
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File: ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier: DEwJ2BtCbpcO5K0wUMKUiI0RPazCi/sdW4La6TrUEXw=
Subject key identifier: A8:7E:B8:A3:DC:B9:41:9B:E5:90:A9:68:75:A0:F8:4B:79:40:08:5D
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer: /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial: 01964DB52E2143209E9192739819C92FAC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 11:00:41 +0000
Manifest this update: Sat 19 Apr 2025 11:00:41 +0000
Manifest next update: Sun 20 Apr 2025 11:00:41 +0000
Files and hashes: 1: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: 2P3UUKCNsLveQqeO0u5TaNtHpqprLfvwJB0SsRTLyxY=)
2: rfewBBlrs58wJgdGtzFYKvwGFI8.roa (hash: 12fD5K/uMK4YG5nY9pYsgAuOVyylAM893HbTm9LpUXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:2e:21:43:20:9e:91:92:73:98:19:c9:2f:ac:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Validity
Not Before: Apr 19 11:00:41 2025 GMT
Not After : Apr 20 11:00:41 2025 GMT
Subject: CN=a87eb8a3dcb9419be590a96875a0f84b7940085d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:fb:d5:f9:72:30:d9:8d:64:96:06:fe:fd:
35:a6:15:d6:a7:56:96:e0:bd:79:20:37:55:0a:29:
55:f6:e8:f1:54:59:2b:1a:3a:f7:fa:6e:d0:29:fe:
f5:b2:20:98:ab:58:d5:1f:62:36:c6:3f:60:d9:42:
95:8d:28:31:e5:74:6d:3c:46:62:0c:fc:a8:fc:1b:
95:84:40:ca:a5:cc:3c:6c:b6:ef:a1:7e:a4:3e:78:
fc:e8:70:ee:bc:48:22:e4:d5:9c:a8:b4:6f:73:a6:
ef:99:71:a0:0f:10:76:b9:84:58:88:9b:b9:9f:bc:
16:ac:b2:84:d2:08:b1:b9:ee:d9:96:d3:f0:1c:7b:
dd:6e:0d:01:5e:88:e9:33:ca:45:37:a1:e4:f9:7b:
99:33:61:b7:2a:10:35:5e:e3:d5:e4:a4:fc:3a:9e:
9d:a0:d1:c3:1d:c4:f9:ac:13:21:d7:82:06:f6:46:
b7:48:03:8a:00:78:8f:3f:74:1d:3d:77:5f:0a:4e:
bd:4c:82:d1:f1:ea:e4:c8:6d:88:b5:7a:6d:90:95:
32:9e:b4:03:32:06:9c:e3:87:84:cb:74:ca:a1:e9:
ba:bb:c9:84:be:bf:9d:02:cc:c1:dd:f5:ad:fe:84:
db:dc:26:f2:7e:9b:a3:5f:1d:89:ef:a7:45:53:b6:
66:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7E:B8:A3:DC:B9:41:9B:E5:90:A9:68:75:A0:F8:4B:79:40:08:5D
X509v3 Authority Key Identifier:
keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d2:11:c4:6c:29:b9:39:47:17:6a:c2:90:03:96:15:08:b6:
be:af:6f:f7:b5:97:33:d2:2e:33:b5:04:fe:30:95:78:9d:cf:
10:6c:d1:a4:07:f8:f7:bb:11:6e:c1:fa:30:1b:70:ba:18:ed:
7d:6b:9a:59:de:31:c8:50:e4:8b:ea:f5:f0:8c:f6:4f:c1:2c:
25:e7:74:b5:29:96:04:ce:bf:3c:f0:fa:44:35:19:f0:aa:b7:
80:0c:43:4e:a7:10:03:3c:48:3e:92:40:81:1b:40:47:0d:d1:
fc:02:1c:64:2a:1f:82:58:9f:af:ae:11:38:1b:4f:ff:b5:29:
d9:2a:44:b5:87:dc:5c:bb:56:c0:77:1a:66:65:ba:c9:d2:be:
c5:ce:a8:37:6d:cc:5d:b1:22:84:1d:68:98:53:ad:d5:4c:bb:
0c:36:85:61:80:39:26:35:1c:35:a2:b7:5b:97:01:45:dc:12:
1c:eb:11:97:f4:f3:94:fb:f6:51:fb:4c:2b:f0:c2:23:90:93:
e3:ef:dd:9a:b7:0d:5a:87:ef:07:0c:fe:1e:34:59:1e:93:14:
7a:81:cf:c0:f5:e3:02:de:8f:34:1f:da:10:a6:b3:fa:48:af:
f9:1c:0c:c6:92:3a:f2:e2:d3:ec:68:06:d9:34:a4:4a:9e:99:
f6:34:58:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:34:32 2025 by rpki-client