Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
File: 8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json)
Hash identifier: qNjtpFPjhh7k3j10BqitbkYLUqcIJn3ZCorz6x2+wUA=
Subject key identifier: 40:2B:E9:1A:33:2B:A6:63:DA:87:2B:31:A9:1B:07:9C:78:28:5F:7D
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Certificate issuer: /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial: 0196D740703EB72DC6805697A9CB552D0BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
Manifest number: 0C23
Signing time: Fri 16 May 2025 04:00:46 +0000
Manifest this update: Fri 16 May 2025 04:00:46 +0000
Manifest next update: Sat 17 May 2025 04:00:46 +0000
Files and hashes: 1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: eCUS0UOkWCtQdTxpRz6BtkjF51zexph13zMDGRSHWgA=)
2: r15VgfDzfklLUPcVx6y07YzgPWU.roa (hash: px8SZ3fdpiQxLHW7vHT/LHov8V1krmhAYBpslqeJkek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:40:70:3e:b7:2d:c6:80:56:97:a9:cb:55:2d:0b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
Validity
Not Before: May 16 04:00:46 2025 GMT
Not After : May 17 04:00:46 2025 GMT
Subject: CN=402be91a332ba663da872b31a91b079c78285f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:44:46:b7:70:2c:e2:10:6e:6f:74:0a:b7:
ec:08:cb:eb:b1:54:ae:fd:0d:14:c0:d4:7f:d0:9a:
83:71:0c:8b:8e:b7:96:80:5a:ff:05:d0:43:3d:4f:
4f:a4:e5:f7:13:f9:21:a2:e9:dd:b6:4b:a2:d3:7c:
ad:d7:ae:6a:6b:35:5d:e0:0e:45:d0:e1:48:a0:25:
ee:a0:67:17:39:75:f6:a1:45:d0:9d:ff:25:11:b4:
d0:da:c9:31:33:76:77:34:07:03:de:e1:9f:fd:40:
96:2b:a7:3e:07:26:b6:40:1d:11:75:b4:cc:23:60:
6f:7a:ac:b5:f8:61:59:55:7f:46:3c:7f:2f:67:01:
b1:d4:83:a6:bc:3b:87:aa:17:03:be:1c:3e:ce:94:
87:ba:30:e8:3c:9e:ae:43:85:ab:be:a1:b1:b4:aa:
d0:0b:bb:6f:f9:12:c4:b9:a8:a7:7d:f7:45:3c:c5:
1b:bb:27:18:72:45:c4:f1:66:81:62:3a:a2:ba:b4:
e7:5e:3e:8b:bd:3f:33:7a:7f:9e:25:95:d4:a5:f1:
3d:80:e2:d0:1c:de:55:b4:39:d3:ba:2d:83:0c:23:
d9:cd:c9:19:23:e7:99:ff:0f:03:52:45:03:f0:6f:
91:fb:96:d7:40:cd:63:2b:57:1b:a4:10:c5:80:93:
e2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2B:E9:1A:33:2B:A6:63:DA:87:2B:31:A9:1B:07:9C:78:28:5F:7D
X509v3 Authority Key Identifier:
keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:88:f3:c1:02:8d:03:00:4c:46:75:a9:79:0e:f0:f4:ea:30:
bb:21:d4:3f:1f:26:06:e8:7a:8b:a9:69:11:93:48:af:b3:bb:
a9:a6:7e:d1:00:dd:4d:9c:05:7c:c3:55:b3:74:8e:72:f0:b4:
2f:22:36:77:35:19:58:a5:79:53:ed:b7:21:22:9e:1f:91:f0:
a4:9f:9c:fa:3c:47:96:03:35:d1:0d:23:5a:49:25:ba:ef:a4:
35:a0:ef:46:66:f4:6a:a3:98:15:41:81:a5:a5:5e:95:df:35:
d5:1c:05:2e:a7:cb:d1:27:8d:f6:6b:ea:c2:76:53:10:71:10:
3b:b5:fd:01:06:f8:be:1f:f0:20:95:b4:97:90:9a:53:96:fd:
ee:14:a5:34:47:dd:51:1b:4a:ae:5e:bd:c4:0e:19:fc:d1:58:
f3:df:58:ff:a8:70:bd:5f:e7:b6:7c:8d:e1:9e:c8:36:c3:b7:
0c:0b:6e:3e:63:ac:f6:33:84:28:aa:7b:cf:b9:b3:55:af:e1:
7c:b4:08:1b:9a:7a:15:47:b8:d8:37:41:9b:ce:94:e6:d0:58:
33:79:10:55:34:1a:af:e2:9c:d5:1d:7e:84:41:6c:db:ec:5c:
f4:3d:bc:67:69:ae:26:9b:b5:0c:4e:c7:57:52:07:87:9b:88:
eb:4f:44:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:15:45 2025 by rpki-client