Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
File: 8vZyvbewdlkUflh9RDGqYE92o4Q.mft (raw, json)
Hash identifier: pOYz9EugFAhcR7B1jLHXh8dlZE/5kb924u8fEEftvQU=
Subject key identifier: 72:A9:1B:94:C3:4E:4C:24:49:34:E9:F1:7C:01:08:A7:43:1B:15:02
Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
Certificate issuer: /CN=f2f672bdb7b07659147e587d4431aa604f76a384
Certificate serial: 0196493365304018DA914FAA23992C49B194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
Manifest number: 148A
Signing time: Fri 18 Apr 2025 14:00:27 +0000
Manifest this update: Fri 18 Apr 2025 14:00:27 +0000
Manifest next update: Sat 19 Apr 2025 14:00:27 +0000
Files and hashes: 1: 8vZyvbewdlkUflh9RDGqYE92o4Q.crl (hash: S3fEPhYBmLHFqT8e95QOidZuNdSihF80XkoPXCnbAVA=)
2: MZX1sQ-Npgh0Pud-IcGKNSLyo0k.roa (hash: U9/To+oLXeceO29CXxgG6V0U8rAZo8+5KCoNTba0dLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:33:65:30:40:18:da:91:4f:aa:23:99:2c:49:b1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384
Validity
Not Before: Apr 18 14:00:27 2025 GMT
Not After : Apr 19 14:00:27 2025 GMT
Subject: CN=72a91b94c34e4c244934e9f17c0108a7431b1502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:ec:c8:e6:8b:59:54:e5:69:13:48:8f:88:
e2:5f:b0:ba:4e:e5:52:26:c0:5e:42:64:73:3f:6a:
2f:a0:b1:23:c0:4c:65:53:de:e8:e8:84:00:ac:73:
67:21:35:a9:ab:23:f5:9f:fe:7d:99:68:d2:fb:2f:
f9:f4:d5:75:a7:12:b9:ed:10:96:77:f2:69:0b:7d:
f4:20:77:f6:f4:f4:1a:8e:72:16:c0:14:c6:39:1e:
32:dd:be:a3:74:1f:90:ff:e2:75:b1:be:4d:e8:97:
c2:2f:41:74:5d:10:68:90:89:e7:a5:48:21:96:16:
68:29:de:73:81:9d:c2:f4:90:dc:72:fa:5e:d8:88:
f0:ea:dc:86:0c:8f:a7:3e:14:33:35:0a:59:76:45:
7b:f8:a4:ee:c6:c2:f7:36:7d:f5:94:44:1f:33:53:
5f:d3:83:64:41:8e:37:09:50:56:57:d3:6a:dc:3a:
4a:c8:d8:b6:9a:97:93:28:70:a0:c3:4f:78:91:00:
0e:13:ba:0e:f6:0b:41:dd:3c:f3:c4:86:14:79:b4:
62:95:6f:06:82:8c:8b:8f:b0:44:67:0d:e9:07:9a:
55:41:ff:17:ed:e1:01:43:1f:09:1b:90:88:46:e3:
23:1c:99:19:85:73:cd:9b:52:7d:c1:d0:fc:b7:d8:
d1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A9:1B:94:C3:4E:4C:24:49:34:E9:F1:7C:01:08:A7:43:1B:15:02
X509v3 Authority Key Identifier:
keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:28:24:72:ce:8b:35:86:7f:d4:98:b2:1c:e4:54:af:6a:9f:
7f:8c:84:d0:c7:01:a7:d1:50:1f:84:1f:24:9c:03:26:25:d0:
4f:68:ac:7a:f3:20:a4:9a:b9:1e:b2:90:a7:4f:3b:a7:ee:26:
b0:86:ca:63:62:49:54:81:60:24:aa:9a:bb:22:1d:69:0a:e6:
28:4c:81:79:19:46:81:c9:e2:fd:3c:db:cf:22:f8:87:f7:2e:
2e:ad:b7:ea:9c:2d:ba:54:75:ba:a6:02:d8:3a:56:3b:dc:55:
c3:86:f3:0b:29:f9:dd:14:6c:58:43:09:4c:e7:78:25:3c:ba:
74:76:8f:71:ce:ef:bc:60:0d:f8:71:6f:d8:3c:c3:bf:a2:6b:
19:d6:28:17:9e:80:a4:cf:fb:21:32:35:98:21:57:1c:db:7f:
26:08:7c:ce:9c:c2:61:63:7c:ee:e1:b2:1e:ae:93:09:a8:42:
12:dd:1d:97:2a:96:51:1e:7c:c9:37:c2:00:df:3c:71:95:9e:
9b:7d:f9:8a:a3:25:b8:07:21:cd:41:86:76:bc:46:57:9f:33:
ad:5b:1c:b0:8e:30:f1:b5:e9:77:04:02:45:b4:f0:34:b8:f5:
25:9a:a3:de:57:2c:fd:8e:fb:c3:a4:83:39:04:01:68:61:25:
fa:d0:1a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:40:25 2025 by rpki-client