Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
File: S8K4kvLb729UtFNg_rD4QUpahQQ.mft (raw, json)
Hash identifier: 4FbxQSZdLSGsTttE7/+VBMor+O0LzRBOR0HI19wisMA=
Subject key identifier: C8:5E:0C:08:B6:11:41:43:EC:E3:4E:83:F7:D1:24:6E:65:4D:7A:5C
Authority key identifier: 4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
Certificate issuer: /CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
Certificate serial: 0196BA1189F923B639CB9544DBFA613EF666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
Manifest number: 0F2D
Signing time: Sat 10 May 2025 12:00:33 +0000
Manifest this update: Sat 10 May 2025 12:00:33 +0000
Manifest next update: Sun 11 May 2025 12:00:33 +0000
Files and hashes: 1: 8XxbJK1GWPrtjat_Lpe2HKly_9k.roa (hash: 1REGOqOGYIsLrmhSt5pZG4EmBpaR7Cf++uPRynahll8=)
2: S8K4kvLb729UtFNg_rD4QUpahQQ.crl (hash: Z0vnUC54FX//wv8DBeJ1ie8LdjvY8W0jQk7/3KrLd3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:89:f9:23:b6:39:cb:95:44:db:fa:61:3e:f6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc2b892f2dbef6f54b45360feb0f8414a5a8504
Validity
Not Before: May 10 12:00:33 2025 GMT
Not After : May 11 12:00:33 2025 GMT
Subject: CN=c85e0c08b6114143ece34e83f7d1246e654d7a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:dd:7c:be:68:03:12:4b:3c:96:0a:00:c2:
60:b1:29:73:6e:8d:b2:62:5d:db:35:da:3b:56:4c:
2e:94:ef:f8:cf:73:bb:bc:73:49:d3:f9:42:23:7d:
30:63:f7:ee:92:c7:37:4c:35:2d:c3:eb:40:76:e6:
30:6c:02:bb:c5:53:6e:13:76:7c:78:5f:cf:a4:05:
21:aa:17:93:39:25:06:12:de:67:1a:eb:51:d4:3f:
4e:02:16:1f:11:e8:9d:10:88:40:58:ed:15:41:c0:
38:a6:61:77:fa:a8:e0:c1:c9:a2:30:88:8e:83:0b:
81:be:67:d6:01:a9:7b:2c:16:c1:dc:26:a6:04:56:
94:d5:39:9b:58:49:cb:82:9f:25:e4:8f:a7:5c:4b:
d4:ce:73:08:02:19:70:b6:c4:c0:99:7d:6b:b3:9c:
59:17:bd:d6:da:4a:9d:05:db:43:c2:5c:17:f4:5f:
88:ad:66:d3:24:bd:4d:3e:6e:cb:a4:7a:77:e5:94:
80:76:e0:16:6b:29:1b:68:56:5f:d0:12:75:e1:54:
1f:6f:62:bd:23:99:2a:a3:15:93:5b:4d:e0:a4:37:
38:bb:65:0b:e1:7e:2e:1c:f2:70:9b:b1:71:4d:2c:
11:c8:69:80:b2:df:d8:b2:0f:af:8c:80:a7:61:71:
8a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5E:0C:08:B6:11:41:43:EC:E3:4E:83:F7:D1:24:6E:65:4D:7A:5C
X509v3 Authority Key Identifier:
keyid:4B:C2:B8:92:F2:DB:EF:6F:54:B4:53:60:FE:B0:F8:41:4A:5A:85:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8K4kvLb729UtFNg_rD4QUpahQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c1a852-55f5-4505-8d90-2157a575db0b/1/S8K4kvLb729UtFNg_rD4QUpahQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:be:14:cc:b2:15:e6:a8:78:50:19:7d:6f:30:57:27:62:79:
16:54:65:86:5d:38:0a:7f:b7:de:fd:f5:be:05:24:5c:22:65:
a1:55:6f:76:47:3c:4a:87:69:41:19:d8:43:91:ba:24:3f:4d:
12:28:82:59:c8:1c:bc:e5:95:c7:16:e0:bf:56:1c:fb:d6:75:
81:b5:40:e9:a9:77:10:6d:5f:80:f8:36:ae:a4:00:29:c0:d7:
14:79:86:1c:97:e4:6d:d1:71:58:36:75:8e:ae:1f:99:25:e0:
3b:0a:89:67:97:06:76:eb:d8:ae:8c:1e:3f:e9:79:88:24:97:
ef:09:88:e2:c4:27:b7:6a:05:67:6b:ed:06:f1:49:ee:b8:6d:
ca:69:30:f3:90:3b:69:27:ff:f5:39:d3:13:06:49:d1:6d:01:
98:90:13:c6:6c:50:ce:b6:b4:3c:9b:19:28:3a:bd:7c:84:f1:
dc:bd:08:2c:9d:33:50:0f:aa:c9:42:fc:4e:f7:a7:d3:35:22:
1a:f1:ab:5a:dd:54:01:a3:72:55:20:69:0c:9a:8d:51:eb:fe:
45:0c:f4:41:85:37:f4:ef:81:75:1d:ca:aa:e3:bb:1c:40:87:
19:c6:43:5d:1e:a3:16:bc:b6:37:64:c7:f4:e7:35:c2:df:47:
84:e5:21:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:48:05 2025 by rpki-client