Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
File: d8LYpgGX_HveZPw_rRDrLaT-h3k.mft (raw, json)
Hash identifier: Px1oRMkcqPIG2kI16Ti1JuU/mAD++ZFC6VbhqwlVTLY=
Subject key identifier: 86:C4:DE:8D:98:6A:4D:A3:D2:F3:4C:6D:A7:79:ED:05:AE:4E:4E:C0
Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
Certificate issuer: /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Certificate serial: 01958F610986DD8E068DBD6D85AFFD40A3AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
Manifest number: 04ED
Signing time: Thu 13 Mar 2025 12:00:56 +0000
Manifest this update: Thu 13 Mar 2025 12:00:56 +0000
Manifest next update: Fri 14 Mar 2025 12:00:56 +0000
Files and hashes: 1: Fio9S4kkM_6MY_PyvY4nnlbZSX0.roa (hash: MLkm/zb7dfsD7k0W1D+pAVDUongRrbvCkAFDtBq/FSI=)
2: d8LYpgGX_HveZPw_rRDrLaT-h3k.crl (hash: ZBxtpBnBiV+bAUeq4UURNvMv4El/4LxFu4fYJPa2Ggo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:61:09:86:dd:8e:06:8d:bd:6d:85:af:fd:40:a3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Validity
Not Before: Mar 13 12:00:56 2025 GMT
Not After : Mar 14 12:00:56 2025 GMT
Subject: CN=86c4de8d986a4da3d2f34c6da779ed05ae4e4ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e4:82:3a:cc:e7:50:d1:71:43:8b:e1:3b:fc:
1b:55:7f:ff:d9:8b:84:f4:c7:44:1c:92:4b:ef:77:
e5:7f:7c:29:1a:59:fb:17:ea:dc:ea:85:b5:75:1d:
0e:6c:3e:10:fc:c0:80:71:ae:ef:7b:d6:20:d4:ce:
aa:99:b4:e5:41:ea:89:93:ba:ea:82:92:10:ec:3c:
a6:11:e5:1b:9c:60:7e:9b:af:7f:9f:14:bb:52:25:
bf:06:1b:0b:c1:b6:a5:86:06:04:75:95:84:ba:0b:
0c:57:90:e8:a3:99:a0:b5:35:0b:87:e8:df:36:1a:
56:ff:cb:ed:72:b6:a1:d4:99:57:1c:f2:38:bd:5c:
87:a6:b1:30:04:5a:08:0a:81:b8:a4:ba:1c:9f:37:
b1:60:80:82:77:1e:3d:43:e1:11:0c:95:56:01:7b:
10:d1:37:66:53:02:fe:f1:ff:91:64:5b:d8:bb:11:
e4:cc:1a:cf:d9:8a:97:2a:c5:93:ec:88:42:27:46:
a3:cd:0a:b8:ed:1e:65:36:28:43:f3:e5:a4:47:2a:
da:46:71:ca:e4:bb:dc:36:21:eb:5a:27:d7:6f:96:
9e:d8:1e:0d:d4:70:67:3a:e8:86:34:c8:4f:85:67:
98:cf:5c:04:53:9d:58:6d:5f:3d:5f:a7:4e:03:c4:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C4:DE:8D:98:6A:4D:A3:D2:F3:4C:6D:A7:79:ED:05:AE:4E:4E:C0
X509v3 Authority Key Identifier:
keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:40:52:16:5f:20:73:ef:64:62:10:f5:ea:8b:a5:71:ba:ff:
04:86:cb:de:45:21:6e:d6:73:28:78:bf:6a:6f:70:b7:6f:81:
6f:b9:4e:81:48:62:34:98:a3:d3:9c:01:8e:21:16:6b:78:c0:
97:11:79:c1:9a:be:6d:45:be:8c:97:4c:78:f7:8e:be:1b:90:
06:41:5a:62:31:80:cd:80:31:27:a2:6b:c7:4a:33:93:12:a6:
7d:ec:48:b3:36:98:7d:e8:4c:cc:5f:c0:79:f9:21:cf:50:6e:
fd:2a:3b:5d:48:ca:5d:95:e3:c3:9f:ff:6c:f6:41:21:ec:fd:
30:ea:b5:1b:97:4d:aa:be:7a:a5:d5:ca:52:30:d7:85:c2:07:
e6:26:5d:22:ea:34:49:7e:22:5b:cc:3a:17:38:ad:24:59:5d:
bc:1e:35:42:5f:b4:c2:98:42:3d:64:a9:db:65:20:02:be:63:
9c:56:44:72:3d:7e:c9:e6:b7:4c:72:37:12:40:b5:ce:91:69:
4a:cc:ff:22:c7:e8:de:07:57:3c:9f:f6:2c:72:86:6e:e3:2f:
e0:69:5a:53:83:be:01:35:07:34:25:d2:8a:52:da:07:2c:5b:
db:1a:7b:99:e4:31:4f:65:16:5d:97:92:29:4e:56:dc:fd:b6:
65:c1:11:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:50 2025 by rpki-client