Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File: 8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier: 3KtQMyfUeEbWRDulo0dQb2la3RiDJMy/ryvwi8WJ0ew=
Subject key identifier: 7E:5A:28:9D:EB:EC:30:22:DD:C7:DF:D0:57:05:78:3A:A3:60:8E:99
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer: /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial: 01964DEBBF465AF01B817E715DBEDBA08F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number: 0351
Signing time: Sat 19 Apr 2025 12:00:17 +0000
Manifest this update: Sat 19 Apr 2025 12:00:17 +0000
Manifest next update: Sun 20 Apr 2025 12:00:17 +0000
Files and hashes: 1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: YVA3oy/ugcxQapIsnAm1My10/sP3b4xhJoAhUl2V/7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:bf:46:5a:f0:1b:81:7e:71:5d:be:db:a0:8f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Validity
Not Before: Apr 19 12:00:17 2025 GMT
Not After : Apr 20 12:00:17 2025 GMT
Subject: CN=7e5a289debec3022ddc7dfd05705783aa3608e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:fa:bd:75:af:4c:b9:96:dc:c0:49:63:ef:
2f:ec:ef:8c:d4:8a:69:53:55:b8:45:ee:90:90:ee:
68:4a:cc:f9:2c:c8:a6:da:3d:30:3e:e0:93:55:6e:
8c:71:99:12:d7:11:a6:3c:af:ae:19:dc:e5:d8:f5:
21:41:fe:79:e7:2d:e9:d4:49:f0:ed:db:18:f3:a5:
ed:f1:06:57:9c:bf:08:a9:57:ae:5a:6e:08:1f:f9:
3c:cc:d9:3e:b4:9b:4b:3c:47:df:18:28:a8:44:7f:
39:7d:c9:ce:23:a3:2d:13:ba:9e:94:8a:2a:df:a1:
77:79:bc:6a:d0:76:57:34:d5:f1:9e:0b:49:07:13:
d2:78:1f:e0:2f:09:49:13:b9:86:1b:3c:70:61:ce:
bf:7c:84:31:5a:b5:55:41:c8:a2:bf:27:df:50:e5:
c1:10:03:2b:ed:fb:9b:54:16:07:d8:c3:36:db:92:
99:0d:e0:f5:3d:e1:c2:47:30:e9:ee:4b:b2:be:b0:
ec:be:6a:07:b4:ac:ae:64:f6:db:4d:80:54:83:8c:
6c:8d:bc:82:96:1c:52:04:3f:9f:76:b7:66:2f:8b:
fb:7e:e8:62:d2:6d:42:b4:41:69:31:df:8f:8b:b0:
46:65:a9:9e:99:0e:3a:a7:68:0f:12:a4:6b:95:ef:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5A:28:9D:EB:EC:30:22:DD:C7:DF:D0:57:05:78:3A:A3:60:8E:99
X509v3 Authority Key Identifier:
keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8c:24:d1:5b:f5:7f:04:6f:4e:d9:db:5e:05:61:6b:db:5a:
c9:ea:cb:64:f1:1c:5d:7d:ac:9d:67:1e:5a:f9:c2:f0:4d:90:
9d:34:20:c6:16:e4:23:a0:26:8c:1c:83:17:af:15:14:03:eb:
be:d9:b6:97:93:1d:cd:9e:d3:fe:1f:54:d0:52:09:d9:69:88:
09:64:f0:72:5e:9c:59:ff:a3:3f:39:37:d1:2d:c4:09:c7:2c:
56:d4:d9:18:15:88:ea:ce:4a:b2:42:4f:66:c6:ce:cc:39:6e:
28:c1:78:be:48:01:b6:09:46:80:1c:95:19:ca:34:80:07:76:
2a:ff:04:ec:3b:2c:6e:be:53:f1:8d:6b:7a:7b:83:1d:ca:38:
d2:ea:6d:2b:2f:54:8e:3e:d0:75:ea:8c:bc:86:5e:ce:61:6c:
9d:c1:82:12:fc:97:c1:6b:bc:24:02:b8:e3:2e:66:95:f3:f1:
dc:e8:f1:d5:c5:20:20:5f:e9:9e:b9:0c:4f:fd:e8:57:e4:36:
33:89:5b:74:61:ca:f8:ca:e5:59:55:b6:93:74:7c:97:e5:74:
d3:a3:ea:94:c0:06:44:23:7c:9d:71:b7:d2:ee:8f:c6:10:43:
b4:27:a7:29:96:27:4e:ec:ba:7c:21:35:07:c1:78:cf:af:40:
22:51:ff:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:12:12 2025 by rpki-client