Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
File: ioludoVA84eh3U_52qS4W6SKkG8.mft (raw, json)
Hash identifier: cQVHZv0Pk2VbdY7rWszo6ImpDYYxYjnv3an+gvfVVw0=
Subject key identifier: 21:CF:F2:83:B7:2F:25:4E:11:89:41:BC:10:93:A1:FB:3E:98:23:00
Authority key identifier: 8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
Certificate issuer: /CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Certificate serial: 019658DD3AC65C7F114C6F8A7910A24467C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
Manifest number: 0E43
Signing time: Mon 21 Apr 2025 15:00:15 +0000
Manifest this update: Mon 21 Apr 2025 15:00:15 +0000
Manifest next update: Tue 22 Apr 2025 15:00:15 +0000
Files and hashes: 1: hkbUVfjNOPVhJfq1uQFH-hPB5mE.roa (hash: tqCspEzEqiN+432BqUgHfq1nCv1kB3CNAbRtD1yo228=)
2: ioludoVA84eh3U_52qS4W6SKkG8.crl (hash: PUZjq0srnDe3lOmVZp2tw0L+u+X/ifX+Gywsw2bpfM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 15:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:3a:c6:5c:7f:11:4c:6f:8a:79:10:a2:44:67:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Validity
Not Before: Apr 21 15:00:15 2025 GMT
Not After : Apr 22 15:00:15 2025 GMT
Subject: CN=21cff283b72f254e118941bc1093a1fb3e982300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a8:1f:cf:de:4f:ca:56:22:03:a6:11:fc:0d:
f9:b4:cc:83:5a:33:26:62:07:67:2f:a1:0a:6e:a2:
0c:43:6b:a9:b0:ad:d4:e2:9d:ad:bc:69:76:56:00:
2e:6c:94:c1:e1:e4:1e:7d:5a:28:e0:ed:84:68:0e:
6b:95:fc:09:d9:bc:83:67:5a:17:35:ba:bb:74:00:
04:41:53:0b:2f:04:6c:c3:10:c3:cc:f1:fb:62:b9:
ff:5e:42:10:02:98:42:9c:87:f9:e0:57:46:15:30:
58:d0:31:88:0c:83:ad:12:e5:b9:0e:da:45:33:df:
ad:48:fe:0b:7c:7f:01:00:46:f5:83:b2:53:a6:a2:
4f:24:ae:24:dc:b2:46:ac:38:7b:17:ce:33:d6:40:
47:3b:23:3b:01:9e:fa:4e:36:13:29:20:e9:5a:f2:
3e:84:1e:a1:20:de:50:23:b6:f1:f0:a8:e8:f2:72:
45:80:31:a0:b0:f3:dd:9d:53:4b:df:34:b0:2d:e3:
4c:7f:e2:18:1f:e0:e4:2b:cc:a0:d1:eb:27:c3:fd:
a5:dc:75:8b:f3:ca:63:da:97:56:e3:be:32:35:ae:
fc:9b:17:1c:07:0c:67:be:fd:cd:f3:4d:e0:bd:fa:
af:4a:da:aa:b8:3e:ab:16:ba:bf:49:d7:0e:fc:8a:
e5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CF:F2:83:B7:2F:25:4E:11:89:41:BC:10:93:A1:FB:3E:98:23:00
X509v3 Authority Key Identifier:
keyid:8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b9:79:48:6a:59:1b:46:fe:d0:2e:ca:94:89:a4:a6:af:be:
31:c1:9a:02:2f:44:4b:e3:5f:27:9e:7a:32:53:d9:1c:54:70:
a8:6c:2c:d0:6e:43:a5:d7:e5:c5:f3:4b:16:6f:05:dd:a2:5f:
7d:b8:d3:89:b7:c5:71:f2:ef:72:d8:c3:64:d2:be:3a:92:c2:
3e:22:14:3e:83:9c:b7:26:b0:00:91:dd:76:95:2d:77:d7:5d:
24:bc:6f:11:60:93:6f:79:ef:96:d7:a6:73:8f:6a:cd:7e:f0:
5a:0f:1e:55:ff:64:9a:c1:b1:59:06:0d:70:c8:83:cf:51:69:
d2:f7:6d:bc:d8:71:7b:82:c5:ee:cc:64:38:fc:66:c3:55:7b:
e7:6d:f2:a8:fe:88:7f:c7:e5:ec:4a:24:80:63:45:72:ef:e0:
49:09:78:a8:fb:09:53:5e:87:a4:0e:a3:09:23:55:c7:e2:3c:
37:f7:b3:9e:30:76:dd:01:0b:04:f3:a8:f3:86:e8:fc:0a:e3:
c2:74:e4:f0:23:70:96:6b:7e:b5:ff:a6:0e:dd:4f:f0:f5:5c:
01:eb:0d:95:39:d1:61:80:da:13:15:65:0a:92:00:a7:3c:27:
08:26:ff:34:64:d2:c3:f5:5a:3a:d9:a6:a7:2f:f9:ab:55:82:
ff:48:c9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:33 2025 by rpki-client