Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
File: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft (raw, json)
Hash identifier: dpfgfsgnRav+yEK1P6z0WZm1Ec8bq3Yx7WOBrioSaco=
Subject key identifier: AE:6E:4B:4C:2B:65:5F:5E:FA:BD:F7:6F:2C:26:5C:53:6B:7E:A0:AB
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Certificate issuer: /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial: 01965726472A268803AFBBABCCE2837A5045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
Manifest number: 0B04
Signing time: Mon 21 Apr 2025 07:00:48 +0000
Manifest this update: Mon 21 Apr 2025 07:00:48 +0000
Manifest next update: Tue 22 Apr 2025 07:00:48 +0000
Files and hashes: 1: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl (hash: 2GB8EXKoKn5Uxg/GtvuOjw522xhInmrWu/SE22qQqkE=)
2: ViytvvvqRpbhZ8khzk-URy1_cok.roa (hash: GO9E5IMUAfx38THMM6EhNHK1/Vpo8T9/VGp4F+NJQF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:47:2a:26:88:03:af:bb:ab:cc:e2:83:7a:50:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324d0f47297680535eb2799189db888b4066782
Validity
Not Before: Apr 21 07:00:48 2025 GMT
Not After : Apr 22 07:00:48 2025 GMT
Subject: CN=ae6e4b4c2b655f5efabdf76f2c265c536b7ea0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:bb:eb:8e:20:73:a2:97:77:df:d4:21:8c:
ae:8c:a9:1b:a4:1f:56:6b:df:70:84:6e:d8:3e:d9:
74:28:db:70:22:30:8f:f3:4b:bd:e1:1e:ae:30:aa:
8b:98:53:ed:09:04:da:73:30:81:1e:f2:7d:3b:d5:
59:31:1a:ee:8d:09:5f:6a:53:58:59:e4:68:3b:64:
d1:d5:ed:67:f7:02:19:71:36:b8:3d:0d:87:cc:6d:
d8:c3:26:57:a0:09:53:bd:e1:e4:a1:7e:74:40:b4:
e1:54:d6:26:d3:c4:dc:83:10:32:38:d3:09:2c:0e:
fa:d7:b7:8b:bf:57:7d:bd:1b:86:a7:e8:3f:5f:62:
2e:8e:65:c7:95:c6:ec:d6:f4:c1:db:a7:2d:bb:38:
46:ca:fe:48:a0:ec:9d:7b:d2:bf:09:6a:75:eb:d1:
57:24:f7:e5:6a:c3:70:6d:da:d9:7f:28:8c:e7:90:
b5:77:ac:89:8a:ad:10:2d:5a:52:45:e8:24:05:9a:
ab:a0:5b:b9:d7:87:03:a1:08:bf:a4:ab:62:0d:1a:
5b:0b:67:a6:04:21:00:fd:c4:43:54:81:6e:d2:fe:
fe:a1:7b:6e:ed:d1:5c:31:34:1a:b0:85:e9:33:1a:
34:7c:08:ed:32:35:7b:2a:ad:24:77:e5:aa:c4:2b:
59:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6E:4B:4C:2B:65:5F:5E:FA:BD:F7:6F:2C:26:5C:53:6B:7E:A0:AB
X509v3 Authority Key Identifier:
keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:51:3c:07:ae:ab:e3:c6:85:ed:0f:00:ae:ef:d0:46:04:a5:
d7:73:26:31:52:19:97:26:c4:83:b9:76:f4:4c:3f:c1:c3:d8:
da:f1:60:01:11:64:3a:41:d6:af:cf:8d:1f:8f:8f:98:d9:91:
80:ee:d6:be:40:fa:d7:d0:c1:00:74:d3:ee:a3:ae:63:b4:34:
c7:cc:6c:93:b3:63:45:bd:a5:d3:46:92:a4:37:a4:7c:cb:f5:
ee:7b:c2:37:4c:33:68:21:77:c1:e6:bd:c8:1f:e6:13:1c:14:
c6:7c:8c:80:79:92:ac:32:73:46:ab:0c:d8:9a:75:8d:cd:aa:
13:63:5b:96:1f:b7:1c:c0:53:2e:ee:f4:ff:e7:65:82:71:da:
15:1b:ea:fa:14:dd:50:ce:39:de:e8:b6:a4:ef:20:a0:22:b7:
52:96:f4:cf:53:7c:a4:a3:4e:48:fd:97:d7:32:16:fd:16:0d:
86:91:c5:26:35:a4:12:b8:42:73:ee:bc:f9:60:89:78:8d:bb:
f4:2f:7b:61:59:2a:ba:81:a8:bb:cd:01:24:fe:1d:d6:25:62:
a4:79:95:b2:a2:ac:57:e0:20:64:99:dd:7f:90:df:f9:e2:71:
11:7a:54:f7:d8:70:6a:9d:03:a0:79:4f:48:b7:42:c9:43:e7:
a9:c6:28:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:18:40 2025 by rpki-client