Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
File: 8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft (raw, json)
Hash identifier: 8XEhcMCDZbHVEjjLEqT0WA6ORiVuwa1wl8s1QRkwuQA=
Subject key identifier: 77:10:12:3A:16:FA:A8:0F:77:96:94:FD:30:E4:A8:B0:CB:A1:EA:FD
Authority key identifier: F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
Certificate issuer: /CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Certificate serial: 019658385B90AE68225DFFAD25DCEA9D1893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
Manifest number: 09F7
Signing time: Mon 21 Apr 2025 12:00:10 +0000
Manifest this update: Mon 21 Apr 2025 12:00:10 +0000
Manifest next update: Tue 22 Apr 2025 12:00:10 +0000
Files and hashes: 1: 8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl (hash: y9tXWxH9GM5pLHGwmn5m7QNJAFUZBSQLno3oZy6n/ds=)
2: JlLzYa369BmhHhkMkkOAbFVKIEk.roa (hash: VUooec9+T4XmPm3CalNwGe0fyN77tnkbi4PQVdbwdIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:5b:90:ae:68:22:5d:ff:ad:25:dc:ea:9d:18:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Validity
Not Before: Apr 21 12:00:10 2025 GMT
Not After : Apr 22 12:00:10 2025 GMT
Subject: CN=7710123a16faa80f779694fd30e4a8b0cba1eafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:ab:09:03:3d:ab:da:40:e5:6f:c5:58:79:
b6:2e:0a:e7:32:45:d6:be:a5:be:f8:8e:12:65:39:
5e:2b:e4:a0:61:da:8a:37:9f:77:67:66:b4:b0:72:
1f:27:a3:b7:70:67:08:7e:c8:7d:dd:ec:33:c4:4f:
4f:f6:e1:c5:94:87:f5:d9:fa:d3:f2:92:25:2e:79:
35:17:bb:d7:ca:e2:0f:e4:0a:0f:c3:0e:09:50:76:
ff:b5:f7:46:18:ee:d2:86:6f:45:87:98:9a:69:87:
0c:0e:26:e8:59:11:14:1c:df:48:40:31:03:d3:68:
a6:d2:38:7e:4d:7c:af:61:90:b2:4d:a8:f4:41:43:
cf:98:5b:cb:f3:29:1a:dd:2c:75:c9:0f:9a:67:21:
1a:a8:0e:d4:1d:97:4d:d9:6b:73:e6:1c:f1:bf:d8:
2e:2b:85:e5:72:22:b9:79:02:04:cf:83:4e:5e:bf:
24:99:94:fc:9c:10:db:c4:d3:c3:25:87:d3:91:0b:
48:c0:dd:c5:e4:72:89:d7:6c:fe:75:46:dd:f7:fc:
69:75:02:10:5a:16:f2:4a:88:d9:09:f0:84:7e:18:
a9:6e:7c:fd:fc:fb:72:36:8c:0c:2d:e5:30:32:e0:
af:c5:32:bc:2d:1a:96:93:d8:72:ea:49:70:4d:3a:
66:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:10:12:3A:16:FA:A8:0F:77:96:94:FD:30:E4:A8:B0:CB:A1:EA:FD
X509v3 Authority Key Identifier:
keyid:F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:85:c3:ac:3a:bf:b6:66:67:e4:12:26:95:16:32:87:a9:90:
33:d0:5d:b7:f2:b6:5f:0d:5d:49:71:a2:60:c5:0f:5f:3e:b1:
43:dd:a8:3c:73:78:3b:7f:a3:39:fc:c1:ee:21:ba:56:28:22:
43:bb:80:1a:b3:43:ed:9f:e7:9b:a0:20:4d:24:4f:df:2a:e1:
f3:14:2f:5c:29:23:5e:01:d1:39:e8:41:4e:a5:52:46:7f:96:
a6:d6:c7:ae:27:d7:a5:ac:f1:c9:87:a2:68:b4:de:6a:f1:7b:
9f:52:a6:8a:16:57:ee:3f:c2:b8:39:e2:bd:ed:39:4c:7f:87:
53:ea:56:92:ed:1f:6b:d0:8f:5c:2e:5d:1f:7f:df:47:72:32:
9c:68:40:7e:cd:cc:b9:8d:fa:0c:cb:a1:2f:8f:30:c8:6f:87:
85:cd:ed:ca:84:cd:3d:8b:bd:ce:9f:8c:cd:6e:d3:36:58:06:
de:23:73:36:2f:c9:d1:c2:cf:eb:8a:a0:2e:08:66:dd:be:d5:
31:f3:89:c9:6d:18:ca:9a:cf:0d:d1:f8:9d:09:a1:af:41:d3:
13:d7:fe:2a:85:69:07:75:e5:4b:2a:83:92:a7:52:e3:66:a8:
71:04:03:f1:1c:c3:8d:1a:7d:ae:79:13:ed:67:14:a0:20:cd:
b0:ea:57:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:17:35 2025 by rpki-client