C1:44:44:05:7F:B8
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 0196C23976D6DC82BF3539269B443A624656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
Manifest number: 0A8F
Signing time: Mon 12 May 2025 02:01:07 +0000
Manifest this update: Mon 12 May 2025 02:01:07 +0000
Manifest next update: Tue 13 May 2025 02:01:07 +0000
Files and hashes: 1: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: 1DTv3rA9RLY8qryayOjA2z+HRK2cJPPUu9dXk7oQwmM=)
2: ww5W_AzyvORyhz7R6e4M2kGu004.roa (hash: h+p5BWiNgVQT+Ps96Xby3wyi4OgT8Zpuq9hDEAln8lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:76:d6:dc:82:bf:35:39:26:9b:44:3a:62:46:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: May 12 02:01:07 2025 GMT
Not After : May 13 02:01:07 2025 GMT
Subject: CN=daed5c90fc8d4e6b8e003d36dbccc14444057fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:94:80:6e:40:e1:de:d8:4d:f1:e8:36:6f:
3c:af:dd:5e:e1:e5:89:fb:96:b0:20:57:a4:d5:c5:
9d:2a:33:25:72:d5:f9:81:d9:40:99:1f:6e:d0:d2:
68:1d:0a:00:f9:d4:2a:9a:e4:e4:a0:23:9b:b0:02:
7b:fc:ae:fe:25:c1:f9:85:a6:35:77:f4:b6:85:de:
be:5a:2d:7e:04:f8:1a:e7:bb:9f:f7:85:db:99:1a:
ee:9d:4e:5f:84:f8:b3:00:ed:c4:92:c9:0a:ff:43:
cc:ca:26:97:f2:2f:fa:25:bd:70:00:9a:23:27:e0:
7f:3b:9c:6e:89:48:83:17:8e:b3:18:f3:e5:4a:54:
6f:60:87:7e:7f:cf:cd:4e:b5:34:65:52:62:a3:13:
82:fc:6b:fe:81:f4:0f:34:b8:a2:7f:f5:73:ce:7a:
36:73:be:f6:6a:cb:4d:a8:cb:c7:e1:2d:67:14:89:
43:61:7c:88:72:da:1b:f1:84:9a:eb:88:16:96:53:
1e:48:08:03:ea:d5:0e:25:15:6a:86:27:36:46:da:
e7:ca:ba:17:a7:1b:a4:dd:dd:ba:26:67:ff:33:03:
53:78:df:7d:ad:2b:cf:93:5b:ab:ca:15:aa:f7:35:
64:7f:1f:06:a4:fa:e7:eb:0d:fc:7b:b8:51:b6:f3:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:ED:5C:90:FC:8D:4E:6B:8E:00:3D:36:DB:CC:C1:44:44:05:7F:B8
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:de:9c:e8:15:db:7d:ac:d5:a1:c0:82:7d:5a:68:41:58:4e:
4c:c5:23:5e:5b:5c:0c:13:e5:08:1e:0b:c0:bf:8c:41:af:2e:
5a:f7:22:34:72:3d:d4:c2:cf:5f:8f:ba:f6:38:b3:e4:a0:6d:
07:cb:58:d5:56:2a:ae:ed:d4:5d:1e:e4:f6:08:b9:3d:a5:fc:
7b:b8:ee:49:16:8a:89:dd:c2:3e:90:a9:7e:1d:8b:a2:a8:21:
51:55:5b:3c:0c:8e:c7:26:15:90:f9:ff:db:37:5a:fd:f1:f7:
e6:c5:18:ff:a4:99:b3:be:3c:2d:4f:da:6e:f6:c0:0c:aa:f3:
f9:58:be:dc:53:bf:fc:c1:62:f4:73:3c:df:ff:bd:7d:a0:70:
c1:e3:0d:39:7a:d9:47:dd:d7:50:9e:27:d8:ee:df:41:dd:1f:
85:09:dc:65:0a:2d:db:eb:52:08:e7:ae:a5:e8:28:f1:5c:be:
85:9f:5c:66:a8:28:b1:13:9f:29:45:ee:27:35:91:1b:e4:fd:
43:97:0a:05:1e:48:13:fe:6d:b3:a0:66:62:49:ea:1c:6d:56:
dd:00:59:18:be:e6:2a:35:54:c4:9b:6f:e6:f4:da:a7:93:de:
9a:f5:82:95:3f:d3:d3:a9:3d:ec:d9:36:97:c9:f9:ad:fc:b1:
ba:ef:c1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:47:52 2025 by rpki-client