
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier: Oai6LKntxckiSua/PMYFHD1fN1XStARtfPF+BRzx5+o=
Subject key identifier: 7C:53:01:DE:35:DD:BE:DD:6F:E9:0E:C8:4A:DB:95:7C:DD:C7:E7:EF
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 0196071D05E2DE0AECDA701F4DA028924239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number: 066B
Signing time: Sat 05 Apr 2025 18:01:04 +0000
Manifest this update: Sat 05 Apr 2025 18:01:04 +0000
Manifest next update: Sun 06 Apr 2025 18:01:04 +0000
Files and hashes: 1: 3TbJq9j2geNORTi2E9xTbbuvxTw.roa (hash: GEQQroPBoH2N7pLErfqXNmjkVTV09NRy63LB6YJ9qVU=)
2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: WtTKrADVrJ9a0ElYwQdWi1dsa+PQd/BQ8wshSRCvQLQ=)
3: O5vcxppH2hWxYYAsqunLkBWcHEA.roa (hash: q4yYQF/m9xvQmRwlkRVUClFyEqyPX8PvXIb5hdq5C/c=)
4: S074YuodosP0UuUo6De4P_sFXFs.roa (hash: pyM9pUqd+rcNeRhYxGuF9WXwPo5DNw77BSKM8YnWbDw=)
5: Suwxb4A_r5JBEoQCb5YosZpgxYQ.roa (hash: ynVaJVBlwlWG6tSEdbng0uT/nO6dcjS+TT74OXhzdwE=)
6: TeWmN6EHoWRaSQ7AOqv2c821wck.roa (hash: nLb50bk1nICV8KXxpzGqIvnlONr6M9e61qQJa/r2Gnk=)
7: VV_pKUnIORWQZ3e9Gq0Sb2EbVrY.roa (hash: ILHJodGOzQUy/1EkSV1sW3J8/BVRtZEBwh5TBOH9dR0=)
8: fpQDOceW0nAf0mI2PAXShTq2K8Q.roa (hash: AwWdNgQE53Ja7SCJFwgUtSy2nXOjhiPggUFZe7XRmBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:07:1d:05:e2:de:0a:ec:da:70:1f:4d:a0:28:92:42:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Apr 5 18:01:04 2025 GMT
Not After : Apr 6 18:01:04 2025 GMT
Subject: CN=7c5301de35ddbedd6fe90ec84adb957cddc7e7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b5:74:b1:00:84:ac:bd:c6:79:6c:a9:42:ad:
44:9e:d5:af:fb:41:b1:9e:37:5a:b7:02:6a:a1:1f:
11:ce:63:c7:60:10:53:97:6f:63:56:90:e1:a3:42:
98:fd:22:0d:aa:64:77:30:d9:c6:50:5f:27:23:bc:
7a:1c:76:48:a2:27:0d:41:35:76:a8:44:e3:c2:03:
3c:3b:8e:dd:05:03:dc:07:6a:75:e4:89:50:4f:13:
35:55:f6:0c:ca:3c:35:48:16:d7:78:db:be:52:c4:
f8:7e:5c:20:5a:5e:b5:8d:5d:97:02:99:eb:42:ab:
bb:bd:94:fa:fb:b5:43:7a:02:06:60:76:6c:d5:49:
9f:e9:14:6d:d4:01:ef:85:0a:aa:fa:41:1d:72:72:
11:e5:a8:cc:65:43:72:78:82:12:84:1f:f6:a1:1d:
85:a8:22:f2:7b:b7:d1:44:ef:58:cb:69:62:a3:5e:
1e:cd:d3:a9:7e:33:2c:ec:ec:00:9e:24:bf:de:ad:
99:c3:60:79:44:97:18:fb:e2:2d:10:25:b3:f6:34:
34:eb:5a:aa:9c:ef:bc:14:27:4f:bb:93:78:87:c5:
53:b0:4f:58:c1:94:dc:20:4c:ed:83:ac:7b:00:51:
77:2e:7d:09:82:97:38:5e:89:ba:b4:4d:c8:a3:55:
36:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:53:01:DE:35:DD:BE:DD:6F:E9:0E:C8:4A:DB:95:7C:DD:C7:E7:EF
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:28:93:eb:6e:90:31:b3:45:83:a2:0c:41:94:d8:6c:fa:d8:
52:c6:d4:98:67:94:bd:63:4d:de:f2:7a:54:fc:ff:1e:9c:cd:
5f:1a:c0:ea:a2:08:7a:58:42:6c:eb:69:e1:79:d4:2f:58:55:
0a:81:9d:0d:54:c3:80:f4:b1:6c:da:99:ca:8a:71:ec:f9:a6:
b8:30:23:d4:5f:26:a2:ca:71:15:f1:8a:ab:35:5e:51:52:30:
0a:a4:cd:10:06:e2:f5:f3:b5:f7:28:71:d9:16:3a:60:05:c1:
59:24:7f:76:c2:e4:44:af:12:4a:a9:11:0d:88:16:f8:fb:6f:
29:83:48:2f:46:4d:7b:d7:f1:cf:99:30:f5:58:0a:14:1f:6c:
64:24:76:e4:a3:a6:23:60:d5:9e:69:5c:27:55:1d:69:ae:db:
e7:4d:a4:07:0b:50:6f:7e:06:a9:a8:af:31:f8:d9:c2:3b:0f:
8e:db:14:fb:af:67:4d:db:d2:7b:52:42:55:31:99:56:08:8a:
f1:a2:3a:93:3f:76:cc:0b:2e:45:ad:0d:60:c1:4e:dc:a9:d3:
97:59:fa:78:04:bd:4e:7e:e3:61:33:36:05:66:89:ee:cc:cf:
2c:43:85:cd:ce:03:3f:07:6c:7c:21:7c:71:1e:32:77:99:ad:
7f:e3:9b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:42 2025 by rpki-client