Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
File: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft (raw, json)
Hash identifier: 0daDecXfacMxB75qeHVcpDf5UP84nKK73S6fkqSbHww=
Subject key identifier: 38:03:88:B4:8B:76:24:10:12:D2:CF:6A:21:9D:9E:0C:A5:E8:74:85
Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
Certificate issuer: /CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Certificate serial: 01969DF5B452DD91602D1A72EE05CA1701C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 01:00:47 +0000
Manifest this update: Mon 05 May 2025 01:00:47 +0000
Manifest next update: Tue 06 May 2025 01:00:47 +0000
Files and hashes: 1: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl (hash: 3cRg/qFLoP8x27uZOGD4QiwhSK05PW/87iIJT7gJ0/w=)
2: eGF4PY_wgfKdtXUANezmT92NTGM.roa (hash: 05Pk1BDJWHJV0SJRPVmkmFIh7w5FFlCRro3lX7bPWNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:b4:52:dd:91:60:2d:1a:72:ee:05:ca:17:01:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Validity
Not Before: May 5 01:00:47 2025 GMT
Not After : May 6 01:00:47 2025 GMT
Subject: CN=380388b48b76241012d2cf6a219d9e0ca5e87485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d6:c5:da:11:e5:9f:47:38:ab:b4:d7:d7:b0:
9b:ba:4c:ae:c8:b1:4d:86:ad:f7:88:c3:fe:af:4a:
75:cd:76:36:2a:78:a3:a2:fc:3a:2a:ec:19:ae:d4:
b0:fb:d2:84:28:cc:a0:ce:23:b2:5e:ee:dc:de:1d:
9e:56:8f:43:57:ca:7c:ad:f4:4e:bf:b6:06:b4:81:
b4:78:bf:47:0e:47:5b:b8:b5:82:35:c4:8f:bf:ff:
d8:19:cf:75:69:37:89:42:25:21:7d:d0:1f:b5:81:
89:e9:89:58:ce:44:c2:c8:e4:cc:85:ba:08:e2:e5:
60:1b:61:7b:e2:13:19:1a:1b:18:89:d2:c4:a3:df:
88:cf:52:0d:64:d6:83:2d:0f:6a:65:85:83:9b:5b:
63:22:c3:74:d7:f2:4f:5b:80:c9:d5:b6:eb:3f:83:
68:56:14:26:f8:3e:d1:03:0c:df:16:c0:83:9f:be:
0a:fe:0e:3d:1e:75:f6:08:08:b9:0c:42:f3:a6:93:
c1:80:8c:b3:b1:a1:91:52:99:97:0b:51:33:d0:0a:
70:25:32:f2:94:7a:5e:35:0d:54:dc:fd:70:59:03:
ba:17:8d:b5:38:7e:06:48:1e:df:a1:9b:22:e1:2b:
63:d4:ad:44:d2:cb:ca:0e:0f:20:57:08:76:60:77:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:03:88:B4:8B:76:24:10:12:D2:CF:6A:21:9D:9E:0C:A5:E8:74:85
X509v3 Authority Key Identifier:
keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:41:bc:07:50:3e:14:61:19:1d:fb:55:1c:c9:bd:51:59:b6:
e0:ac:63:d6:b8:7a:42:87:17:de:5f:13:11:63:d4:f8:88:f7:
58:df:db:39:17:ed:73:46:c9:c6:3f:a5:f2:fe:6b:ed:05:ea:
6a:be:b3:60:d5:98:15:88:54:f9:e6:bd:f6:42:16:5b:46:b2:
06:7a:1f:68:6d:3d:ba:ec:bd:5a:c0:9d:80:a2:03:5b:ad:53:
58:f8:c1:de:3a:5b:dd:ba:a0:36:81:d7:f6:c3:84:80:86:ec:
da:7c:75:69:c2:16:c2:8e:2a:25:53:04:c6:71:51:35:61:3f:
fc:c1:a0:9b:4d:0d:4d:e8:1b:d1:a4:db:89:01:68:a2:ce:bf:
35:19:cc:51:b3:12:ee:24:27:cf:45:ab:71:67:66:8f:ee:4a:
9d:2b:a2:4c:65:5f:d8:05:c2:9c:bc:db:80:c3:96:a7:af:93:
e5:9f:d6:56:b2:76:4c:f0:e9:ab:92:28:be:31:b7:78:33:1d:
8e:68:0e:f9:cd:52:70:dc:8d:20:29:5b:f3:df:37:8a:3f:94:
7e:10:fb:da:37:05:14:87:09:4c:e1:6a:dc:b0:29:7f:9c:89:
97:7c:32:ef:6b:82:46:7f:a1:73:c2:7c:5e:cb:58:4f:86:85:
ba:d5:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:31 2025 by rpki-client