Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
File: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft (raw, json)
Hash identifier: 7aRrgWeMHKF8MhD4LfXIKjWWzaV1jwPx/MMkM3lUzPs=
Subject key identifier: 87:74:16:8A:92:35:BA:FA:63:BE:A8:61:3C:E1:60:30:80:0C:EB:B1
Authority key identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
Certificate issuer: /CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Certificate serial: 019659F03FF7127451A830005AE78475AAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
Manifest number: 0687
Signing time: Mon 21 Apr 2025 20:00:39 +0000
Manifest this update: Mon 21 Apr 2025 20:00:39 +0000
Manifest next update: Tue 22 Apr 2025 20:00:39 +0000
Files and hashes: 1: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl (hash: S7QTGdQIo9EFGR2SrsskkMOe0BRrU96gZse+9hkjC5g=)
2: ac5Wv-_VhODUkcedLbPF7JyYGxc.roa (hash: 6If3dld/h88JewSAZ5sEjufcA+BJRUhokKAmEZgvW1o=)
3: o4RLvNlxcTjRoMHQG0NwWxkUYb4.roa (hash: B+fFcwV95+as9F86sHUOjXkwuPQBko5Sfhe+H4+0kBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:3f:f7:12:74:51:a8:30:00:5a:e7:84:75:aa:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Validity
Not Before: Apr 21 20:00:39 2025 GMT
Not After : Apr 22 20:00:39 2025 GMT
Subject: CN=8774168a9235bafa63bea8613ce16030800cebb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6f:72:9b:0f:09:40:f8:b7:a4:49:1f:fa:90:
25:99:23:35:03:5e:f2:aa:28:b0:72:fb:10:ac:8d:
23:6e:80:1d:4c:c5:57:cd:58:5e:9c:94:39:79:a1:
0c:9c:48:c4:e7:2a:f2:7c:84:0e:f4:40:da:08:3e:
47:2c:cc:7b:1c:6e:7b:e3:e8:b5:c7:6d:24:a7:e4:
c6:d0:df:88:05:74:9b:81:5e:70:83:65:dd:3f:40:
f7:39:1e:b2:84:99:29:e7:20:6c:e0:e6:59:13:ec:
49:c0:47:ce:5e:73:57:48:b0:c6:50:3e:86:da:6f:
e0:5b:9e:5d:23:69:ac:7c:a7:c7:c7:48:b7:20:d7:
23:27:bb:60:2f:d7:ab:4e:eb:12:8c:c8:ae:f4:dc:
5f:0e:1a:a4:6f:1e:72:10:8e:42:9f:3d:57:f0:28:
99:7b:55:23:3f:c4:a7:ad:22:ca:ba:88:fb:dc:b2:
b1:4e:03:6c:c7:b5:da:c7:5c:47:f1:86:01:74:69:
79:b4:3a:2e:2f:e9:19:7f:75:7b:51:02:c1:50:11:
94:c7:22:64:39:cc:3c:1a:38:e6:6b:63:ce:91:af:
d6:ea:ce:c5:f7:83:a1:71:44:bb:0b:3c:df:46:0c:
b3:91:61:e2:3f:73:6a:90:3e:c6:03:5b:ac:89:57:
c8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:74:16:8A:92:35:BA:FA:63:BE:A8:61:3C:E1:60:30:80:0C:EB:B1
X509v3 Authority Key Identifier:
keyid:F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2f:a6:75:42:f3:b7:56:9b:21:9d:5f:dd:b2:a3:2e:7b:79:
18:c9:37:4c:6f:97:08:de:67:0c:24:0d:c8:7a:a9:39:fa:57:
bc:a5:94:54:b2:27:16:ff:8c:fa:b7:a0:2c:50:22:0c:f6:3a:
a4:d3:b4:c4:80:f7:2c:6d:3a:7c:78:23:05:45:9e:4d:dd:ae:
92:fd:de:25:20:69:86:8c:c2:4d:0d:db:7e:2a:8f:d6:df:1d:
77:fa:8b:ec:ce:f5:3c:38:39:f3:3f:e2:22:57:f0:ef:64:77:
19:a4:f2:7c:54:bb:11:4c:25:65:12:45:86:df:7c:8e:30:18:
24:33:5d:d9:18:88:1f:57:92:9d:c8:2d:17:ed:e3:41:51:1e:
e7:42:b0:58:5d:ad:65:e4:47:dd:6a:32:84:b8:26:dd:79:9f:
bd:10:16:bc:24:03:6a:77:87:2f:57:c0:f5:12:83:83:41:e6:
15:04:57:4b:78:38:4e:50:64:86:ae:c6:4f:e7:d3:aa:43:85:
1c:ec:af:0b:c1:4e:fd:80:2e:c5:f4:e5:3b:75:15:43:fb:ea:
a3:c9:31:f3:b4:b8:80:95:39:2d:a5:7e:be:75:56:9b:f9:11:
05:d9:e6:b6:f1:f8:ab:40:de:0f:cd:7a:50:ae:ef:c3:d9:3d:
fa:66:ce:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:57:55 2025 by rpki-client