Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
File: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft (raw, json)
Hash identifier: Hs0mM+bzpbXOcWZJ/rqOgh+ClXAHFtaZrLayLAomHRA=
Subject key identifier: 1A:31:23:BA:F3:98:2C:50:B3:29:AD:A5:B5:5D:90:24:4E:79:49:57
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial: 01963086F95E0D6A67033F2029E51D16A26D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
Manifest number: 14EA
Signing time: Sun 13 Apr 2025 19:01:14 +0000
Manifest this update: Sun 13 Apr 2025 19:01:14 +0000
Manifest next update: Mon 14 Apr 2025 19:01:14 +0000
Files and hashes: 1: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl (hash: kquGhOs2ixnkoHA7ymeT1xzA7cgdOgxOfpErW8zF91Y=)
2: d-g1g1WIQH2eW5zQOoLECyf2CbU.roa (hash: 4hlHKC2roVEpNMRQA5ne6l615543DSp4qxsP/od40+A=)
3: kHVwAjV50K04XcEC52VZ9Z8xRlA.roa (hash: 2Boh063HYNHe4qTfS7TAeZC6aTKdY96/vHBa+9B6mso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:86:f9:5e:0d:6a:67:03:3f:20:29:e5:1d:16:a2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
Validity
Not Before: Apr 13 19:01:14 2025 GMT
Not After : Apr 14 19:01:14 2025 GMT
Subject: CN=1a3123baf3982c50b329ada5b55d90244e794957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:0e:c1:54:df:ce:5b:22:c9:4f:8d:35:90:
6a:6e:73:97:7f:88:fc:5d:8f:46:4f:c2:0e:0d:41:
36:b7:fd:11:28:2c:e5:ae:64:15:72:cf:3e:35:ad:
62:ef:f2:7e:1f:5c:ca:7a:50:94:f5:5d:0f:77:86:
d0:f6:5b:52:c2:1e:d5:70:8a:b5:a3:64:7e:5c:b8:
1b:08:f7:d0:a5:b3:be:e1:97:fd:26:9b:9d:11:3b:
d9:6f:37:15:5f:c0:d8:15:90:75:ec:07:d1:65:e3:
06:22:61:80:e6:b0:98:f2:ba:2e:79:79:eb:00:63:
73:4a:0b:4f:16:f0:49:56:23:23:74:1e:05:d6:9a:
59:d9:7b:05:e7:e2:da:ca:aa:22:39:31:d0:59:bb:
7d:0d:52:79:8f:51:bf:9f:49:51:9b:32:00:9e:a9:
94:55:fa:e2:8d:b9:d4:41:9e:ba:6e:ed:06:9b:32:
6f:b0:db:63:98:ba:bc:b4:48:5b:8a:48:39:cd:38:
76:6d:fe:f5:83:c2:03:ab:a9:4e:27:8d:0e:53:d3:
1b:62:79:59:c5:80:ca:a7:b9:4d:19:d4:2a:20:1d:
05:e0:6d:8a:ae:ae:00:f4:a8:95:b3:d6:a7:c5:b3:
64:f5:c3:69:9f:f5:73:4f:a6:2a:96:d3:06:0b:07:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:31:23:BA:F3:98:2C:50:B3:29:AD:A5:B5:5D:90:24:4E:79:49:57
X509v3 Authority Key Identifier:
keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:18:17:52:56:8c:c8:b0:b1:76:eb:f6:57:db:67:23:ce:d1:
a0:bc:13:b9:14:90:fa:46:6c:3c:69:46:9f:73:4f:0d:7b:81:
20:03:83:fc:7e:eb:71:4a:35:1e:bb:00:16:07:03:5e:58:8f:
15:c1:a7:08:11:b8:59:ab:33:dd:3a:97:45:ad:58:2a:25:5c:
3a:66:45:31:50:8f:32:93:89:49:ea:95:0c:e7:6f:21:37:c8:
1d:f0:82:13:07:81:5d:65:2b:d5:f8:40:66:8b:d4:2c:9f:70:
cc:48:d3:d4:7c:0d:90:23:e1:95:c2:a4:23:e7:4a:01:2e:65:
17:1d:dc:cd:bd:d9:90:45:4e:f6:f8:2c:ad:76:65:26:9d:b6:
a0:81:b9:3c:7b:b5:89:2c:5c:db:c2:06:da:97:58:53:8f:f8:
a8:88:fc:13:ae:ab:97:2b:b5:59:11:d3:d7:bb:49:b6:1c:84:
12:27:34:6b:35:f7:f4:b1:e3:91:d7:cc:6f:66:80:bc:1b:ee:
dd:97:0f:d5:5c:b6:fa:d4:04:fa:1c:97:d7:4c:6c:05:f6:0e:
00:38:ef:25:9f:b9:10:2f:1b:fe:86:82:9e:7a:a8:2f:24:b5:
e1:95:10:1c:2d:33:d7:42:59:2a:e4:c3:3b:1c:08:f4:a6:a6:
b0:f8:cf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:14:37 2025 by rpki-client