Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
File: 8l_UfYNvym90HKo4I5N_S7HxspQ.mft (raw, json)
Hash identifier: JBc7dj8wrZy4OB9NvdNczm3tPaqF2Lb4r2fi4JsXSnY=
Subject key identifier: EF:99:D7:A6:19:58:10:59:CB:30:C5:35:F1:DD:EA:6C:E4:FD:8C:A3
Authority key identifier: F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94
Certificate issuer: /CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
Certificate serial: 01964030162490DC6B86904183404B4ECB25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
Manifest number: 06DF
Signing time: Wed 16 Apr 2025 20:00:14 +0000
Manifest this update: Wed 16 Apr 2025 20:00:14 +0000
Manifest next update: Thu 17 Apr 2025 20:00:14 +0000
Files and hashes: 1: 3yojvf8xLy7Wn7IouQzlSqK0wi8.roa (hash: XkJKLziNIIGZCpFPWVC2bt7aic/Y/irC0qgPRJLIevw=)
2: 8l_UfYNvym90HKo4I5N_S7HxspQ.crl (hash: oixHoehVld+8jQEozXNpozwMMQrPVSx45GdehbuywT8=)
3: zzDFF83rooq9bozHtYL_dATXTDM.roa (hash: MyfSjNe+EtbThUkyyT8a+4fAUtZTRsF/D/cpjHn7JnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:30:16:24:90:dc:6b:86:90:41:83:40:4b:4e:cb:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
Validity
Not Before: Apr 16 20:00:14 2025 GMT
Not After : Apr 17 20:00:14 2025 GMT
Subject: CN=ef99d7a619581059cb30c535f1ddea6ce4fd8ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6c:73:85:af:33:4f:4a:80:59:7e:1b:c2:83:
23:27:ac:cd:4f:e7:e9:2b:0d:27:8f:cd:7c:37:39:
14:0b:76:e6:2c:dd:41:fc:06:27:7a:7a:67:f3:83:
0f:a6:a4:83:f9:13:d6:93:ee:5e:55:56:57:9e:c2:
55:ed:6f:19:29:53:24:d8:3a:b8:86:59:55:66:dc:
0d:86:bb:39:54:d7:76:75:89:d3:6a:f6:51:4a:5d:
bf:0c:22:ea:1f:9e:99:e7:8b:b9:cc:ba:09:88:7e:
1b:42:a5:9e:1d:32:f7:f4:f8:76:bc:f0:61:a1:38:
de:7f:9e:1f:8c:55:55:0e:62:8d:ca:17:a3:2b:22:
ef:0b:55:66:1b:3a:99:a1:54:63:70:0b:ab:1b:33:
52:b6:3c:07:21:08:70:ef:75:ea:f0:94:d5:52:0b:
4e:46:4e:68:90:df:59:f6:b7:33:d7:3a:a4:1b:58:
88:18:a7:a3:d5:f5:3e:9b:5b:ad:b8:c1:48:7f:66:
fa:18:8e:3f:2b:4f:b3:62:32:15:26:81:c9:b1:87:
c9:52:be:cd:13:90:4c:6a:9a:94:9e:62:32:41:f4:
2e:20:3f:65:14:7c:80:ef:cb:aa:28:72:cb:38:58:
c9:fd:27:6c:17:99:d0:39:70:41:9d:3b:c8:62:bd:
e1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:99:D7:A6:19:58:10:59:CB:30:C5:35:F1:DD:EA:6C:E4:FD:8C:A3
X509v3 Authority Key Identifier:
keyid:F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e7:3d:6a:42:0d:41:85:75:af:06:f8:38:f4:2a:35:5e:f9:
82:ce:ab:ab:e5:6d:93:0b:81:54:37:6a:e3:76:8b:9d:2b:32:
35:84:85:58:cb:4c:83:67:73:60:6a:b2:67:dc:64:49:87:ac:
5f:49:07:76:06:c8:af:27:24:3d:a7:bc:af:44:81:e5:5a:f7:
03:fc:9b:8b:53:69:e1:a4:61:a0:e4:34:92:28:5e:95:ff:32:
ee:3f:12:71:40:8d:73:2a:12:13:34:b9:61:55:79:9d:4d:d8:
1e:96:7c:a2:97:11:cf:64:ac:06:c6:79:01:fa:86:c8:2a:c9:
d7:7b:92:d7:e6:03:66:07:76:91:7f:7e:2a:65:d5:40:3a:5c:
f5:0c:95:33:77:4d:d5:dd:a9:c1:d2:26:86:23:4f:5c:f2:03:
b2:26:7b:02:3b:4b:35:0b:2f:46:67:ce:32:de:84:04:a0:20:
8d:a4:f2:de:64:c8:15:d2:02:ec:4e:6e:54:59:8a:a3:89:e5:
70:f3:ff:6b:14:17:02:86:5f:9a:11:80:e3:1c:cf:6b:ce:a1:
2b:46:9f:88:56:f8:80:c4:3c:06:ff:90:bb:72:40:66:07:31:
2d:ff:78:46:cd:22:6d:db:45:cf:a5:89:0a:86:c6:7e:2b:a5:
17:48:1b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:56:02 2025 by rpki-client