Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
File: dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft (raw, json)
Hash identifier: FWfwVzpED/wan8YPUcYhVI8jAtkJ4leDfYY/8elxiaY=
Subject key identifier: 17:9D:A4:2A:38:86:F4:13:F0:13:0D:AB:8A:47:A5:61:D2:36:D1:BB
Authority key identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
Certificate issuer: /CN=740f65f302335baa90ed81c05384d53f2332391a
Certificate serial: 01958CCE4D4A94062E58353CF6C1FBE3D6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
Manifest number: 05A8
Signing time: Thu 13 Mar 2025 00:01:25 +0000
Manifest this update: Thu 13 Mar 2025 00:01:25 +0000
Manifest next update: Fri 14 Mar 2025 00:01:25 +0000
Files and hashes: 1: WofWi7AY2voZ8zuxEwCCF11Li9Y.roa (hash: SwJtYvJm5nh+3634W4p5oPoXAQ3iVFOZXE2jIXt509U=)
2: dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl (hash: KjqftJag993nk0BkHxOns6X+ibIzvKP0iNS0kp+61vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:4d:4a:94:06:2e:58:35:3c:f6:c1:fb:e3:d6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=740f65f302335baa90ed81c05384d53f2332391a
Validity
Not Before: Mar 13 00:01:25 2025 GMT
Not After : Mar 14 00:01:25 2025 GMT
Subject: CN=179da42a3886f413f0130dab8a47a561d236d1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:0e:62:3c:7a:71:cc:85:bc:1b:f5:ee:48:
cd:e4:ca:52:47:5f:37:a5:2e:4d:12:42:5f:f9:42:
40:31:55:a6:8c:a9:fc:9a:e4:86:68:4d:40:cd:6a:
4b:df:dd:2f:02:9b:eb:bb:33:8c:7e:4c:6b:a0:79:
0a:23:58:88:4b:e7:7b:80:96:6f:fb:df:bd:da:46:
8b:6e:63:05:00:dd:ce:61:d8:d9:2c:0b:d2:d6:21:
1f:af:66:95:0f:fb:b2:b8:2a:a5:5c:74:90:4d:fe:
8d:b3:34:04:08:17:ed:c9:cd:f7:05:cd:58:5a:d7:
a0:69:9b:25:6f:1d:3c:eb:08:ee:b6:e2:de:b9:46:
f5:bf:bb:1f:84:ad:78:38:0f:d6:d5:7d:b2:e9:2d:
68:4d:35:fd:67:f9:34:a5:7f:e4:df:d4:6f:e5:1c:
18:94:31:6a:76:85:bb:fa:09:0d:76:81:d7:3e:90:
67:21:3f:a9:59:13:49:2e:cd:9c:ea:b3:f0:55:23:
91:a9:f9:d9:b1:dd:41:ad:15:ba:09:03:47:0e:c6:
d8:3e:f3:68:74:e9:00:eb:7b:f6:f8:a9:30:d9:1d:
ff:e4:03:0c:60:a8:34:57:87:5e:d0:69:88:56:b9:
0a:ed:d9:8f:21:2b:d4:fb:f3:1d:4b:31:5a:05:f1:
4d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9D:A4:2A:38:86:F4:13:F0:13:0D:AB:8A:47:A5:61:D2:36:D1:BB
X509v3 Authority Key Identifier:
keyid:74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:95:31:55:20:18:74:69:57:54:44:9c:1e:f3:4b:de:60:4d:
13:cb:bd:b0:fe:13:a3:33:ac:a5:1b:f4:ac:b2:35:fb:d5:15:
93:1f:f0:4a:d1:ce:2e:69:d5:06:a4:0f:f1:6c:29:52:1d:89:
36:11:64:a9:b2:a3:61:47:b3:69:d1:ef:a8:32:46:b2:40:40:
72:7f:63:51:c5:21:6a:91:fd:ef:02:e9:2a:67:e8:d1:d7:fb:
71:f5:4a:ae:c3:34:3d:85:ab:40:f6:c6:7c:16:01:74:fe:73:
41:5e:ee:8f:ab:80:1a:d6:9a:87:b4:eb:64:00:aa:14:5a:70:
fb:e7:84:ee:f3:0f:b0:7e:6c:4c:23:eb:cf:e3:10:6b:a9:ff:
50:9f:8c:6c:34:ad:12:a2:42:54:fa:e0:71:28:52:6c:8b:6b:
0e:ac:c7:45:19:7f:3f:99:db:5c:59:d4:da:ab:7b:54:f4:12:
74:82:bb:45:dd:34:86:7d:b5:9b:8a:db:56:5e:b1:e2:81:9a:
42:6c:8c:ca:94:3c:ae:39:92:83:ea:87:8b:eb:49:a3:43:1e:
d7:5b:1a:3f:e7:5c:a5:27:8f:b3:bc:7d:12:87:40:00:50:7a:
72:43:8c:d8:bf:0c:65:92:62:62:4c:92:89:61:29:ee:07:90:
f9:98:22:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:43 2025 by rpki-client