Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
File: 8DBljxbS2I00FkWS_NTeExMfFpU.mft (raw, json)
Hash identifier: 51NX7vRTg/cERtnl9Qdkx0ywgSSHJjLtRWIF5En8EYs=
Subject key identifier: 3A:21:CB:A7:7F:73:4B:30:EA:5E:C0:AC:85:CB:63:C0:21:7A:AF:AE
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 019635AD6A40DA51F530DCE790F484BFB0B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
Manifest number: 0AB4
Signing time: Mon 14 Apr 2025 19:01:19 +0000
Manifest this update: Mon 14 Apr 2025 19:01:19 +0000
Manifest next update: Tue 15 Apr 2025 19:01:19 +0000
Files and hashes: 1: 7__iS0PC1sPpziieUf7cPR0483I.roa (hash: WMdPgkVAgvH1xgF/iLZlNWqwQWtXShkyRu4TdlhutJM=)
2: 8DBljxbS2I00FkWS_NTeExMfFpU.crl (hash: MYNMtsZEnhAT6jDzVExQ+pTez9IkaPQUKcExXfbWAeM=)
3: F7yuxB3rSQXv2e3QR7lP2VYZOl4.roa (hash: Hb0YQdZj2T1tpCI4BSwoqOiW5xXUYr05ZCOvDEHOELk=)
4: N9l24h9HyK6kAtkXD09UL27Eum0.roa (hash: Xv+8Dv2RI7WnHgqmAi/VbFX+HLMpAXUADpkW2PUX/hM=)
5: TACuL0mRuuSZ00EUuEDQYYgL9nY.roa (hash: EEbhhtJ6TUNmkVK+nqQofMESLsYodUnzqvKr3ODtYdA=)
6: f0YSDbM5Fp4SqEnB7Svlvk1Cg-M.roa (hash: 3R84lvwDdPg0KG2eSA0cCdxuOFb1Dl8Y/DbEXSQVXcw=)
7: gz7229OR-UwSeE8Mrmip6_lWRzM.roa (hash: HqILwLXjV1tcVlx0sNjeuEAQfPHai/C6EYXvfZ4gHY4=)
8: v2HXLCZWsI0s9KIXOuBOD4NKWbo.roa (hash: /mndx1AHWJXPlNn93oMmIR/duKvVFpLSwcZoOaPa0GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 14:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:ad:6a:40:da:51:f5:30:dc:e7:90:f4:84:bf:b0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Apr 14 19:01:19 2025 GMT
Not After : Apr 15 19:01:19 2025 GMT
Subject: CN=3a21cba77f734b30ea5ec0ac85cb63c0217aafae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:5a:89:c6:23:80:e9:d2:76:b5:47:fe:93:
02:96:04:8e:ef:80:a4:df:b9:f2:60:15:cd:58:2b:
f4:95:f7:a2:a8:ee:ff:a9:dc:f1:62:90:6d:65:92:
83:28:cc:15:81:6a:b1:ad:70:e7:93:90:2b:b2:f2:
59:b3:7f:74:0f:46:66:c2:26:88:db:b9:3f:3c:a7:
e1:f6:e7:7b:f4:51:2b:b0:c5:81:23:f0:4c:03:e6:
f5:fa:f7:89:04:21:6a:4f:2e:b3:3e:74:3c:83:b9:
7a:80:28:e3:9b:e7:84:57:ef:6a:61:2c:a9:a9:bf:
79:58:ee:cd:88:ec:69:c7:bc:01:fe:d4:30:3e:c8:
bd:0f:dc:e8:00:79:a9:60:37:7b:49:a7:11:9f:9c:
3e:50:f6:80:e7:30:35:8b:40:98:58:12:76:84:76:
a0:91:23:29:38:73:8f:ac:5c:a7:1d:34:30:c8:53:
68:c4:4d:98:e4:ce:93:eb:42:b8:6c:35:20:5c:c4:
35:7e:44:e7:c1:67:74:b9:30:5b:f5:60:5e:93:c7:
37:06:74:a2:d8:11:04:00:90:f3:75:71:ad:90:40:
c1:5e:54:1a:58:7e:68:e2:e2:96:26:df:54:29:1d:
3b:89:8d:bb:72:aa:02:03:26:24:2e:9c:4c:78:92:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:21:CB:A7:7F:73:4B:30:EA:5E:C0:AC:85:CB:63:C0:21:7A:AF:AE
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9e:d8:47:e6:d1:85:01:a5:58:3c:86:d6:fb:15:b0:8f:2a:
e8:44:b2:72:cb:97:2e:6b:30:e6:0c:6b:16:91:84:4c:43:35:
c4:36:6b:49:5f:87:e2:fb:5c:7e:68:b3:33:18:ca:ae:4a:0e:
a5:0b:61:74:4e:99:1a:c4:25:ef:f8:3b:d4:a6:18:5a:5b:eb:
f2:35:f6:a2:c3:45:7e:1d:52:b2:8e:1f:f2:4d:9d:e6:2e:52:
5d:5d:41:62:e3:c6:4c:fc:d8:6f:05:da:d1:b9:a6:6e:b5:a3:
fe:27:ba:58:20:5d:f6:02:04:41:98:f5:73:09:d2:33:c8:8b:
e8:5f:14:78:53:4b:b6:94:a5:ce:96:2a:38:26:cb:cc:2d:75:
26:41:d1:1a:0f:fe:27:73:91:4e:11:0d:ed:37:b7:87:af:90:
5b:cf:d9:61:e4:de:22:23:de:37:6d:4f:81:bc:59:24:c8:b7:
42:ee:34:d5:69:2e:e2:31:10:7d:f8:77:cf:d8:df:c3:e6:bf:
e3:74:88:72:8f:7f:59:ce:80:e2:15:c1:fd:e6:b8:14:ce:de:
be:2f:36:d2:35:23:dc:1c:26:d0:cb:c5:fe:87:c5:45:0e:8b:
07:af:16:9e:09:18:39:be:f1:29:98:10:b8:ad:de:25:3a:c7:
76:0a:c4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:57:30 2025 by rpki-client