Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
File: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft (raw, json)
Hash identifier: 4boFODKeW45xTaMsH7Bebfcw95B2emis4GuXl/6QiEs=
Subject key identifier: C4:52:21:FE:62:6C:41:34:F3:48:07:FA:20:DE:4C:E0:F2:85:5B:95
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial: 01965424BB0859F4D72CB442B92A7B56E9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
Manifest number: F3
Signing time: Sun 20 Apr 2025 17:00:15 +0000
Manifest this update: Sun 20 Apr 2025 17:00:15 +0000
Manifest next update: Mon 21 Apr 2025 17:00:15 +0000
Files and hashes: 1: 8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl (hash: qMx2K2xnzvukWQ6LuCTP/74d58t5L9/OTS2IcXhv/6Y=)
2: J84DjEhi_gEyD8-a87brecsYsNM.roa (hash: A66a3xMstZT0T3ni5nfFwwrP4QVYA3zVnvHKSfI3TDI=)
3: yitip1-kJD5dQRdS53t4KfkARHM.roa (hash: cgy9OckdIOJNSQ5+HtqFQg4ACHdIPiP47DMcF7GV8yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:bb:08:59:f4:d7:2c:b4:42:b9:2a:7b:56:e9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Validity
Not Before: Apr 20 17:00:15 2025 GMT
Not After : Apr 21 17:00:15 2025 GMT
Subject: CN=c45221fe626c4134f34807fa20de4ce0f2855b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:8b:a5:54:77:53:73:f4:4f:1d:02:07:e4:
a9:1b:ec:1c:aa:a5:73:a5:cd:84:72:b5:fe:0c:d7:
48:76:44:c2:c9:c5:e6:c0:22:0e:86:c2:11:da:ea:
75:0f:1a:f9:e6:c0:b7:be:33:9e:0b:96:2a:f0:c9:
4a:dc:83:4c:5f:7a:24:d4:1d:68:21:ab:e3:d7:8d:
a2:a3:40:19:b6:6d:b6:69:4d:07:c7:b8:79:23:a9:
86:e2:3f:0e:84:c0:d7:1b:5d:0a:ee:4c:95:58:39:
75:1c:34:b2:7a:14:67:65:83:eb:4d:c9:05:1d:a1:
cf:9e:ec:cc:7f:65:c6:38:c5:53:8b:c5:3d:9e:bc:
04:9a:84:99:89:38:b1:be:25:af:e9:42:c3:f2:be:
a4:76:2f:7d:b1:6e:e0:06:11:17:a9:ae:ab:b8:5d:
87:cb:34:08:ea:d5:1e:e2:91:4c:fd:04:e5:37:ce:
00:db:a8:fb:d9:e6:fe:9d:64:bf:92:d3:7c:04:4c:
4f:91:23:0d:74:2e:e4:c9:95:96:7f:8c:9f:06:79:
c6:d0:07:ce:7f:88:e5:f9:3f:b7:f5:d7:91:c0:00:
35:9a:55:f2:b3:db:a0:36:87:6e:d9:73:27:80:2b:
a8:bb:87:dd:60:6d:43:85:93:c5:44:3a:49:95:d1:
bc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:52:21:FE:62:6C:41:34:F3:48:07:FA:20:DE:4C:E0:F2:85:5B:95
X509v3 Authority Key Identifier:
keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:02:93:ee:13:16:51:e7:ba:8c:59:13:c6:43:79:55:85:41:
5d:2b:52:5b:2e:2f:88:5b:10:f4:21:a5:3e:7c:f3:21:d1:e9:
f6:33:bf:e4:75:9e:9e:ce:2f:3a:d4:b8:72:64:25:a7:84:7a:
00:c7:b6:7c:83:c7:fa:f1:d4:cc:4e:74:93:22:d3:0d:ad:2d:
fb:2d:3b:9a:40:5c:62:41:4a:02:95:1f:f4:3a:fd:73:61:d3:
3f:3c:55:14:ee:7f:1e:6e:bb:a9:c3:2b:3f:e9:d3:15:72:46:
40:67:fa:b7:ac:37:1b:6f:75:bd:68:2e:95:1a:73:e2:21:2c:
1b:1e:a0:97:6c:28:60:68:09:52:2b:d0:ba:f5:95:c4:a8:3d:
e7:80:23:2e:9e:82:13:55:b1:24:7c:9d:99:8b:c0:fe:d6:e6:
57:4b:14:57:e4:0e:c0:20:51:98:d7:21:55:22:c5:67:22:f5:
fa:d8:56:94:27:5b:e3:28:8b:43:c8:68:47:bd:e6:88:59:f9:
22:ec:d1:74:43:4d:4c:05:84:ff:16:0e:3b:c8:4f:8a:7f:4d:
ae:2a:7e:b8:cb:5a:e7:bd:37:15:d7:64:44:f0:b7:ea:5c:7e:
dc:64:0d:e3:c8:77:21:b5:d1:0a:92:44:2e:fc:09:f0:57:19:
d4:a7:b9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:20 2025 by rpki-client