Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
File: K8J94IFvfguHpzPdMZkInlN_Jhw.mft (raw, json)
Hash identifier: pqXBR5jL/WzkW5l0NHmhv0W/R/9RvFdbm0oq8+169JA=
Subject key identifier: 8D:9C:CF:09:43:17:ED:1E:72:55:1C:54:CD:23:78:78:D3:1D:1D:0D
Authority key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
Certificate issuer: /CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Certificate serial: 01958B4D5492080C3EACA74488978AA9C596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
Manifest number: 0A86
Signing time: Wed 12 Mar 2025 17:00:55 +0000
Manifest this update: Wed 12 Mar 2025 17:00:55 +0000
Manifest next update: Thu 13 Mar 2025 17:00:55 +0000
Files and hashes: 1: 37DCbHhm2sTXZoKnRAO3SOggtQQ.roa (hash: +uLJpv1JAEXe6w9bK9Js8rFmAHbw+aILnxdKvgw5Rzc=)
2: K8J94IFvfguHpzPdMZkInlN_Jhw.crl (hash: 2dqfOMeYHYAca3Z+BeStmqxPwBTMNT3ugpa/HJ1s+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:54:92:08:0c:3e:ac:a7:44:88:97:8a:a9:c5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Validity
Not Before: Mar 12 17:00:55 2025 GMT
Not After : Mar 13 17:00:55 2025 GMT
Subject: CN=8d9ccf094317ed1e72551c54cd237878d31d1d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ed:f5:e4:26:76:85:4c:61:97:1d:fb:e9:c1:
c0:95:79:b6:68:74:c1:17:05:93:87:71:da:f2:62:
0e:ff:cc:59:c7:27:2b:d0:fe:7d:e5:7d:a5:10:c8:
60:b8:a2:4a:2a:a6:37:9c:79:ca:1b:74:77:61:c3:
f6:9a:4f:3d:4a:53:2a:70:b2:47:ce:ca:dc:c2:1f:
66:68:78:bd:7e:eb:81:a8:da:11:d5:97:a0:98:3b:
5f:71:9c:ec:84:04:ba:f0:02:9d:be:99:7e:ca:31:
a2:66:95:a5:00:64:e8:1d:8c:8a:a1:0c:b8:3b:ab:
01:9f:53:1c:f1:cd:52:25:19:1c:c7:9f:06:93:be:
e8:2b:d0:4d:6d:54:52:ab:eb:c9:e4:65:5a:e2:0b:
b2:70:5b:6c:3b:6c:c0:26:25:ca:d4:8b:12:07:43:
74:f1:53:f7:c4:2b:6e:3b:8d:5e:f3:08:44:d5:14:
82:b8:b7:50:9c:ac:f2:76:1b:05:6f:4a:db:b7:92:
c3:68:1b:02:44:2a:f1:6b:72:5c:4a:47:91:21:11:
22:0d:bf:05:bf:b5:2f:a9:a7:9f:23:9d:19:45:d3:
fa:88:61:60:a8:7c:33:81:46:bd:58:26:00:83:6a:
82:18:d4:f5:cf:cf:4f:f0:c3:11:ac:c5:79:b4:4d:
77:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9C:CF:09:43:17:ED:1E:72:55:1C:54:CD:23:78:78:D3:1D:1D:0D
X509v3 Authority Key Identifier:
keyid:2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ec:d1:5c:8b:98:2b:ee:01:b2:ac:11:f5:8b:44:63:0b:8c:
a1:c5:08:aa:2d:01:db:85:30:68:bd:15:ed:df:77:d2:ac:7f:
08:80:e8:9f:a3:23:23:f6:b1:c1:da:38:32:85:c1:2a:44:4e:
ad:50:2f:9b:7a:00:68:45:d8:31:aa:8a:d3:78:d6:95:d9:b0:
37:ba:9b:e5:39:92:8b:32:3c:73:0c:05:2a:f1:62:a4:8f:c1:
da:70:87:46:f8:75:38:03:eb:b4:fd:47:73:12:34:46:75:93:
53:82:3f:3c:c8:27:dc:f0:bb:66:24:8e:2e:59:ac:b5:40:ce:
ae:87:ff:33:73:a9:13:70:8f:28:98:be:60:63:b8:8b:07:55:
d4:3f:d3:b3:73:3f:eb:bb:f2:41:1f:f9:33:e1:37:cb:0e:fe:
e3:39:7d:6e:b5:53:77:f9:6a:28:73:da:bb:3b:e1:1e:0b:9e:
95:41:81:38:1a:91:70:ac:f5:a5:13:43:9f:83:7e:4e:d3:6f:
04:b0:7a:4d:87:60:82:b4:ab:ec:f9:e2:f3:51:39:e0:e2:4e:
eb:1b:65:26:56:ef:0b:90:96:58:9d:bc:98:d2:63:61:5a:59:
59:a5:26:48:d4:96:47:81:fc:6c:11:28:3f:5a:3c:84:97:9c:
96:ef:e8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:32:09 2025 by rpki-client