Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
File: 8KEVxxfliRNKVTZw8-K1uc2hLYM.mft (raw, json)
Hash identifier: TV/oaqq+U6d7DJbcT8Xvhpi0CZZFo505E8p9RJxZjIY=
Subject key identifier: 58:85:DF:1E:4E:73:AC:D8:2D:31:A1:35:87:33:73:F2:95:9D:29:0E
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 0196BD495F01A2812627E01EFBA75F2598B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
Manifest number: 0C29
Signing time: Sun 11 May 2025 03:00:24 +0000
Manifest this update: Sun 11 May 2025 03:00:24 +0000
Manifest next update: Mon 12 May 2025 03:00:24 +0000
Files and hashes: 1: 8KEVxxfliRNKVTZw8-K1uc2hLYM.crl (hash: i2pdDRTs5hnSSV82Wb1tJ1YPKum+EQu7rN3EM/Ba7n4=)
2: pGdvSW9NlY7ggpWYdQxsgPpUkIc.roa (hash: +D8etcwAhuaAWN3gXHXLkRiaN5uUVNnmE3FwZNf0dCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:5f:01:a2:81:26:27:e0:1e:fb:a7:5f:25:98:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: May 11 03:00:24 2025 GMT
Not After : May 12 03:00:24 2025 GMT
Subject: CN=5885df1e4e73acd82d31a135873373f2959d290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:5a:61:c7:1c:44:15:64:a2:b1:ca:db:02:
d9:78:db:4f:b9:d2:e6:37:27:71:82:ea:2d:de:b6:
8e:bb:0c:95:4f:89:14:cd:97:c6:84:e9:3b:2d:b6:
ed:9d:7b:0d:81:b7:f7:20:09:4f:db:ed:2b:6a:25:
6d:45:2b:b6:6a:92:01:d9:3d:c8:0a:d7:24:7d:2b:
98:30:8c:ba:bb:18:ce:05:8a:99:6d:65:e1:f1:06:
01:a8:76:d5:87:11:6c:5f:5b:8e:c7:78:25:87:31:
69:a7:ea:1a:be:97:b6:33:8c:cd:95:e3:ca:5c:9f:
7a:b2:cf:2c:ac:34:07:1d:79:46:24:24:8b:ad:6c:
21:6a:cc:92:bd:3c:2d:de:0d:bc:a2:32:2b:5b:dc:
a0:95:f1:be:eb:79:28:8b:80:d3:f7:1e:e8:3e:df:
c2:9d:2f:fd:a1:69:41:dd:30:a2:00:3a:7e:7a:92:
0c:07:47:4f:d7:25:a6:bc:41:ec:ac:0c:43:ef:6c:
d9:ad:b8:94:31:2d:d4:58:3c:c9:ce:6f:f0:8c:4c:
c9:2f:7b:10:95:0f:a4:84:4e:89:ad:f3:98:d0:fe:
be:28:88:39:73:72:8b:86:6e:e4:85:fb:1c:83:7c:
3c:72:e4:06:3d:d0:52:cf:cf:eb:01:33:ac:cd:0b:
cf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:85:DF:1E:4E:73:AC:D8:2D:31:A1:35:87:33:73:F2:95:9D:29:0E
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b3:55:04:14:86:6b:19:34:b1:9a:8c:28:9f:58:8d:2c:7c:
91:72:4b:4e:98:98:51:13:b9:53:4e:b3:99:63:7a:9a:fd:21:
cd:95:1b:7d:92:b6:5a:42:fb:ef:66:35:47:bb:18:64:a6:75:
51:f9:14:d3:0a:49:a5:10:f6:dc:62:8d:4e:f9:2e:3c:7f:46:
b5:72:e6:0c:ca:b8:8b:60:c5:92:60:ea:59:be:4a:21:01:28:
09:3e:1b:68:3d:f8:ac:d2:c2:9c:54:2b:c3:e4:28:cf:75:f6:
f6:91:54:5a:7a:48:3e:46:dc:f1:94:eb:2e:ba:3e:cb:3a:42:
96:76:8f:8f:f5:04:a5:34:a7:29:49:d9:aa:a7:4a:23:e3:08:
4b:d6:57:97:ec:a8:a2:58:2d:68:80:d2:55:dc:56:86:6d:77:
e3:ed:b1:45:57:aa:7a:5f:14:e7:53:1c:11:66:a5:1b:71:3e:
31:c1:05:a4:25:15:fc:d7:9b:3c:df:ac:df:64:3c:6e:d8:01:
01:cb:7e:b8:a9:df:c4:be:e4:59:19:15:15:18:41:20:05:c8:
1b:48:e2:84:4d:ef:a7:d2:5c:2d:cb:5e:ab:db:41:09:1a:48:
cc:9d:17:b4:ca:6a:ee:5d:99:33:de:44:05:76:3f:e9:cf:b4:
ba:83:b5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:51:21 2025 by rpki-client