Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
File: ihzh0TW_LPjowT8z7BHIUjcD3HU.mft (raw, json)
Hash identifier: /JLF+tWz1dc8gpOf/5eqV4LGLe+MQOOESsgsYttz/34=
Subject key identifier: E3:6B:A2:4E:7D:CD:3C:B4:26:91:4A:B2:29:E7:20:6A:7E:89:34:F3
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial: 019655A640646F1DB83E31B150087911D089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
Manifest number: 13F1
Signing time: Mon 21 Apr 2025 00:01:20 +0000
Manifest this update: Mon 21 Apr 2025 00:01:20 +0000
Manifest next update: Tue 22 Apr 2025 00:01:20 +0000
Files and hashes: 1: 0bVvhAd6bRTtpMiMWU5m6m_mX6s.roa (hash: k+FefGaNlibbtGtr5Aq6DThKW8SPKZcgwMtTZ3i/xpM=)
2: 2L9tST2xxsB46ZV-Wm7-7d0Z8Yc.roa (hash: 2H+U81Sea1KvCbnxcSszHg71YCfhD1GEm2cdKStIW6w=)
3: ihzh0TW_LPjowT8z7BHIUjcD3HU.crl (hash: 7zg+0u1CEmmVx5W9yHMqxv+POHWYtG0BD/PgHfCnwXo=)
4: tAGqHWpkQw0giajHMwWi-gQSCPY.roa (hash: dkPgoKFrLMzVm5FMtr3H3ipENsq7fpzYhSx+TXox0zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:40:64:6f:1d:b8:3e:31:b1:50:08:79:11:d0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Validity
Not Before: Apr 21 00:01:20 2025 GMT
Not After : Apr 22 00:01:20 2025 GMT
Subject: CN=e36ba24e7dcd3cb426914ab229e7206a7e8934f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:9e:56:58:1b:14:44:c3:98:31:23:2b:e5:
bd:74:ee:14:37:65:05:f2:2b:49:88:e4:56:8c:28:
ae:e4:ca:ad:24:e8:6b:7f:e8:e7:e4:8c:67:bc:84:
5c:d3:f6:0e:bc:55:84:9e:93:09:6f:e6:98:50:d2:
e8:1d:35:d9:69:e9:05:f8:88:6f:0d:d3:59:ec:49:
6c:97:27:ee:b2:c6:16:97:a1:87:80:da:a2:b6:ed:
b3:bd:23:0b:1b:52:2f:7d:3f:8a:f7:31:6c:d3:c6:
50:3a:b0:fb:27:af:d0:54:5b:83:a3:ed:6b:fb:16:
82:01:e8:e1:6e:f7:46:6a:ea:95:e7:76:49:7d:c9:
fd:7f:d9:4e:b9:13:b3:64:35:da:a0:91:1b:bd:08:
04:1a:da:17:08:74:ea:f0:f3:e3:c3:00:80:9e:dd:
80:61:34:84:64:fa:8c:1e:bc:23:b7:40:81:46:5b:
3a:20:c7:54:9a:5b:aa:d3:74:b2:12:5a:c8:14:2e:
4c:18:e9:91:1b:fd:93:b6:a9:7e:46:62:8d:88:bc:
7f:3e:ea:ca:31:3b:b1:cc:4c:61:7f:de:dd:11:82:
f3:9e:4b:07:5e:30:ed:ca:bd:41:c8:b8:d9:9c:9a:
81:51:a2:89:e3:5e:e1:ec:f3:d5:eb:45:78:bd:7a:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6B:A2:4E:7D:CD:3C:B4:26:91:4A:B2:29:E7:20:6A:7E:89:34:F3
X509v3 Authority Key Identifier:
keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:09:32:47:f7:f2:75:75:d4:2c:8d:c1:3d:ca:a7:ef:3d:76:
48:5a:6f:a1:51:83:d2:db:55:48:86:dc:ec:34:f7:e4:80:81:
57:08:e9:7d:06:91:0f:9d:01:e2:67:07:c5:f0:18:60:75:c1:
a3:92:67:f0:d5:2a:8f:e7:39:4b:5d:a9:43:48:70:a3:a1:29:
a3:f8:df:48:b2:0c:41:04:17:d0:39:84:1e:89:13:e4:ca:2c:
73:73:f6:cf:a8:e4:28:a5:ad:08:b4:1d:6b:1c:94:0d:99:0e:
3e:5f:54:a3:aa:83:f2:25:75:b8:ea:ca:83:66:29:ef:62:00:
d3:53:1e:2f:4d:90:90:3d:af:0b:46:93:68:a1:11:85:b7:a4:
0f:8d:74:bb:03:a1:a1:4f:62:87:46:27:c5:85:19:89:4c:76:
5b:d6:e1:3a:62:e7:71:51:5d:50:25:08:ba:14:90:93:cc:11:
20:be:57:77:cd:7c:46:67:02:83:91:e1:21:a8:bf:fd:a7:df:
8e:90:0b:09:d6:0a:a0:51:7e:df:6a:8e:bb:b3:2b:29:8a:73:
96:b4:68:eb:32:34:70:25:e6:9a:64:ad:5c:e6:b7:b5:71:84:
56:dc:54:38:ee:45:50:22:46:d6:5b:c7:7c:f0:c0:aa:dd:ff:
15:cc:50:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:05 2025 by rpki-client