Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
File: U8jE-VEgbxq9hqc9HLuzmQfobh8.mft (raw, json)
Hash identifier: OCZBuJMkWrX15qiVdqSD5rxKij37zWFd6LRH76WDWxk=
Subject key identifier: 4F:81:AF:5A:7E:57:CE:32:1F:41:F1:3A:22:8E:D5:A4:F1:04:B9:15
Authority key identifier: 53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
Certificate issuer: /CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Certificate serial: 01964BC6D425CCD108D880683C6A72E1B845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 02:00:43 +0000
Manifest this update: Sat 19 Apr 2025 02:00:43 +0000
Manifest next update: Sun 20 Apr 2025 02:00:43 +0000
Files and hashes: 1: U8jE-VEgbxq9hqc9HLuzmQfobh8.crl (hash: A2bJJEemyFULwqu8Lkjc/aPgy+1Ft3rGz3aMACx9kYs=)
2: gj6Yi2KQAGes4eI6WnlmwiQ6kdA.roa (hash: U/KvyTRHoYm4+lr8DamrffptLgYZWzqgWZ1VwobHzuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:d4:25:cc:d1:08:d8:80:68:3c:6a:72:e1:b8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Validity
Not Before: Apr 19 02:00:43 2025 GMT
Not After : Apr 20 02:00:43 2025 GMT
Subject: CN=4f81af5a7e57ce321f41f13a228ed5a4f104b915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:6f:32:23:6b:9e:4b:99:c8:00:a6:8a:84:
b2:1e:a3:a4:c1:e4:4d:47:a0:a3:db:98:db:19:9a:
d9:97:99:64:27:03:02:c0:8e:43:cc:93:a0:8c:d9:
4c:f9:50:63:c3:77:d6:e8:ff:ef:5a:12:86:78:7d:
58:09:c4:92:e9:91:82:88:e8:e1:64:13:8e:f1:43:
c2:0c:74:aa:39:4b:5f:4c:91:ab:c2:9d:2f:56:52:
04:81:97:4f:db:1f:74:37:22:99:bf:fa:e5:e0:13:
69:78:ab:39:e5:c6:cc:8a:60:81:c1:b8:41:fa:07:
61:aa:ce:84:25:55:05:03:48:9f:2c:42:9b:40:16:
a1:36:3f:c8:75:6d:41:20:75:ac:fd:85:ec:44:d7:
5d:c0:02:57:10:4f:8b:cd:5b:e9:f6:38:be:98:33:
72:d1:26:48:bc:12:47:e9:2b:ab:8f:d6:df:68:98:
d2:84:d1:1b:69:d5:3d:2a:51:d4:88:92:a5:a5:c9:
fc:06:9d:72:06:93:ce:ef:f4:c7:30:58:df:5b:a1:
ed:be:9d:2b:37:8e:4c:ce:72:d9:95:e9:fb:bb:29:
0c:ef:bb:23:4b:ce:b8:fe:e3:75:17:d4:89:6b:1d:
32:ab:7f:c5:4a:65:69:a8:bd:b8:38:ad:73:b1:d2:
7a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:81:AF:5A:7E:57:CE:32:1F:41:F1:3A:22:8E:D5:A4:F1:04:B9:15
X509v3 Authority Key Identifier:
keyid:53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6a:f1:a4:16:6c:04:38:61:50:dd:3e:d7:fc:30:84:29:f9:
35:74:d3:cc:cd:3e:65:6f:b2:6b:99:66:2f:2c:46:c3:7a:6f:
8a:42:d5:3f:28:30:d2:ca:60:06:46:bc:9d:2d:c4:89:67:5d:
e4:17:c5:ba:74:d5:62:52:db:86:27:70:bd:2a:58:76:ac:72:
41:09:91:d2:fc:85:35:e0:c5:5d:b4:ef:5e:55:b7:3a:a8:7c:
56:b6:c7:ae:5a:9a:0b:3e:a9:40:f8:b7:f3:5a:9b:a8:41:b9:
67:1f:e6:28:af:95:48:69:07:f0:8d:2a:a3:9a:05:f1:72:86:
b8:45:00:20:d9:ad:17:03:c4:2d:d3:29:f8:05:f1:ba:3d:35:
4a:97:08:5f:0f:b7:02:9c:89:3b:6a:b6:18:dd:9d:07:63:b7:
62:44:9d:74:9b:90:e3:8b:67:0c:c8:7a:98:04:db:74:d9:6c:
c0:7b:6a:66:0e:65:14:2f:22:e6:55:da:08:89:59:62:d3:42:
62:ec:ab:6e:8f:4d:7d:02:33:bb:42:bc:f5:75:d1:92:21:4b:
c7:32:43:ad:30:c7:77:78:88:b2:f8:59:d4:7b:42:f0:ce:cb:
64:ae:3b:96:59:bc:f7:bf:0c:d5:06:ed:2d:f3:08:60:d6:66:
66:7e:7d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:58:53 2025 by rpki-client