Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
File: 0xQt8vZwlAzPWksnoNDJh-zIhlY.mft (raw, json)
Hash identifier: s5c8keQFUTV67Pvf0Dxo3Wd4xbRxDHgBAL/1aIZJCSk=
Subject key identifier: 03:92:FF:20:BC:67:A3:AF:BB:F7:8A:58:09:F3:75:15:57:9E:E1:9B
Authority key identifier: D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
Certificate issuer: /CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Certificate serial: 01958EF385E839A4C98EFDD21690416D4468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
Manifest number: 01A8
Signing time: Thu 13 Mar 2025 10:01:18 +0000
Manifest this update: Thu 13 Mar 2025 10:01:18 +0000
Manifest next update: Fri 14 Mar 2025 10:01:18 +0000
Files and hashes: 1: 0xQt8vZwlAzPWksnoNDJh-zIhlY.crl (hash: vqI48migR2ymnsiUO3kOMPyrnUZ9h15+NNpO5QGIXa0=)
2: DxWkaJkNeo1GnfX8PTB6m_7NDo8.roa (hash: 1C13Qsc+uAlJmXy/kak788lVFXMyWIaA+AZiv7RcjGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:f3:85:e8:39:a4:c9:8e:fd:d2:16:90:41:6d:44:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Validity
Not Before: Mar 13 10:01:18 2025 GMT
Not After : Mar 14 10:01:18 2025 GMT
Subject: CN=0392ff20bc67a3afbbf78a5809f37515579ee19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:71:70:86:eb:5f:09:62:4e:d8:ee:da:0d:
9f:fd:c3:cb:bd:fb:9d:b1:ff:8f:67:6b:d6:03:de:
5c:7f:89:22:5a:30:93:17:c9:b8:d6:47:31:b7:35:
13:cf:61:15:32:76:b5:8e:a4:e2:bd:83:7f:b6:52:
6c:cf:6a:fc:a7:f4:a0:cc:36:64:6a:8e:1d:84:65:
60:42:79:65:91:f8:5a:d0:f2:0e:dc:ba:49:d7:20:
26:db:27:c8:65:3b:78:b6:7e:41:fd:45:00:be:14:
c7:50:3d:2d:25:d8:a6:36:ac:de:0f:35:98:90:e8:
89:76:b9:80:6d:28:8e:37:7d:33:f5:18:da:9a:2b:
30:f5:ee:d3:35:34:bf:c8:06:1d:4f:e3:3d:61:a0:
3f:51:4c:96:86:f5:95:b1:67:d7:17:2f:a9:6b:72:
92:ad:7d:68:0f:f6:c3:9e:85:59:10:b0:13:23:98:
c3:b0:04:b0:43:db:82:91:5b:dd:37:7b:b1:9f:e9:
ef:8b:14:2e:a2:4a:34:fc:11:e4:df:9e:9a:a4:84:
34:7d:71:f7:0b:80:fd:c3:57:5c:2c:9e:ba:08:6b:
9e:8c:97:8c:15:42:73:b4:b3:00:c3:a1:53:6d:27:
c5:39:57:1c:1d:27:8d:4a:8b:8f:68:2f:b9:41:c8:
a6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:92:FF:20:BC:67:A3:AF:BB:F7:8A:58:09:F3:75:15:57:9E:E1:9B
X509v3 Authority Key Identifier:
keyid:D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:88:07:09:5a:77:d6:f8:03:00:62:d6:ef:38:76:c9:ad:22:
be:a0:f7:07:3d:4c:50:ad:a3:90:47:88:22:4b:44:79:da:55:
b7:28:88:ce:58:d6:3a:d6:47:09:45:02:fb:b6:e1:c3:6b:ab:
57:f2:dd:77:e5:54:38:9b:ad:fd:e9:fa:6f:b1:85:2f:ea:cd:
35:e0:2a:f7:ad:f0:9a:c8:2c:fb:f5:fa:58:ac:7e:79:6e:85:
27:c3:fc:02:70:00:07:29:ed:51:19:f4:a5:2f:22:6e:70:c6:
0e:5d:86:ac:38:c8:9f:ed:d7:d2:14:bc:df:91:31:5c:4a:a7:
ed:b9:39:b2:9a:33:68:0c:6c:b3:64:80:40:95:4e:02:4f:ac:
de:81:c2:82:b0:ec:28:dd:10:f6:53:54:96:e2:2c:e0:58:84:
dd:ef:af:c5:e2:6b:98:4f:c4:b2:a7:0a:ae:32:95:f2:16:4f:
b3:8f:0b:9d:23:ea:7e:2c:2f:cd:73:45:7f:0a:34:cd:53:62:
4b:43:26:9f:a6:1b:51:d0:49:2d:09:c6:32:44:5e:db:cc:7e:
a9:34:63:da:91:1b:44:c7:18:81:e6:e3:eb:3c:bd:d1:7c:5d:
cd:59:38:a5:f9:52:1e:dc:ad:5d:8f:5f:15:8a:28:c7:cf:03:
6e:1a:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:02:55 2025 by rpki-client