Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
File: 8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json)
Hash identifier: iXGAg8E5cUGX0sbxu0S4BJzN4kHdw8K41dKE1v09Mig=
Subject key identifier: 80:19:83:4D:A5:09:16:CB:8E:1C:9B:34:EA:91:56:24:FB:0A:13:5B
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial: 0196C04A7511BB53378D6C53C26BC085E405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
Manifest number: 09CB
Signing time: Sun 11 May 2025 17:00:27 +0000
Manifest this update: Sun 11 May 2025 17:00:27 +0000
Manifest next update: Mon 12 May 2025 17:00:27 +0000
Files and hashes: 1: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: HfiBd68pQ0G8qj0oV2mtx+DEslMPZLRRrecJwf69xds=)
2: TwUAmEwQxO2jeeE0IG7nOUuBRU8.roa (hash: 5uZF7JHC6Cu/tuWa9kusO7lA0+dh5OGQEqs1E5VZ/5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:75:11:bb:53:37:8d:6c:53:c2:6b:c0:85:e4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Validity
Not Before: May 11 17:00:27 2025 GMT
Not After : May 12 17:00:27 2025 GMT
Subject: CN=8019834da50916cb8e1c9b34ea915624fb0a135b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:00:02:56:dc:e1:a3:f1:b1:8f:fa:96:4f:
ef:50:0d:d1:56:02:41:14:44:94:0e:dd:b6:e6:20:
f2:fc:31:64:d4:8b:55:40:d9:72:6c:6a:21:08:e5:
95:11:4d:b7:33:49:d3:93:61:d0:32:ac:bc:89:d0:
20:b8:5d:ae:21:40:82:b4:e8:65:01:a5:24:af:7b:
26:a4:0e:1e:7e:3b:01:02:cb:2b:8b:45:bd:f9:a8:
57:e8:c4:25:78:9e:29:13:de:42:ae:09:98:eb:b2:
df:6e:2d:ba:96:90:1a:2f:99:df:85:0d:12:2e:26:
04:ca:a0:40:59:87:b4:dc:c3:65:cf:3a:4d:cb:f0:
e9:09:a6:24:2a:f4:c4:bf:a5:06:70:c9:36:a3:3c:
1f:c6:97:15:60:42:33:6e:a3:0e:a3:66:8f:00:f2:
92:52:7d:60:64:39:b2:8b:2a:47:85:4d:91:62:0d:
06:d4:f7:5a:2b:c3:9a:29:be:4c:b1:fd:01:33:a8:
ea:c7:93:f4:48:f5:0f:56:ba:e5:cf:b1:0b:b8:31:
b6:d0:29:79:88:9c:62:65:12:0f:43:9a:44:88:4f:
a0:29:70:cd:df:9e:77:67:bf:95:e6:64:7c:32:d6:
8b:ef:e9:c6:19:7c:4b:17:06:b1:50:fb:52:3a:f7:
d9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:19:83:4D:A5:09:16:CB:8E:1C:9B:34:EA:91:56:24:FB:0A:13:5B
X509v3 Authority Key Identifier:
keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bc:d8:e1:61:16:9e:1e:84:6f:f2:58:74:d4:44:f4:e9:81:
6e:da:be:40:bf:f0:ab:19:a4:d2:46:4d:e6:72:41:36:3b:f2:
4c:7d:cf:44:b0:11:c3:01:cd:c4:ea:60:b2:3e:36:75:e3:c7:
01:69:25:5d:05:f0:f5:b4:67:cd:4d:b5:ed:9b:66:34:1c:17:
97:b1:96:2d:4a:3b:be:85:de:4d:91:78:b4:3c:30:de:40:47:
02:ea:62:64:9f:e1:2b:00:99:a1:39:bc:eb:cb:57:2f:e4:f8:
4c:42:49:16:5f:b2:b3:c3:60:95:aa:a0:d8:f3:31:68:b4:22:
3f:ee:2c:65:bf:7a:98:44:0e:40:21:3c:9f:28:3b:12:db:92:
ec:08:2d:76:92:2c:ae:dc:42:06:a3:1b:99:4e:84:47:11:f0:
e6:2b:45:60:ba:32:40:df:a0:09:75:d7:21:e1:c4:d4:67:c9:
07:f1:47:cb:df:b4:1d:b1:3e:b4:80:16:14:74:50:22:27:c2:
1b:1c:3c:0a:33:11:26:91:ae:60:ac:0a:32:3a:62:dc:c0:45:
df:a7:c1:38:6b:4f:fa:62:6f:fd:2b:c2:8e:84:75:9f:c7:e9:
c4:f1:aa:35:9d:d3:5b:29:95:8d:e2:78:57:12:6f:2c:ad:7d:
7c:85:27:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:21:43 2025 by rpki-client