Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
File: c8_hHopwk73JW8AeINtDduIqpRY.mft (raw, json)
Hash identifier: HXJRQhzS4M7g1aj+PbBCDMQQ1C5qi3lAb3hJbaIYIYA=
Subject key identifier: AB:20:3A:ED:73:FF:72:A9:E1:66:27:F3:41:63:A2:1A:DB:9C:3A:90
Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
Certificate issuer: /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Certificate serial: 0196AC8C8FBD2F8721A6A4D8DF829B01BED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
Manifest number: 023E
Signing time: Wed 07 May 2025 21:00:15 +0000
Manifest this update: Wed 07 May 2025 21:00:15 +0000
Manifest next update: Thu 08 May 2025 21:00:15 +0000
Files and hashes: 1: SVFNCXAgs-J1Ur0M2wuVWaTBzQI.roa (hash: rGZg6LxxY7ku4GUoLGf94rOsH2eH6eg3rUYHF4vWHMk=)
2: c8_hHopwk73JW8AeINtDduIqpRY.crl (hash: h/hc7pEMnk4DKd4+t3DgoMeO4Ff/qTzb9l1j5oBVdk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8c:8f:bd:2f:87:21:a6:a4:d8:df:82:9b:01:be:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Validity
Not Before: May 7 21:00:15 2025 GMT
Not After : May 8 21:00:15 2025 GMT
Subject: CN=ab203aed73ff72a9e16627f34163a21adb9c3a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:30:2f:f7:79:dc:ef:7e:17:89:9d:37:74:
2e:cc:a0:d5:47:bc:dc:7a:f5:1f:05:39:56:16:1b:
0f:70:62:cc:fd:16:26:38:4e:6a:84:04:ef:2c:b1:
94:ea:8b:ff:a6:a3:71:2b:37:b3:86:d7:d4:e6:ed:
5e:ac:6f:0f:08:de:80:5f:ae:28:85:50:b2:20:e1:
f7:6d:f3:35:5e:e7:cd:bc:e1:ce:aa:14:3d:04:f9:
3d:97:03:6e:47:87:5e:6e:d0:6c:5f:4c:20:88:9a:
34:ef:6c:42:14:e3:47:61:8d:7d:65:e3:9e:9d:1e:
d8:e1:77:cf:8c:03:d8:ab:26:7e:c9:b9:c7:7b:e8:
9d:0a:36:0c:7a:d1:fa:6c:fb:14:2f:a1:ce:bb:94:
bc:7e:6f:09:d5:8c:fd:1d:3e:fb:ac:2b:2c:c0:c8:
58:9a:75:2a:1f:1f:4e:da:21:63:9b:a9:e7:20:4e:
59:2e:24:96:e7:1e:c5:b6:7d:38:4a:08:4a:53:b6:
05:5b:a4:e7:3e:8d:3e:3d:8f:5a:ff:a3:14:1c:a1:
1c:7d:46:78:9c:da:6e:62:c3:c2:9c:b0:51:d0:5d:
4c:ed:35:9b:f1:0a:14:ce:7c:d8:95:c0:2a:87:00:
19:3c:07:a7:05:29:7d:f4:eb:9a:cf:22:da:54:cd:
74:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:20:3A:ED:73:FF:72:A9:E1:66:27:F3:41:63:A2:1A:DB:9C:3A:90
X509v3 Authority Key Identifier:
keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:69:db:28:b7:24:01:a4:5f:f0:da:b3:70:c0:42:ed:66:6a:
5d:ef:62:4f:60:60:76:21:b5:aa:08:46:fc:2f:a3:ca:27:68:
c7:ab:32:af:a8:7d:d9:0b:92:cc:07:da:52:bd:70:8a:65:49:
d0:3e:87:3b:ce:be:00:17:70:88:a6:86:f4:a7:ab:7e:8f:c4:
60:d4:ec:67:72:72:3a:6c:13:63:77:a9:c8:49:f4:40:aa:90:
6c:59:36:30:c4:ba:22:ad:87:5f:44:75:58:43:c7:29:07:15:
62:f0:86:64:93:29:11:06:27:55:55:43:36:2e:81:6f:26:9b:
ea:28:40:2f:33:1a:7b:db:47:56:97:60:01:50:12:6e:b8:12:
36:28:1f:3f:96:9b:ba:64:d0:f7:5c:3d:5e:81:df:0e:c7:39:
00:ce:a9:aa:7b:98:ea:7c:50:ce:39:d5:d9:6f:ce:78:60:79:
32:ce:25:a2:eb:77:29:b1:72:46:30:5e:3a:b2:d3:6c:1a:bb:
cc:a8:74:42:36:bb:a2:9c:3f:d0:8b:e5:7e:e7:fc:00:b1:ec:
95:02:5f:83:7b:b1:cd:70:ae:1c:36:92:c3:00:2e:52:95:f8:
46:bc:26:4a:21:03:6b:67:33:6d:bd:d6:44:8b:a5:ce:dd:d0:
34:fb:91:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:45:55 2025 by rpki-client