Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
File: 1hCKSF368GqTH1Q8CFoAnGrqLZw.mft (raw, json)
Hash identifier: 74oAQ/rpdB2kVGDD/+ZNrCgBZ30mxWEwzF2HcpBAP2I=
Subject key identifier: BC:FC:1B:64:D8:9B:CE:7B:3C:4B:65:18:D6:92:E8:42:0F:09:47:E6
Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Certificate serial: 01964A460F580105CF2B180E154D9C50AF94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
Manifest number: 0802
Signing time: Fri 18 Apr 2025 19:00:27 +0000
Manifest this update: Fri 18 Apr 2025 19:00:27 +0000
Manifest next update: Sat 19 Apr 2025 19:00:27 +0000
Files and hashes: 1: 1hCKSF368GqTH1Q8CFoAnGrqLZw.crl (hash: xw1PZ6tSlDJiW3KTVFCwmjGk1m8GJ+DNJQOuNlgkLTw=)
2: XYlDbmNEweM6LqFALkkvUh2W9lE.roa (hash: 9gP6l/HCX+2ev9Uk9YYU1pfiHW7Ig/5Pk5coTY/utmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:0f:58:01:05:cf:2b:18:0e:15:4d:9c:50:af:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Validity
Not Before: Apr 18 19:00:27 2025 GMT
Not After : Apr 19 19:00:27 2025 GMT
Subject: CN=bcfc1b64d89bce7b3c4b6518d692e8420f0947e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:af:6d:af:55:5d:1f:bb:cf:65:21:f9:05:
ec:a2:22:f0:25:fa:c0:9f:1a:df:01:cb:14:b6:f0:
71:e5:47:dd:06:c4:f9:7c:bb:54:7c:b0:8e:52:41:
ed:f4:53:f6:d0:77:56:ba:d5:96:f8:d2:d6:ce:6f:
6d:42:ef:9a:61:61:0b:7a:a7:b5:4b:45:d5:7a:06:
e8:4b:fb:f9:3d:4d:36:87:b3:57:48:5e:6a:0b:f3:
60:b8:7a:74:a2:45:2e:32:b9:5a:ab:18:ad:a4:a0:
4d:be:3b:87:b9:d4:05:19:cb:3e:9b:3e:12:a4:6c:
16:54:40:9c:a6:59:83:8e:6e:9d:42:23:f5:42:fd:
ac:33:1e:e9:28:84:0d:e6:22:e2:3a:90:5d:16:a8:
3a:61:5a:ed:78:89:06:18:d4:c1:20:85:63:22:aa:
3f:18:08:98:28:74:28:9f:0a:63:11:28:6f:cd:03:
e9:69:fe:7a:d2:12:4e:03:07:dc:10:ef:f0:07:1d:
18:a7:80:c9:ba:07:71:e0:e2:4f:2b:52:86:e9:37:
48:26:32:d6:1b:4c:bb:6a:64:bc:09:38:9d:25:e7:
fb:51:3e:ef:d1:82:34:99:a0:c2:27:ea:09:86:8f:
1c:78:6c:f7:3b:c4:58:4c:c4:c0:a2:93:06:33:33:
81:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FC:1B:64:D8:9B:CE:7B:3C:4B:65:18:D6:92:E8:42:0F:09:47:E6
X509v3 Authority Key Identifier:
keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:04:32:fb:40:f1:61:55:c0:4e:c7:5b:50:a4:33:f4:2d:45:
92:66:6a:78:a9:ec:5b:bf:bd:10:41:45:74:0c:28:bd:40:e4:
93:0c:16:c3:78:c8:d9:98:99:47:9f:29:73:a7:57:f1:5a:d3:
5c:72:75:3e:e7:97:03:d7:6f:80:a1:b9:39:37:56:95:f5:f4:
ba:ce:2b:83:6e:da:46:be:16:0a:3b:88:57:18:a9:66:49:de:
28:ab:93:e4:c5:5a:23:9d:30:e0:90:13:21:f8:aa:de:ba:de:
96:56:f3:22:b3:61:34:58:0a:09:4b:a2:d5:ba:9b:14:a4:56:
fa:96:a1:d1:35:fc:2e:1a:3d:9d:3b:1b:9c:25:0a:ef:63:19:
8e:70:f3:82:35:02:94:1b:98:76:6a:0b:41:c0:eb:4f:81:28:
e3:73:d8:44:a3:14:37:d6:2e:9e:50:e7:89:e2:98:b5:41:bd:
9a:b2:05:24:85:bd:95:38:06:21:16:32:8e:b8:84:42:27:af:
20:54:f7:2c:2a:be:b0:d2:05:18:af:71:21:3a:d6:c8:6d:f4:
f8:1b:d8:00:e3:06:a1:3a:bd:6d:3a:6a:e4:78:23:de:15:b3:
f5:7e:ee:e6:d4:0b:4d:0b:df:6b:d1:52:41:95:b2:11:2d:31:
b0:47:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:18:53 2025 by rpki-client