Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
File: rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft (raw, json)
Hash identifier: VCVVW4/ck7lNqur3jSC1sGffV4r2DlldfDqDQ6AclRI=
Subject key identifier: B6:0E:EC:72:FF:FE:06:B4:70:FA:E9:EB:1A:C3:FD:4E:C3:CD:6A:34
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 01964F6D88438F5F8603FB6E3FB06947D3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
Manifest number: 1502
Signing time: Sat 19 Apr 2025 19:01:40 +0000
Manifest this update: Sat 19 Apr 2025 19:01:40 +0000
Manifest next update: Sun 20 Apr 2025 19:01:40 +0000
Files and hashes: 1: BAFnA8E_-fRHFvJR66V5dNg4Xzc.roa (hash: zli04q+UUFDZ6LvNlKF4wEZntdZy+cQL9il9Oh4rSZo=)
2: rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl (hash: j8VRxUMjGwozQ2RddPdj6kfgFbQukhTMbCD/xJ+x9L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:88:43:8f:5f:86:03:fb:6e:3f:b0:69:47:d3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: Apr 19 19:01:40 2025 GMT
Not After : Apr 20 19:01:40 2025 GMT
Subject: CN=b60eec72fffe06b470fae9eb1ac3fd4ec3cd6a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:76:14:c3:c7:b2:e6:1f:a6:50:48:09:b5:
f6:4a:94:e2:77:be:f5:eb:16:25:ee:82:56:3c:50:
23:89:e3:28:c1:19:84:74:a5:ec:dc:01:49:33:5d:
d7:22:20:29:d5:04:fc:3c:e8:97:af:c0:d9:25:57:
cd:da:d7:21:a9:d7:85:1b:0e:b6:45:f8:b5:48:e8:
ea:43:71:2f:9c:25:b7:7f:5a:5a:44:e5:5f:7f:0f:
9a:b7:bf:c4:6e:cb:53:6e:9d:83:20:26:0b:27:59:
54:32:f8:da:0f:9d:42:c8:c0:ca:3f:b0:35:18:42:
2c:eb:97:fe:8d:b5:46:85:e0:2c:f0:42:f4:56:de:
b8:ba:b2:c9:db:b1:23:7d:4e:ae:50:ac:74:d6:f3:
85:7b:06:d0:a6:5f:c6:f7:53:ce:29:5f:ba:e8:55:
43:6a:fe:20:73:a8:87:c6:11:91:c7:93:41:61:f9:
8c:45:de:dc:77:41:80:40:36:e2:d8:a2:ce:d7:ea:
fb:c0:65:8a:49:81:06:d2:9f:5a:b7:08:ee:1a:bb:
81:31:21:f9:91:ae:e2:8e:02:24:a6:11:3b:71:77:
40:2d:3c:14:02:c1:4a:92:f3:52:a7:99:60:57:c8:
64:16:b2:8e:2a:15:1b:72:6f:b8:f3:05:37:b9:8d:
bf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0E:EC:72:FF:FE:06:B4:70:FA:E9:EB:1A:C3:FD:4E:C3:CD:6A:34
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:37:5a:4e:eb:ca:16:88:28:d7:76:0a:ba:a7:82:2e:d0:c8:
50:66:f5:a2:1c:3b:5a:ac:82:25:fa:54:3b:15:57:e4:40:31:
d5:88:94:56:36:11:a2:68:c5:6e:87:9c:32:30:f3:80:74:d8:
30:e7:9d:99:80:30:e7:ef:35:92:41:be:10:87:e5:49:80:f4:
f4:e9:1f:16:a9:4b:f8:88:4d:ac:3a:c2:e0:bc:f3:81:0b:88:
27:d0:b3:03:1e:fc:49:d8:b7:f4:46:05:c7:f4:bd:bc:d5:30:
66:52:d2:63:12:13:fe:0a:fb:33:00:5b:c2:57:1b:dc:f2:01:
51:cd:19:3e:7d:8c:84:68:2e:78:4b:4c:1d:e1:0b:18:da:b1:
e9:fd:6a:ba:d2:0a:72:c2:f2:78:d5:09:cf:6c:27:be:36:dc:
88:38:02:17:94:b4:2a:68:d8:95:58:4b:2f:5d:80:fb:fc:c8:
0a:db:a3:bd:ca:e0:bc:da:70:55:ad:5e:19:ef:c3:6e:cf:57:
cf:59:e4:e5:17:68:9e:34:c7:9b:8e:21:cd:a6:32:c7:9b:df:
47:83:0c:ea:f3:55:b8:1d:12:e9:cf:a7:02:03:0a:0d:18:30:
5f:2d:23:69:15:d9:f8:3b:41:cb:fb:6b:ef:c0:b2:9a:5e:a1:
a2:ab:0e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:32 2025 by rpki-client