Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
File: 8R8omgChsRW386TRuAEb-Q0aL3I.mft (raw, json)
Hash identifier: nFKP+oqP2jjEuQqjDoPR7Xiwx5U6qJKEKPWtX4JFEkA=
Subject key identifier: 19:D7:22:EF:1A:BC:3A:1B:D6:9B:41:9A:EF:F9:BC:0C:8C:C7:47:7B
Authority key identifier: F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72
Certificate issuer: /CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72
Certificate serial: 0196BB91D30E05AFDC79EC1EF81C3B116A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
Manifest number: 0902
Signing time: Sat 10 May 2025 19:00:18 +0000
Manifest this update: Sat 10 May 2025 19:00:18 +0000
Manifest next update: Sun 11 May 2025 19:00:18 +0000
Files and hashes: 1: 8R8omgChsRW386TRuAEb-Q0aL3I.crl (hash: nXgL34C92rZidVuDQXAulhWA6YbFJkfdjhAYzSMTFJs=)
2: tRxgXr9YQwTbEh2NqyL9M68npkQ.roa (hash: QcuVE9jeWpJsMM52+9+6n7mFIjZuC9lNEDcWkB7O3NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:91:d3:0e:05:af:dc:79:ec:1e:f8:1c:3b:11:6a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72
Validity
Not Before: May 10 19:00:18 2025 GMT
Not After : May 11 19:00:18 2025 GMT
Subject: CN=19d722ef1abc3a1bd69b419aeff9bc0c8cc7477b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:cb:8d:7e:c1:67:b1:b8:a1:42:a8:60:ac:
b9:97:86:33:54:17:c7:db:20:fa:e0:ab:94:b3:be:
bb:46:b8:ef:bd:33:85:3f:6a:5f:8a:0b:d2:ee:38:
e1:97:ad:8c:84:d5:a7:e6:82:ce:61:fc:8f:98:bc:
fd:01:bf:87:5d:14:48:3b:63:b1:25:7f:43:36:bc:
1e:d5:d3:9a:cb:97:41:4b:6a:46:76:84:d0:9c:c2:
ef:0e:28:29:ef:07:84:26:7d:3a:ae:9c:1b:48:6b:
66:ba:57:dd:a9:2b:29:90:e5:6a:6f:1a:fd:58:18:
e3:78:07:b3:64:89:b9:ad:e3:ed:1b:b4:83:dc:cf:
8b:4e:44:93:b0:57:d0:91:22:31:cb:54:34:2b:21:
7b:2e:dc:f2:87:27:d4:ba:f1:e7:f7:f0:ba:3f:3e:
3c:29:c6:0c:5a:0b:e1:41:58:50:2a:79:5a:85:4f:
74:38:89:08:6b:ab:5d:c4:c0:10:28:7b:fd:bf:31:
15:93:e4:e8:1b:35:78:dd:04:c2:92:a9:16:05:be:
01:c6:62:6f:ad:38:74:c1:f2:17:e6:ed:4c:99:e8:
1c:b1:46:53:47:ee:af:c1:29:a6:ed:0f:ba:c5:2e:
4f:c4:49:e2:e4:61:10:ae:40:d6:36:22:22:8a:d9:
73:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D7:22:EF:1A:BC:3A:1B:D6:9B:41:9A:EF:F9:BC:0C:8C:C7:47:7B
X509v3 Authority Key Identifier:
keyid:F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:88:7f:64:3f:1d:3d:49:26:cc:22:0d:62:9d:13:14:9c:2a:
06:e3:96:ee:7a:e1:14:ed:21:28:7b:2f:bb:66:b2:2d:a8:b6:
3e:cb:c5:c9:7c:52:eb:30:15:04:68:65:16:5a:ee:1f:b0:bf:
62:72:b3:d9:cd:0d:bf:f4:8d:f7:0b:22:c0:a1:b7:1e:9b:a4:
d7:16:10:f8:23:61:f2:c8:3f:75:07:bb:70:95:46:5e:91:24:
be:37:a6:c5:69:55:4e:3a:a7:cf:17:81:6e:a7:81:95:f6:c6:
ee:3f:52:26:46:42:80:a2:2d:4b:89:b9:95:18:92:bd:a9:30:
7f:c0:84:e9:1c:b4:34:bd:88:f0:3a:c7:3d:53:9b:20:56:2e:
dc:c9:2e:d8:c2:4c:a6:0a:dd:d0:57:06:20:2b:26:8e:71:0e:
d5:10:ba:6d:37:a7:e4:93:69:1d:58:e9:78:03:56:45:df:d9:
e9:82:ff:91:28:e8:c8:f5:a2:f4:d7:f4:bc:59:2d:68:35:a2:
90:0c:85:c8:5a:4c:1b:00:9c:d2:ce:b0:c1:05:87:28:4c:04:
66:63:a0:e9:4d:d8:ac:1b:59:8e:71:69:07:f7:21:00:69:ed:
c6:60:aa:8e:e8:57:f8:b5:69:dc:81:90:b5:15:6f:f5:6e:01:
71:88:a6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:17:33 2025 by rpki-client