Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
File: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft (raw, json)
Hash identifier: G0arfAVgbhw6i2Yp/4Amh77fP0QzQSbq39Vo521xFFA=
Subject key identifier: 4A:F6:52:4D:1B:C3:B6:CC:1F:02:83:9D:7C:B9:F7:AB:DA:61:7A:08
Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
Certificate issuer: /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Certificate serial: 0196B96CD19164BDB118BFECF38384933478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
Manifest number: 02B0
Signing time: Sat 10 May 2025 09:00:38 +0000
Manifest this update: Sat 10 May 2025 09:00:38 +0000
Manifest next update: Sun 11 May 2025 09:00:38 +0000
Files and hashes: 1: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl (hash: 1O+JtJxuAt0qI91/V0BHnuHPlT6Za0CV50DOLnAG4Zw=)
2: oVHqW7Znx3iXeIApvzhLphsAfTQ.roa (hash: yQWVz29tvYoHHrEUjXDJ9Ko8ioxivLXZFSUPJ/+r9ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:6c:d1:91:64:bd:b1:18:bf:ec:f3:83:84:93:34:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Validity
Not Before: May 10 09:00:38 2025 GMT
Not After : May 11 09:00:38 2025 GMT
Subject: CN=4af6524d1bc3b6cc1f02839d7cb9f7abda617a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:70:bb:18:49:c1:c8:e2:33:3d:54:3a:4f:
b2:73:66:4a:6a:d5:ff:fd:d1:ef:c1:f4:a8:32:2a:
cf:e5:dc:f3:15:c8:24:df:63:4c:59:78:56:5e:36:
63:18:c0:74:b7:53:83:21:45:55:7e:7e:43:56:51:
c7:b7:b8:44:06:2e:6d:d2:4f:3a:15:4f:3e:74:69:
92:b1:82:38:f1:88:1e:19:50:7a:01:75:30:10:28:
ca:b0:b7:bd:52:93:cc:d6:2a:15:e3:cf:b3:19:25:
02:c7:55:81:ab:4e:25:ed:62:a3:e0:23:0a:6b:94:
78:94:28:4e:fe:17:f8:1e:34:82:71:31:04:a9:10:
ff:bb:8b:2e:85:0f:2a:0d:b4:5e:51:d7:db:bd:70:
4d:89:fc:cc:35:cc:0c:a1:c8:b0:6f:28:d6:80:b7:
a8:98:4d:12:7e:4f:29:8b:5b:3e:2e:22:45:05:18:
dd:82:9d:53:83:14:c4:57:31:c2:de:00:62:0b:95:
91:43:3a:7a:44:d7:5f:28:82:3d:6c:0c:b1:c6:db:
c8:c7:8c:81:c9:ad:8a:38:2e:8b:b2:71:29:fa:c2:
bf:65:93:ce:75:79:5a:21:e3:a8:b7:83:b0:81:e1:
92:9e:19:d2:58:e4:ea:a1:de:f0:73:2d:29:ec:73:
d9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F6:52:4D:1B:C3:B6:CC:1F:02:83:9D:7C:B9:F7:AB:DA:61:7A:08
X509v3 Authority Key Identifier:
keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:dc:63:15:fa:47:c3:9f:34:59:21:cf:6a:e6:7e:b9:a2:0f:
05:bc:cf:eb:78:37:a9:e5:93:b4:32:34:35:1f:f7:9d:78:56:
0a:27:c7:91:ce:29:26:30:13:0f:e8:42:f6:cf:0b:3a:08:cc:
7c:7f:69:40:fc:01:41:b6:dd:c6:d0:0f:ca:72:01:77:f5:e6:
17:7f:b2:ff:24:74:3b:bb:05:11:88:d5:06:16:cb:6b:26:6b:
3d:3e:14:03:1d:b3:3d:24:f5:da:62:d7:3c:84:6b:87:f6:c2:
fd:19:e9:b2:97:76:ae:e7:48:58:9d:09:f6:db:66:7b:25:11:
ad:af:b6:87:8b:35:28:f2:4b:50:9c:20:2f:f3:48:eb:cf:a1:
3b:93:55:16:a9:f1:c4:85:b2:b9:f1:65:5b:dc:82:05:0e:e5:
25:e3:79:ca:7f:00:30:eb:3e:9b:3e:06:93:0e:b9:b7:79:04:
78:80:7f:19:d2:a8:5c:45:60:1d:01:b5:05:a4:a3:f5:b3:6a:
37:1d:61:44:d9:a6:27:5a:e2:6a:ae:5c:84:45:05:c2:82:96:
22:db:51:10:3b:a4:af:8c:fe:4b:30:02:b6:a7:4f:80:2b:a7:
1e:ee:33:00:c8:c4:2b:9e:cd:a9:11:ad:4b:c3:77:fc:2a:5a:
79:7f:89:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:23:14 2025 by rpki-client