Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
File: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json)
Hash identifier: Fg9+KAio6ZqAGJQnnRnKvBR+XD4R5dHgcsHC6Qt4fR4=
Subject key identifier: A1:BD:C2:46:15:F2:E7:A8:B5:03:0C:B5:29:6E:95:22:82:80:43:81
Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Certificate serial: 0196BD8101E8D0A995091D3D5D4348E0AA65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
Manifest number: 0900
Signing time: Sun 11 May 2025 04:01:10 +0000
Manifest this update: Sun 11 May 2025 04:01:10 +0000
Manifest next update: Mon 12 May 2025 04:01:10 +0000
Files and hashes: 1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: oOOd1bEZZCOozGnp2IcTUvuJgJ22sdkZMPDeZMPJGmo=)
2: GZ1s7d54viav3wnjL9leWDPX9XE.roa (hash: havZ3bJj+OM6go5VLxui+205cgsq5mlbJ3gC7fDy5Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:81:01:e8:d0:a9:95:09:1d:3d:5d:43:48:e0:aa:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Validity
Not Before: May 11 04:01:10 2025 GMT
Not After : May 12 04:01:10 2025 GMT
Subject: CN=a1bdc24615f2e7a8b5030cb5296e952282804381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:f4:98:65:ba:28:50:1c:74:2e:56:dc:5a:
7a:ae:84:85:45:90:ad:5d:b4:10:a7:0c:7f:bf:64:
4b:a0:92:ae:ef:8f:03:8f:f8:19:0a:6a:92:a5:f8:
d2:72:30:52:44:37:d7:4e:76:96:af:53:18:ad:62:
4d:18:5c:a0:53:28:b3:95:51:31:df:1d:d6:e2:3f:
37:d1:93:37:31:7c:cc:05:aa:e7:3c:ac:b5:d4:a9:
e4:44:1a:10:b0:75:83:65:ca:aa:9f:83:84:d6:f3:
62:79:78:cc:6d:90:14:89:c1:ca:49:60:fe:d1:20:
12:77:cd:78:19:ad:d6:90:1a:8b:61:4d:55:21:80:
7c:46:56:13:4d:86:92:7a:8a:02:f0:9b:70:fe:17:
c8:ae:a1:24:db:f0:77:c0:fa:a8:54:b2:8a:45:46:
f6:d6:36:13:67:a5:68:74:f6:ff:86:26:41:11:10:
af:88:10:44:51:89:35:57:c6:47:b1:99:eb:b9:80:
a3:80:86:11:63:fb:20:9a:b5:80:09:41:90:a7:72:
38:a5:ea:37:bb:09:eb:ec:e6:4a:7c:68:6e:9d:4b:
fd:01:18:eb:32:07:a8:d1:95:84:5c:b0:84:95:88:
28:df:73:24:94:17:73:16:b5:87:e0:f0:86:74:8c:
f7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BD:C2:46:15:F2:E7:A8:B5:03:0C:B5:29:6E:95:22:82:80:43:81
X509v3 Authority Key Identifier:
keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9c:65:f2:44:1e:38:d3:38:c7:d8:7e:51:6b:fb:8b:99:f1:
b1:3b:49:fb:d5:24:95:de:c1:88:9b:2a:0f:f1:5c:f0:cd:7e:
ff:1c:ed:10:b7:93:d8:9e:79:ba:ed:73:26:8f:10:9a:6f:d6:
98:91:da:b4:83:3f:f6:87:44:0d:4f:2c:88:e4:dc:e6:5e:01:
f5:44:28:73:95:53:6a:fd:c7:2b:31:56:69:f9:6d:f8:9d:01:
5c:f5:07:6e:c2:d8:50:6e:7b:3e:ac:17:1a:10:25:80:17:af:
4c:e9:a9:8c:12:8b:34:01:ea:89:1a:0c:b0:bc:a1:3a:6f:45:
34:55:3f:c9:f7:7e:c8:3e:1b:13:1f:16:57:43:5e:b5:6a:b8:
37:d3:96:2f:45:4c:19:39:b2:97:b5:d9:06:7f:3b:a5:fd:c5:
b4:5e:67:ce:ed:d1:81:dc:9b:bd:a9:5e:60:0d:66:68:2f:09:
29:3f:04:15:af:14:80:7e:22:c8:5f:96:6c:8e:8c:6d:c4:d5:
79:48:f8:7c:eb:e0:91:0d:a5:a2:9a:da:5c:d6:b9:16:04:59:
ca:f8:bc:da:15:c8:bb:d8:8d:72:f7:e8:53:fc:0a:57:48:26:
95:0a:b1:ac:f9:88:46:12:a2:30:86:35:27:8b:b5:a2:e7:0a:
c3:80:84:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:43:18 2025 by rpki-client