Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier: kpR3NxoP/89wRgfkCB+Q9dCuGExl/KmPfx15JVA+mmk=
Subject key identifier: 22:C4:F9:4B:3C:10:E0:8A:83:0E:EB:C4:3F:A7:0A:B7:D8:4B:0F:52
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial: 0196C01416620874D3C003A0BAD6B969A91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 16:01:04 +0000
Manifest this update: Sun 11 May 2025 16:01:04 +0000
Manifest next update: Mon 12 May 2025 16:01:04 +0000
Files and hashes: 1: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: Lo5SvynTtkVGSMWB0d4ojE0nBvHmGwAgQpykleAGjEc=)
2: Uq0vloXHdFb2aIE_oUN66H2BMxU.roa (hash: 8OMhbaYnopF2Asv1tjCQ758nxv0+wParcC98envOi54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:14:16:62:08:74:d3:c0:03:a0:ba:d6:b9:69:a9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Validity
Not Before: May 11 16:01:04 2025 GMT
Not After : May 12 16:01:04 2025 GMT
Subject: CN=22c4f94b3c10e08a830eebc43fa70ab7d84b0f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:56:e4:67:96:49:2f:d1:4b:e9:46:90:b3:0e:
5e:29:d7:a2:9b:68:f6:e0:5d:b5:b8:02:24:ae:3c:
d9:81:9a:3d:6a:64:b6:7b:fb:1d:73:c1:63:58:a7:
1b:98:35:9b:8f:0c:9c:1c:67:04:ee:4e:6d:a7:6e:
a9:58:12:7b:2b:11:52:d9:c7:5d:cb:d0:05:96:1b:
71:99:34:1c:b6:78:97:e6:aa:c9:2f:f4:d8:9e:80:
bb:78:84:e2:5f:55:1c:d2:70:f7:89:c3:4b:69:c9:
da:00:31:76:47:ec:47:65:84:eb:63:2f:aa:ff:64:
aa:82:04:06:ed:2d:bf:d2:30:d2:f4:17:fe:75:a2:
d2:39:7e:7d:8c:fe:bd:ce:7d:41:a1:ff:51:9e:14:
ea:c6:82:13:77:da:f0:61:0a:59:c6:dc:31:4f:ce:
cd:ce:55:9a:aa:84:31:47:f3:4e:a9:95:5a:da:8c:
9a:46:b3:0b:bf:55:ca:34:c8:af:7b:aa:90:74:c6:
39:20:e5:9a:97:8b:8e:f1:b1:3e:57:32:b5:57:2e:
01:15:9f:a0:08:a2:83:33:0c:92:ff:09:88:90:19:
66:80:55:29:72:74:3d:9a:85:ec:b7:26:0a:e1:66:
89:5d:db:25:b5:90:41:13:19:34:d5:e0:75:64:da:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C4:F9:4B:3C:10:E0:8A:83:0E:EB:C4:3F:A7:0A:B7:D8:4B:0F:52
X509v3 Authority Key Identifier:
keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:82:e1:7b:ab:aa:27:30:45:0e:d8:b9:0a:0b:b2:95:7c:94:
42:4f:e7:a4:b5:a1:63:44:14:f6:5f:85:ba:97:9b:61:28:56:
81:5b:cd:a2:05:31:9f:24:c8:5d:28:d1:44:41:21:a6:1a:8e:
3e:39:75:57:40:95:ac:55:8c:fc:d5:7f:db:68:7d:52:e2:97:
f9:23:b3:a7:69:80:f8:fd:d7:39:55:f6:4f:45:1c:5d:ed:d6:
37:d9:c4:1d:69:5d:a5:b1:bc:d3:cc:7a:d4:6b:da:d6:5d:15:
4a:fc:22:dc:fe:d7:9e:3d:6e:ff:49:47:2b:d8:d2:86:42:d9:
87:19:6c:8f:01:0a:5b:e0:16:6b:28:20:6a:5c:36:82:ce:be:
bf:8a:27:cf:3d:cb:f4:9b:cd:63:40:14:34:1f:eb:ac:e6:74:
c0:f5:c4:f2:c5:ba:a0:c0:2f:18:c5:21:56:94:86:98:af:1f:
3a:4d:d2:e4:0e:1e:02:ae:f9:84:78:c2:ec:28:46:0b:ef:79:
9e:cb:d4:f2:fd:c4:8a:41:1b:5e:fb:03:6f:b6:43:90:c5:5b:
07:49:0c:59:89:34:ec:24:5b:85:a9:37:6b:c1:48:36:f9:ec:
0a:73:60:7c:51:cf:47:55:a4:9d:d8:76:c3:4b:0f:59:13:72:
b7:7b:91:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:19:26 2025 by rpki-client