Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: byUxN0o6PhXKrrIaSt9nWTJAuH2N+rtwcYZ+k9ifDik=
Subject key identifier: 8F:16:47:14:A3:D2:50:F0:71:B4:91:5D:02:43:13:BE:45:CC:79:59
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 0196B8FEF5869FA1DC7CA075E548D1B9E734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 0DC3
Signing time: Sat 10 May 2025 07:00:38 +0000
Manifest this update: Sat 10 May 2025 07:00:38 +0000
Manifest next update: Sun 11 May 2025 07:00:38 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: A9TuBnpqVI/wc4fyW55JR3SlXWIU0A2NDqu2FUk43sM=)
2: FGmjTJ5BNIGcHTaYOHKezd1P2zY.roa (hash: Erq/bi/faVpdLd489gfJpnnRsTbaiEt6kPr4sQ09lTM=)
3: ZK76vlPS_FSysziBAdOIgNMogW0.roa (hash: xB77QsTFqqCgmtvQaPv1mOIqwZjp+Xnt/7UaUeOP1pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:f5:86:9f:a1:dc:7c:a0:75:e5:48:d1:b9:e7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: May 10 07:00:38 2025 GMT
Not After : May 11 07:00:38 2025 GMT
Subject: CN=8f164714a3d250f071b4915d024313be45cc7959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:ed:08:89:af:8e:19:c8:97:bf:3d:a2:2f:
da:c6:f5:14:37:30:93:31:39:55:be:48:1a:e2:17:
19:65:32:fb:ba:8f:de:26:20:ca:73:29:ff:66:75:
11:8e:4a:f2:b1:23:5a:74:a5:a9:2a:b8:c5:de:73:
74:33:a7:75:e1:ad:62:9f:2e:e0:21:56:a4:18:99:
9d:1c:ff:f0:63:05:bb:44:f1:36:b2:44:e0:10:3e:
dd:ad:a9:60:f7:39:8a:7a:2c:2b:e1:39:91:e1:30:
2b:7d:21:6b:9a:72:01:f8:87:6c:6b:55:31:a2:05:
b4:05:0d:cf:8d:6c:79:27:4e:39:a1:52:53:3b:43:
eb:f9:83:d7:90:11:2f:bc:79:fd:db:66:8d:a4:aa:
8e:c8:39:08:1e:25:2f:e3:65:5c:6c:45:5b:18:1d:
d0:d3:c6:20:28:4f:d5:7d:94:ff:66:09:56:86:b4:
c6:f1:b3:e6:a4:90:7f:7b:51:62:db:53:fc:56:e4:
96:3d:73:de:30:47:27:cd:8b:40:d6:bf:b9:8b:b6:
fb:64:1e:c9:2c:4d:c1:70:24:16:aa:89:e5:35:63:
fc:ad:4e:03:62:cf:eb:38:09:3d:d7:9f:dc:db:40:
f4:50:28:5f:20:db:18:e6:de:9c:bc:2f:7d:e5:c1:
63:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:16:47:14:A3:D2:50:F0:71:B4:91:5D:02:43:13:BE:45:CC:79:59
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9a:2d:a3:63:9c:47:e0:0c:64:bf:51:7e:ed:40:68:87:66:
32:bc:05:db:77:2a:fc:36:03:93:79:5f:52:2f:2b:ce:cc:c0:
7a:52:ce:fc:4b:75:b1:8d:3d:73:87:6c:13:d0:8f:52:ef:93:
93:8e:32:be:f3:51:b2:08:f6:fa:ec:dc:31:27:7b:0f:25:a3:
0f:c1:a2:f3:1a:a0:c7:b9:32:37:76:35:cf:cb:c6:67:83:b4:
d5:92:c3:2a:41:2c:dc:93:f3:1a:8e:5e:08:de:71:6d:d3:b4:
b1:c8:c0:7a:b1:39:b6:00:73:55:69:13:39:73:fb:a3:38:d6:
87:20:7a:a8:90:b1:80:cf:99:a6:36:81:52:84:53:d0:40:39:
03:09:78:5c:98:70:11:ce:98:31:54:3e:dc:3d:34:8a:81:e9:
dd:cb:f3:d6:03:d5:92:4d:03:68:69:39:4a:c8:18:55:92:21:
f1:41:40:82:3f:9d:d1:22:b0:d9:fe:e9:c8:bf:4f:19:53:68:
78:ac:ff:20:27:06:6b:02:a5:72:79:ed:ee:29:0c:4d:a1:8e:
27:22:e4:7b:01:5a:83:e8:e2:b4:f7:61:fb:9c:73:13:93:5e:
8e:9b:2b:3d:85:0a:31:cf:45:67:68:67:b5:b4:a9:07:bf:ff:
7c:f2:bb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:47:35 2025 by rpki-client