Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
File: 8hWid5SXEbLAHNxmnkDhcTlYVbs.mft (raw, json)
Hash identifier: 6MWEfK4tpaKFDbXM5NRXT+XrHXLC2wKnfC+hW1LrXZw=
Subject key identifier: F0:6E:21:01:94:6E:D1:70:BD:AF:BF:07:5E:D2:93:4E:DC:29:A8:AC
Authority key identifier: F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
Certificate issuer: /CN=f215a277949711b2c01cdc669e40e171395855bb
Certificate serial: 0196A72F8F691505FA9638E48408CCAB978B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
Manifest number: 152A
Signing time: Tue 06 May 2025 20:00:34 +0000
Manifest this update: Tue 06 May 2025 20:00:34 +0000
Manifest next update: Wed 07 May 2025 20:00:34 +0000
Files and hashes: 1: 8hWid5SXEbLAHNxmnkDhcTlYVbs.crl (hash: PVmmCKk0nxWVC37FqFliz3L38k4A0VMeqHD6oTmfeo4=)
2: e9rn6bxSsUmtvRo7sJ4lEtK6S2Q.roa (hash: lsA08XTxVJOQQYnez6W7EOdFIkHihRjO9Y7qKfekirQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:2f:8f:69:15:05:fa:96:38:e4:84:08:cc:ab:97:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215a277949711b2c01cdc669e40e171395855bb
Validity
Not Before: May 6 20:00:34 2025 GMT
Not After : May 7 20:00:34 2025 GMT
Subject: CN=f06e2101946ed170bdafbf075ed2934edc29a8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:65:a6:61:02:f8:85:72:d7:d9:a5:c7:b2:
c6:c6:5d:5b:d2:4d:7c:ec:42:89:4b:dd:74:5f:30:
07:01:f4:86:bd:8d:b9:48:56:c1:4c:61:b0:1a:82:
46:b0:24:cb:41:31:35:0b:13:5e:3c:df:9b:d2:fa:
34:91:2a:a7:38:ef:f2:10:bb:eb:25:0c:cd:ed:70:
4f:87:b4:a6:20:84:90:65:4f:2b:69:b1:1a:72:9d:
5c:1a:ae:73:bb:50:2a:ff:6a:9b:9b:d3:eb:71:07:
bb:2b:b5:c1:82:d6:0d:80:91:09:ef:f0:cd:a4:b2:
7b:f2:fb:77:09:97:1c:4a:93:1d:ef:a9:a2:7d:a5:
7a:8e:f5:30:2f:a3:15:8f:2e:4a:7f:43:6b:20:a5:
7d:e5:64:28:8c:44:78:5c:6e:8b:4f:fd:17:94:7e:
5f:08:1e:03:cd:21:7e:d8:1b:d1:54:18:57:63:6a:
df:04:ec:50:84:bf:00:10:40:5c:5b:e2:58:96:11:
4e:f8:67:9a:76:ee:06:51:9b:65:5a:92:e9:d4:b0:
fc:b7:53:3d:fc:31:fd:2e:37:65:7b:c1:08:6f:a8:
bf:08:91:2b:24:f7:d0:2f:70:f1:27:c8:30:bb:91:
04:64:b3:a2:cc:ec:10:f7:d0:99:b4:58:99:1a:86:
73:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6E:21:01:94:6E:D1:70:BD:AF:BF:07:5E:D2:93:4E:DC:29:A8:AC
X509v3 Authority Key Identifier:
keyid:F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f7:b6:57:0c:e2:52:a8:03:4f:8c:94:51:ae:a7:54:da:b0:
66:82:a8:81:53:f8:20:c1:3d:9a:9e:89:24:ac:fd:f8:bc:a2:
b7:97:c1:18:9d:86:2c:52:e8:54:1b:b5:4b:0b:07:0c:4b:71:
d3:13:df:08:77:b8:07:92:da:55:dd:01:83:6a:14:b6:3d:31:
b3:0e:fc:60:3a:47:a5:3a:09:e7:5d:c5:df:26:24:00:ac:41:
4d:01:24:78:fb:b0:d3:47:a7:4f:5a:17:15:a4:39:9a:44:ea:
ba:a5:78:c0:04:2e:9a:13:a8:79:ed:9e:bc:35:f8:44:23:6e:
e0:a6:fe:da:b3:27:c9:7a:17:2c:fd:f5:54:0e:92:c1:2e:e2:
26:96:0f:af:06:86:9a:e4:2e:d4:eb:d3:dd:3c:73:34:94:c2:
42:12:7a:16:8d:e6:83:8a:68:66:87:8a:1b:99:d1:55:86:1e:
95:89:b1:a7:70:c3:c2:c5:4d:10:cc:21:f3:00:aa:26:f1:b2:
2e:8e:ca:79:1f:3d:37:d3:c1:3c:10:d2:fb:62:09:21:a7:b4:
16:fc:c4:03:52:ac:01:60:48:c5:d4:cb:62:cf:b1:ce:23:5b:
23:6a:dc:53:a5:ee:8c:45:6a:24:0f:9d:26:f9:c5:86:be:cf:
c2:da:e4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:49:39 2025 by rpki-client