Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: 46c3CDIosemj0bJQ5GMTJtEGCBWyXXm/Sk0wn9E1nsw=
Subject key identifier: FA:8A:5C:F8:6D:E9:2B:A3:BA:AC:62:22:8C:20:13:80:6E:77:57:A2
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 01958CCE00E0EE881552A4D4D0A97AA8682B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 0DEE
Signing time: Thu 13 Mar 2025 00:01:05 +0000
Manifest this update: Thu 13 Mar 2025 00:01:05 +0000
Manifest next update: Fri 14 Mar 2025 00:01:05 +0000
Files and hashes: 1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: JDWLpQqUVc4U4o2xM7OZVOo6gyOP5qOYyp/mewldoxE=)
2: ju7OLwWOvoLnlAHiuO4kBTFVzwY.roa (hash: e9FAsffXnl64K8Cv3+KjxTUevpgUYG3UY/wewoBEVBQ=)
3: nbL7-TNKQqJ1-yJVoHEn9a5u6DU.roa (hash: tfXwKToKmsCep/7a6KKpGiz+Hfu7rsnL13FXZOQiKEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:00:e0:ee:88:15:52:a4:d4:d0:a9:7a:a8:68:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Mar 13 00:01:05 2025 GMT
Not After : Mar 14 00:01:05 2025 GMT
Subject: CN=fa8a5cf86de92ba3baac62228c2013806e7757a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8c:eb:b2:1b:d2:08:7d:46:aa:5a:08:61:49:
7b:1f:f5:63:5c:06:0a:05:90:0c:2f:36:4f:ed:d5:
63:25:65:86:a9:30:42:05:8d:cf:63:61:31:96:8b:
da:d0:b4:61:da:fc:e7:6e:9d:f2:7e:84:29:04:95:
b4:90:f5:69:8a:87:15:43:7a:e9:c3:a4:54:44:27:
61:ae:a8:64:56:4d:dd:b4:b9:4e:a8:48:78:40:89:
e8:9e:1a:d1:27:36:b8:c0:81:7e:3d:7e:37:e7:e1:
48:5e:3b:01:4f:de:66:21:bc:e5:82:e2:1a:8e:01:
e1:ab:73:49:b1:84:5b:62:73:76:cf:da:90:b3:24:
98:4e:9b:41:ce:a2:5c:cd:6b:db:6b:39:89:e0:a8:
85:63:24:1c:4b:b9:6f:d6:d1:38:c1:8c:b7:3a:64:
97:2c:94:b9:a0:de:1e:5d:bb:68:95:26:20:f3:a5:
e2:eb:c8:f2:20:9b:8b:d1:68:13:29:e5:cd:f7:a1:
08:35:ae:e0:ba:3c:0b:42:d6:ee:24:1d:c2:66:32:
0e:45:f6:6b:df:18:67:4f:e3:2e:c0:6f:20:58:4e:
79:b5:3c:bc:3a:57:d9:4a:dd:00:93:b8:4a:60:d1:
32:69:60:9c:aa:3a:30:b2:ad:4a:26:47:6a:1c:39:
7d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8A:5C:F8:6D:E9:2B:A3:BA:AC:62:22:8C:20:13:80:6E:77:57:A2
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bb:cc:aa:81:16:e9:4e:8a:af:80:0f:17:96:02:6c:d2:47:
54:19:11:aa:ef:d9:ba:b1:73:95:f9:fb:b7:88:a1:06:d1:51:
20:ef:0e:3d:56:55:99:55:ca:34:bc:4c:d3:36:1b:55:05:99:
78:3e:2c:11:aa:7e:81:f1:1e:7b:ff:61:d0:6a:3d:9f:99:72:
de:75:03:8b:28:ab:92:ee:a2:68:87:48:fc:18:22:f7:39:87:
c2:81:dc:8c:eb:89:59:8b:43:d6:07:1c:23:bb:a8:53:ba:b8:
85:e5:c1:a5:0d:f1:91:f4:b7:28:6c:7e:64:0e:b1:1d:f4:bd:
5b:0b:2a:2d:33:de:d1:0f:96:b7:0b:f0:44:88:93:09:e4:da:
a1:e7:40:bf:f3:e4:87:cf:d4:30:49:84:36:ea:e4:a3:c9:e3:
6f:7f:68:6f:5b:e4:ab:a6:b3:a5:94:23:bb:d0:0b:a8:3a:b1:
e8:50:29:da:0b:32:6f:90:51:51:70:05:6a:a2:d4:d2:27:f6:
1c:62:5b:6f:bc:44:19:8a:19:eb:22:5f:05:57:1a:74:23:c7:
f3:02:ad:91:98:60:a0:53:01:06:46:d0:07:83:b4:98:2c:73:
82:67:da:eb:4b:09:67:15:ea:1d:36:ec:8f:19:e8:fb:3f:1a:
e6:37:10:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:18 2025 by rpki-client