Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
File: 8hVRewsgMJ6RZAW54e0hoEaaaJU.mft (raw, json)
Hash identifier: pBmfOOvBs9MPW6wpDNbNY46ecCdyEvExQENlIrfZm6o=
Subject key identifier: 63:A4:21:46:51:09:CD:11:1C:BB:D6:5D:97:B0:81:62:81:C5:C0:74
Authority key identifier: F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
Certificate issuer: /CN=f215517b0b20309e916405b9e1ed21a0469a6895
Certificate serial: 0194C46320435D5FF5D0326D1A0A877D683B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
Manifest number: 5C
Signing time: Sun 02 Feb 2025 02:00:18 +0000
Manifest this update: Sun 02 Feb 2025 02:00:18 +0000
Manifest next update: Mon 03 Feb 2025 02:00:18 +0000
Files and hashes: 1: 8hVRewsgMJ6RZAW54e0hoEaaaJU.crl (hash: QS15DIt+1hHlUfy77jyBYizBo3nua1WwwsL99jpcKQ8=)
2: qCeXwVNQp66WQ27Det0b9KrkJEc.roa (hash: WoKc3ldX5sHKUSOKMyS/VBt9xUxQrJ5xCbXpuIjQb48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:20:43:5d:5f:f5:d0:32:6d:1a:0a:87:7d:68:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215517b0b20309e916405b9e1ed21a0469a6895
Validity
Not Before: Feb 2 02:00:18 2025 GMT
Not After : Feb 3 02:00:18 2025 GMT
Subject: CN=63a421465109cd111cbbd65d97b0816281c5c074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:aa:24:25:0d:44:c9:ae:10:d0:89:8b:67:
89:6d:81:8b:a8:ca:8d:cb:ce:27:59:60:0a:c3:b4:
70:24:19:b8:a4:29:fa:82:f5:31:ae:af:4a:06:2a:
ed:b9:b5:6d:29:ac:96:36:e4:17:c6:23:6a:68:e8:
d0:9a:21:5f:61:3f:e9:b5:15:cf:38:32:4f:fd:cb:
69:d4:2c:cd:33:57:99:05:f0:6f:65:e0:3f:99:97:
a4:97:bf:48:55:63:7f:62:ee:b8:ac:90:fa:fb:ba:
ce:50:7d:3c:8a:1c:6c:ee:21:ac:b3:37:6f:4c:69:
82:15:92:63:95:df:ad:09:b3:c7:29:05:8b:78:47:
6c:90:c5:9b:43:53:bc:13:99:3f:e5:0e:ab:90:ba:
23:c0:9b:31:08:55:9d:17:07:37:d2:11:10:a8:64:
93:1c:70:eb:ec:4b:25:b4:07:da:f2:10:73:0c:74:
fb:4e:0a:d9:2a:50:2d:f2:51:3c:ca:40:ab:eb:05:
06:00:e7:8b:93:64:aa:26:3b:20:72:ac:c6:19:6a:
19:3d:09:fb:d3:58:f3:75:af:fe:57:30:39:11:2d:
4c:a2:74:a2:2d:59:c6:4e:46:01:82:0f:e6:45:56:
48:d0:a2:be:8a:e8:e9:2a:02:81:a8:09:f7:84:2a:
65:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A4:21:46:51:09:CD:11:1C:BB:D6:5D:97:B0:81:62:81:C5:C0:74
X509v3 Authority Key Identifier:
keyid:F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2a:69:f3:40:20:2a:95:32:a8:09:c0:10:34:09:78:4d:f9:
84:2c:03:e2:1c:36:82:62:b2:ab:c4:54:0a:12:a1:44:75:0f:
e8:c9:ac:54:e6:05:ad:a7:2f:31:d1:3e:9c:65:1d:93:27:1b:
c1:2e:1f:c3:06:79:19:1d:ed:74:42:50:e6:5a:6d:d6:4a:ea:
ee:fb:d0:4e:48:67:ca:15:42:70:08:0d:3f:d1:41:b7:91:8e:
4e:6f:38:6d:a8:fe:ae:27:70:89:e2:c2:8e:a5:67:00:01:71:
14:88:73:00:02:29:b7:8d:18:62:34:c5:9c:2c:3b:89:ef:82:
b5:56:8d:41:1c:09:4a:47:84:95:00:fc:75:4e:98:e8:65:43:
ae:66:04:9f:6d:43:ca:65:55:85:7a:31:cc:17:3f:9e:98:a7:
d6:80:19:b0:f5:67:aa:10:a9:09:19:15:6f:66:bb:d0:3c:9c:
3d:f7:69:ae:94:94:1d:26:5d:7b:6f:a2:c2:f6:37:cf:bb:ba:
2b:3f:90:8d:30:04:24:49:1e:af:bc:62:b8:83:43:9f:e0:14:
84:3d:c8:de:92:87:28:be:73:b9:cb:d1:e4:d1:1e:99:b3:39:
06:e1:a2:3e:29:1d:46:d3:a3:6a:d6:8c:fb:e0:3f:c4:66:72:
5c:b9:da:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:06 2025 by rpki-client