Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
File: i5HgoQS1s93x9dCOessreeDVZvk.mft (raw, json)
Hash identifier: vZb/L1I/TJbdNr8uxvARMqRnSeDrILdfe7I6ttSCa6s=
Subject key identifier: 77:8F:25:C3:73:B3:6C:9F:B0:73:08:C8:15:F2:2D:2C:DE:C2:33:F9
Authority key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
Certificate issuer: /CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Certificate serial: 0196458D57A49CD28AF4AE106EDD2758DD80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
Manifest number: 0F01
Signing time: Thu 17 Apr 2025 21:00:12 +0000
Manifest this update: Thu 17 Apr 2025 21:00:12 +0000
Manifest next update: Fri 18 Apr 2025 21:00:12 +0000
Files and hashes: 1: KwomHtAHnCM0D-yGdW_0Sf3mopc.roa (hash: nJuUP0j6H239g1R7GMJyKq0zviXnK+AhK7Q4U43dyg4=)
2: ZYlcf7X6lFUqPdlZgjx7h6pY7f0.roa (hash: Z91lhusvfId6xXTKVa6gm5qmkQJNcO8M7YoIqY37LFU=)
3: i5HgoQS1s93x9dCOessreeDVZvk.crl (hash: vpIUTPCAGb5yPzr/y9WOx1Ts71zk9QjhOtgyUm0v/CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 21:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:57:a4:9c:d2:8a:f4:ae:10:6e:dd:27:58:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Validity
Not Before: Apr 17 21:00:12 2025 GMT
Not After : Apr 18 21:00:12 2025 GMT
Subject: CN=778f25c373b36c9fb07308c815f22d2cdec233f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:84:d4:d9:10:6a:85:c8:af:19:4a:99:6a:
6c:ae:6a:4e:c6:be:f3:5b:46:b9:5c:f5:34:35:22:
a7:89:95:21:e1:0a:ee:3c:46:9b:c5:c1:eb:4c:51:
7e:89:20:b5:72:0b:46:35:bb:0c:a0:b1:ff:78:1b:
d5:a2:f3:fd:e2:a6:ad:a6:72:81:85:18:d9:04:db:
94:d0:cc:b8:f1:3d:10:8a:30:64:af:a1:6f:53:8b:
0d:c2:0c:96:6c:d2:bd:77:76:7e:8d:20:8e:58:c7:
f6:bf:a8:f4:b7:34:43:1e:df:c4:fc:42:6a:4f:3c:
2b:41:9b:1b:05:f4:3b:7c:ac:33:69:16:69:b9:0a:
02:26:6e:0c:19:ee:66:cd:f7:83:7a:4a:df:25:aa:
a1:f1:c9:01:2b:33:53:1b:9a:e5:e1:ea:fc:8d:bd:
64:82:ce:cc:75:c1:47:e3:4a:5e:3f:14:43:6c:c7:
e3:c2:44:0c:1f:67:f8:fa:36:45:f6:c0:ea:08:09:
c7:be:5a:4c:33:08:c8:ee:c3:2b:83:aa:5b:ed:4e:
0c:4e:ab:27:8f:f0:b3:bb:38:68:21:ea:d3:d9:04:
2e:8e:fb:fc:c2:76:ab:59:22:9d:e8:d8:7d:56:fa:
6b:16:89:bb:96:d1:8c:8a:9a:2a:47:6b:b3:4f:0e:
32:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8F:25:C3:73:B3:6C:9F:B0:73:08:C8:15:F2:2D:2C:DE:C2:33:F9
X509v3 Authority Key Identifier:
keyid:8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:76:56:a4:1b:d9:14:10:9b:9c:44:78:50:9c:9b:e3:ae:b4:
9e:dc:3d:f9:cb:7d:4c:ae:01:e5:02:a6:60:0e:ab:a2:17:f7:
19:f9:ae:73:08:fb:f7:8e:4e:79:e4:79:a4:d6:c2:d7:5e:3a:
c6:0f:87:05:5c:53:3a:f7:32:af:0b:8d:2e:00:d7:6b:35:52:
b7:b3:73:33:93:51:db:31:f7:a3:dc:34:b1:9b:77:d8:41:b1:
dd:8d:1e:08:d2:fc:fa:c5:b2:e2:c1:30:f8:1d:e6:ee:4e:42:
46:1b:5e:54:70:1a:96:cb:d6:21:04:90:6a:4c:1e:fc:c7:f4:
0a:5d:a8:ae:39:9e:17:69:b6:08:12:b9:90:22:0f:f0:83:ce:
71:16:a4:bf:46:3b:3c:05:5a:ef:86:79:7d:40:91:2a:10:6d:
2a:c8:e5:3d:9e:b0:ac:4a:6c:22:2b:22:b2:e1:a2:3c:b3:54:
80:86:67:04:3b:04:11:47:58:d5:3c:40:4a:e5:f9:25:52:8c:
13:16:d1:77:fb:4c:91:f3:19:f3:f1:3b:81:4f:0b:93:05:79:
fc:40:d4:b6:05:56:5f:9a:34:58:a5:49:a2:eb:61:9f:6a:4b:
68:cf:da:2a:fc:89:ca:64:66:ab:2c:22:f6:19:83:34:25:f6:
76:24:b8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:47:22 2025 by rpki-client