Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: TNF5YqnSjzBcc7CM0Y5kv2oy7VMgQt5dRtwL4CqGSp8=
Subject key identifier: CB:82:88:37:CA:82:57:ED:9C:A0:DC:C5:7D:FC:44:8B:7B:1F:F2:63
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 01964D7E2FABE6201177472715CD231EE276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 10:00:37 +0000
Manifest this update: Sat 19 Apr 2025 10:00:37 +0000
Manifest next update: Sun 20 Apr 2025 10:00:37 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: eT+KFB0Kqvr3JbuYq92X+Ru+H0SJI0bqwtlpx4/h0c8=)
2: a-zhZjuXDc_FsfQbRuaEtluPpHA.roa (hash: 5+3esVT/zzC55YQOAsi2tnDDnrmv1Y7c5U2ef5q3Qdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:2f:ab:e6:20:11:77:47:27:15:cd:23:1e:e2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: Apr 19 10:00:37 2025 GMT
Not After : Apr 20 10:00:37 2025 GMT
Subject: CN=cb828837ca8257ed9ca0dcc57dfc448b7b1ff263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:10:55:01:f7:92:65:d1:86:56:1f:0c:ff:
b8:e1:3b:ae:40:4d:f5:4e:a2:7a:03:4f:a4:3c:7b:
52:11:b0:70:ff:cb:c3:eb:6e:d7:eb:91:d9:90:a3:
76:e1:a5:9a:7c:91:eb:a4:4f:25:92:d7:4e:6f:46:
77:d4:11:be:7e:71:c1:d1:a0:1a:f1:28:35:06:d1:
f0:8b:09:d5:67:f6:b0:8f:9f:88:bc:0b:25:92:d0:
f2:19:cf:84:e5:d7:f1:74:93:23:81:9c:e9:c6:3f:
47:19:c2:7e:1d:f8:be:36:b3:aa:56:5a:df:75:4d:
30:16:81:9a:06:4d:f4:ff:5b:0d:7b:c6:68:d6:fb:
24:f0:1c:6d:8c:c1:e0:9a:e8:2b:22:51:c0:da:95:
82:37:1e:83:77:6f:22:68:74:05:c4:7c:a5:22:3d:
44:a4:74:c7:b1:74:dc:14:f3:72:17:c0:f6:77:fd:
17:96:0c:e4:7f:06:79:2a:ad:79:8a:da:d3:50:f1:
76:a0:e7:97:48:d6:a7:2a:37:89:18:0a:59:b6:01:
18:bf:be:d2:39:9a:de:72:f8:7a:d4:37:d0:77:10:
4b:18:da:90:a2:0e:75:a7:54:b6:45:be:9e:f3:57:
a8:f8:01:e8:05:f6:b7:5c:61:a0:60:1f:24:34:d1:
a0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:82:88:37:CA:82:57:ED:9C:A0:DC:C5:7D:FC:44:8B:7B:1F:F2:63
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:91:03:c9:2a:d3:5e:51:75:23:27:7a:2c:b8:37:3e:05:a6:
74:22:58:71:6f:58:e1:2c:8f:56:74:52:d8:ac:71:96:eb:6f:
f2:13:09:57:8e:6b:7e:87:c0:88:51:ac:59:c4:ce:20:67:1f:
71:c2:3e:08:b6:c0:af:ba:18:da:7e:3c:c4:a1:15:a0:4f:74:
ed:25:8a:2e:74:d7:7b:92:bc:e5:95:12:8d:9f:65:a0:1d:82:
a7:96:14:df:df:05:f8:d8:d2:fa:cc:a8:24:60:ab:06:e9:18:
6b:18:43:eb:c0:ba:7a:07:6b:33:29:c6:07:34:51:33:a1:74:
44:3d:73:8b:a9:70:00:cb:91:59:48:fe:fe:be:3a:7a:d0:6c:
43:d3:74:20:4e:48:bd:44:48:45:49:37:f4:2d:77:d7:b3:af:
1d:e6:f2:0c:46:a3:8e:b9:13:3b:27:1c:15:4d:64:ef:92:ba:
ba:8d:86:d4:b2:82:ec:2e:b5:26:22:32:5b:50:28:15:6c:a6:
9b:d7:16:c4:3b:54:60:a3:d9:c4:c4:1c:db:54:26:fe:3d:99:
80:2d:95:9e:5d:f9:14:7e:b8:f0:d8:1c:bf:88:e8:be:9f:04:
ad:25:0a:78:5e:d1:78:82:5a:de:15:44:0a:e7:2c:1b:cf:4a:
1b:ee:92:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:58 2025 by rpki-client