Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
File: 8NSBnmY6qUh7aggqd9IjfhuIAqE.mft (raw, json)
Hash identifier: kEr1Ja/9P4pRMbgQnXOeMY4AZMbo5olZjmyrF1JX5/k=
Subject key identifier: B0:9D:45:7D:2D:4A:AA:4A:2B:58:59:3F:93:A4:1C:B6:47:70:B3:BE
Authority key identifier: F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
Certificate issuer: /CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Certificate serial: 01965A94DD715082E146173553F12DB61593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
Manifest number: 0B60
Signing time: Mon 21 Apr 2025 23:00:27 +0000
Manifest this update: Mon 21 Apr 2025 23:00:27 +0000
Manifest next update: Tue 22 Apr 2025 23:00:27 +0000
Files and hashes: 1: 8NSBnmY6qUh7aggqd9IjfhuIAqE.crl (hash: eoLIlNFSOnb5x0NxPW7PV+88yjnfoVhfwdl/BuabmF8=)
2: Sy3V_IgTk4ktGswgBw55mEgUx3E.roa (hash: b8dOVW1U1sP2mqNqvtuzgrz8hyIMvAWuWDCj7ROCZgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:94:dd:71:50:82:e1:46:17:35:53:f1:2d:b6:15:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Validity
Not Before: Apr 21 23:00:27 2025 GMT
Not After : Apr 22 23:00:27 2025 GMT
Subject: CN=b09d457d2d4aaa4a2b58593f93a41cb64770b3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:aa:d9:15:ed:e7:db:38:f9:29:fa:71:37:
63:9a:be:9a:e8:ca:1a:83:2a:cc:f5:f6:56:78:d4:
70:e5:e2:3f:58:41:03:00:48:3c:f0:f5:7a:48:46:
03:b0:c4:47:c8:70:13:1b:e3:c2:f9:c7:79:f8:ca:
75:67:41:ce:31:bc:b3:a5:8b:c2:fa:a9:9d:af:d8:
91:42:d1:80:c4:5a:66:d2:6a:b0:25:75:74:f2:72:
29:91:6a:b1:b9:d5:a5:b1:48:b9:58:63:65:ca:e2:
21:f1:42:59:98:33:7e:a7:54:bd:36:37:f1:9f:6a:
e5:c8:7d:37:fe:3f:f8:00:bd:42:a2:d8:1b:94:65:
47:ef:9c:05:73:9f:be:ad:2d:0a:d2:4c:da:21:c5:
01:aa:fa:79:10:7a:43:97:7c:ae:96:fd:0f:61:33:
d8:8f:90:91:a0:dd:6e:fa:1a:d5:44:aa:bc:31:27:
71:e5:83:a1:cc:8b:08:9a:dd:cd:59:1c:5e:6a:b6:
78:ee:6d:e6:e0:26:33:8d:6c:cb:9f:06:7a:8d:40:
da:db:2a:87:5b:5a:81:20:a3:ac:70:40:2a:99:71:
8e:3d:1a:2d:9c:d0:dd:b0:41:fe:b4:cb:bd:d7:3b:
9e:d6:31:24:ab:1f:41:e8:dd:c5:a5:e7:52:6d:8f:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9D:45:7D:2D:4A:AA:4A:2B:58:59:3F:93:A4:1C:B6:47:70:B3:BE
X509v3 Authority Key Identifier:
keyid:F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:d4:7d:20:1c:61:13:cf:9c:23:64:57:d8:7d:f1:93:d5:f3:
32:5a:6b:85:38:f0:0c:b5:6d:47:bd:8f:a9:ec:55:f2:82:24:
8a:d5:d6:9e:fd:07:4d:c4:44:64:d6:07:02:65:a0:58:67:29:
11:2d:db:52:b2:fc:36:4e:27:58:18:7a:06:48:a1:4b:30:cb:
f9:96:05:95:e9:a2:84:31:6c:2f:52:0f:17:b3:11:80:42:e4:
93:c1:50:0a:25:8a:d9:2c:a8:c5:fa:78:54:16:08:10:b5:e4:
05:3b:4a:b3:2c:f0:21:89:7d:6e:14:b8:5d:a4:aa:51:71:ca:
4c:3c:4f:04:fe:91:66:48:2e:88:72:96:05:f6:80:7d:2b:7d:
54:20:32:4a:80:91:40:ca:bc:62:56:f3:ff:52:24:b9:8a:1f:
3b:5d:8c:3f:6f:aa:93:55:cf:4c:5b:08:27:f8:07:67:a8:93:
ce:eb:0f:0e:57:3c:7c:53:54:11:ea:e1:38:62:eb:8e:55:25:
42:08:f4:88:11:b3:17:1e:b0:75:5d:48:fe:63:aa:e9:1d:a5:
f6:a1:43:c2:f9:f4:f4:2b:8e:d3:1d:fe:da:78:b9:4e:f2:8c:
b6:00:9e:8b:2f:9d:c6:4d:5d:51:bd:49:d8:7a:72:f6:0e:18:
41:f1:56:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:45:16 2025 by rpki-client