Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File: invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier: lF4WFJFSuoEJJ6ujatXsFgIpD4yjmbLsrvSYaF9jFSY=
Subject key identifier: 9B:5B:63:D8:FD:0A:85:FF:DC:2F:BC:68:5D:3F:62:B2:F5:3F:7F:22
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial: 019645C4F6BB6B09BB47C767E3006078B264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number: 0287
Signing time: Thu 17 Apr 2025 22:00:58 +0000
Manifest this update: Thu 17 Apr 2025 22:00:58 +0000
Manifest next update: Fri 18 Apr 2025 22:00:58 +0000
Files and hashes: 1: RyuUu8aSOA4RRrkxjhCMyWt8M-4.roa (hash: N00rEgshheQJFJlnzMgkGFoydAhTWl79InbpFappf/8=)
2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: cT+xoTad40oWfbHfYFRRRZuSbdrsRT6TNcmlUEgIiH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c4:f6:bb:6b:09:bb:47:c7:67:e3:00:60:78:b2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Validity
Not Before: Apr 17 22:00:58 2025 GMT
Not After : Apr 18 22:00:58 2025 GMT
Subject: CN=9b5b63d8fd0a85ffdc2fbc685d3f62b2f53f7f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:85:a2:f3:23:44:73:1e:e3:e0:d8:5a:ae:
89:c4:dc:65:c4:37:aa:a9:44:96:77:3b:e0:06:ab:
84:88:2d:fb:56:cb:6b:95:f2:e4:63:48:d1:f1:25:
a4:c2:43:bc:c8:41:09:2c:a4:27:67:7c:f0:77:6c:
20:4a:50:f4:f3:38:26:36:da:a2:06:5e:c8:49:70:
2b:be:42:5d:2a:d5:f2:6e:42:6c:dd:ab:dd:55:fe:
7b:0e:18:65:61:e4:11:13:70:6c:bb:f7:8b:17:84:
8e:50:04:50:5b:80:a8:cd:36:86:32:6b:3e:bc:be:
ba:fb:fe:aa:f0:ed:a2:75:44:5b:ff:e8:f8:aa:13:
1f:e5:21:6d:65:a3:92:f8:66:49:60:f4:64:7d:b5:
2f:ae:92:9a:f0:20:87:90:fa:81:ac:a1:f9:48:b7:
f7:24:ea:91:eb:49:6c:ab:13:c3:4c:e0:5f:b9:24:
b4:e2:43:8a:14:11:f0:f4:f5:ff:99:95:64:68:d6:
f5:33:bf:20:12:80:4d:ab:c1:b1:39:c5:b2:26:96:
2a:76:9d:f6:a7:60:80:5c:99:8b:9d:99:c3:c9:24:
4c:78:58:8e:ad:35:b1:f3:bf:e8:d7:b4:81:c5:e4:
3e:28:77:6b:22:90:76:76:61:a0:85:18:45:3d:ad:
6c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5B:63:D8:FD:0A:85:FF:DC:2F:BC:68:5D:3F:62:B2:F5:3F:7F:22
X509v3 Authority Key Identifier:
keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a0:82:74:af:01:e9:43:24:5d:19:38:8a:a9:3f:66:23:78:
0c:92:68:6c:42:3c:c6:1b:0b:bb:4e:d8:d5:62:8d:9c:b1:b3:
29:09:fe:d5:d1:a5:49:9a:a4:2e:67:86:45:9e:5d:86:76:c2:
f7:fc:63:c6:3e:5d:88:29:77:cb:f5:1e:3d:a7:f2:a9:c7:58:
a8:ec:24:36:78:00:14:d4:68:62:c9:ec:49:01:ec:5a:3a:03:
d8:a4:9b:94:ce:b8:be:a6:0c:ab:7c:0d:e0:c1:3f:94:80:97:
f4:3e:aa:d2:2b:92:c8:c7:f6:b7:54:c9:f0:75:ff:8c:2e:ae:
b7:ac:62:db:c7:d1:3a:ac:7c:c0:1e:6f:dd:bb:0d:a1:65:40:
63:31:b9:c9:6d:54:2d:3a:12:50:9e:ff:4c:cc:dd:05:cd:63:
a8:cd:0a:2c:e6:35:eb:5c:82:82:f0:7d:d8:3e:ff:df:8a:35:
4e:b5:21:4f:4b:08:f6:6c:5d:9a:61:7a:4f:97:a7:07:46:13:
df:ef:90:82:82:b7:a1:0f:9b:b3:d2:c8:ed:29:68:5a:c7:20:
24:95:ed:11:5d:11:5b:9b:2d:c7:11:ff:2c:e1:56:4c:26:b1:
10:bc:19:5d:ee:5f:d5:a1:ec:ac:99:5a:3a:ae:1a:dc:bc:ca:
ce:ba:e4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:19:58 2025 by rpki-client