Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
File: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json)
Hash identifier: IMYg5L/YN8syKAb5vIxoNx8g1BlTeSnKvibHrGolFYY=
Subject key identifier: 85:AE:BB:F2:7A:99:7F:F2:9B:39:7D:3D:EB:26:AD:ED:20:0A:12:14
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Certificate issuer: /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial: 01961B11B0CAA4CEF03F79F1E2A70EA1FFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
Manifest number: 0ED0
Signing time: Wed 09 Apr 2025 15:01:06 +0000
Manifest this update: Wed 09 Apr 2025 15:01:06 +0000
Manifest next update: Thu 10 Apr 2025 15:01:06 +0000
Files and hashes: 1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: KmUfZXc+QcQbJlWGcywuqFfkx2kFh6JynEaEqe48uqg=)
2: qPfR7RG57f18LNEfOXECDUWuxuU.roa (hash: QgXqOHY45cNI3RJ9Yex5GhM6/GX8GPU2S0Ij2p9Y640=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:11:b0:ca:a4:ce:f0:3f:79:f1:e2:a7:0e:a1:ff:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Validity
Not Before: Apr 9 15:01:06 2025 GMT
Not After : Apr 10 15:01:06 2025 GMT
Subject: CN=85aebbf27a997ff29b397d3deb26aded200a1214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:c7:2f:65:aa:2b:b3:9e:2c:6d:b7:7e:1c:
01:a8:e6:35:4f:78:04:7b:b8:99:50:89:6a:f4:54:
cb:64:26:f8:b5:a6:59:de:d1:ed:75:b8:99:1d:94:
55:24:12:f9:33:5d:27:23:02:37:79:c2:64:3f:b3:
17:64:92:17:8e:b4:08:f6:50:66:0f:a1:b4:72:70:
95:f4:13:b3:8f:e6:12:7e:fd:26:13:3e:95:1c:9e:
8f:b0:3d:72:c3:82:33:de:e2:f7:77:bf:34:8a:0b:
74:6f:08:6f:53:fb:1c:d3:70:44:52:81:ab:65:22:
55:bc:48:44:8f:bc:30:5d:fe:9b:52:85:56:e3:c5:
53:18:58:28:f3:93:5c:1e:a7:42:2b:29:f2:ff:05:
f4:63:22:17:d7:15:51:01:17:01:58:d3:b6:24:e8:
df:75:8e:6b:e5:c1:f6:68:54:46:e2:71:51:ae:d4:
6c:77:3f:31:f9:c2:7d:9a:0d:72:9b:d4:2e:2c:b4:
b4:b0:16:b4:3b:6c:47:ef:e4:6f:10:0e:16:fc:64:
ec:2e:a4:dc:45:07:af:37:7c:b1:20:4a:30:79:07:
d6:f3:19:9f:9b:f9:66:f8:3e:af:05:a3:5e:07:2a:
34:fe:42:06:13:88:c9:56:71:25:23:e0:be:ca:66:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AE:BB:F2:7A:99:7F:F2:9B:39:7D:3D:EB:26:AD:ED:20:0A:12:14
X509v3 Authority Key Identifier:
keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8e:cb:02:38:d3:cb:04:24:96:85:44:3b:95:e3:8b:e2:ca:
b2:cc:01:91:a6:66:91:de:28:ac:99:69:4d:53:d5:26:e7:9d:
c9:e5:1a:81:14:45:b2:1f:44:c6:77:85:2c:50:90:99:96:e9:
00:a3:35:d3:a4:19:74:83:c0:98:ef:9d:c2:07:f2:a3:4a:2f:
aa:9b:55:9e:90:9f:f2:c4:48:31:08:a4:85:30:e9:c1:72:6a:
db:0d:4f:8a:8e:69:ea:09:9c:05:83:6a:46:45:2e:06:f4:71:
ae:04:b6:48:a5:b3:37:0a:a3:e0:5b:f5:a4:a3:1a:b5:09:64:
54:5f:27:20:15:2a:18:b8:73:26:f8:81:6b:e8:99:f2:b9:1e:
84:96:8f:60:8f:76:35:02:04:5a:1c:70:6d:87:56:f4:04:b5:
5e:59:95:76:a7:f0:d0:d6:37:35:72:c9:31:4e:4e:25:a9:f6:
b8:ec:b9:69:e2:4b:92:31:e4:bf:0a:6e:da:0c:c4:dd:c7:04:
76:a8:41:a3:95:2f:76:7f:10:e1:5c:ad:d7:ba:e5:c6:06:13:
b7:25:70:c3:f1:4c:84:1d:f1:48:1d:a1:cd:88:bf:37:7e:13:
bb:df:59:bc:b0:87:68:90:5c:6f:1c:e8:84:a0:fc:8d:f1:9b:
ad:47:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:32:14 2025 by rpki-client