Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
File: tI8GPSnpEPAzvstlbouZAfaeyXQ.mft (raw, json)
Hash identifier: ldj7bDlQxpeN0Bky9jlCP8RdseIbBsLVAzRIFaE6Hes=
Subject key identifier: AC:92:A1:B9:DE:3F:BA:B1:C0:6F:DE:17:4A:35:27:60:27:AB:92:25
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 019652A47204A935BD4EF7FA8183AD1D08E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
Manifest number: 0DF8
Signing time: Sun 20 Apr 2025 10:00:30 +0000
Manifest this update: Sun 20 Apr 2025 10:00:30 +0000
Manifest next update: Mon 21 Apr 2025 10:00:30 +0000
Files and hashes: 1: t79WdBqxFFntJ1dx66Q8iAsYk1A.roa (hash: Pk/lATHQMHKBJ7PlIPPnor0o8ARLjsDurmPSUe+LfCo=)
2: tI8GPSnpEPAzvstlbouZAfaeyXQ.crl (hash: Yo++qh8HD4Q2wxlwYns3FK0YhyVGH/fo3pNnbzDZZY8=)
3: vM1WQhwz3cRdhRzRWZYRS2EG35U.roa (hash: 6cZcrnHWZ9ymPZFFF87v+vfASbgITAqQf6OR2I+DcbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:72:04:a9:35:bd:4e:f7:fa:81:83:ad:1d:08:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Apr 20 10:00:30 2025 GMT
Not After : Apr 21 10:00:30 2025 GMT
Subject: CN=ac92a1b9de3fbab1c06fde174a35276027ab9225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:04:23:63:7d:cc:37:3c:3b:df:69:0e:ad:87:
0b:90:81:b4:b3:0b:1c:5c:8f:ed:98:4d:db:bc:bd:
50:90:b2:d5:d3:3c:b7:ab:40:7a:52:52:d1:d9:49:
1b:af:50:89:ab:a4:bf:c2:0a:74:16:ea:03:64:52:
aa:d0:60:51:09:23:7f:c5:ce:36:f0:ef:75:f1:14:
84:28:13:d0:6f:fb:89:e4:c5:d5:8b:14:2c:0c:b1:
77:7e:47:89:88:3f:b2:3a:93:1a:61:ec:72:7a:80:
02:48:3a:f4:5a:0b:83:cd:ab:d7:02:61:f1:1b:dd:
4c:99:3d:c7:d4:0e:74:03:b8:9c:75:d2:3c:99:88:
51:63:ab:7d:79:70:04:e1:51:08:7f:f6:e1:ad:0d:
fe:5e:8f:92:ba:ef:0e:ae:93:e0:a5:62:b3:fa:d4:
4b:60:b2:44:ad:e8:90:57:f6:99:2c:a6:6c:bb:a0:
a1:00:be:39:ed:98:db:d1:2d:da:70:76:6f:6d:5f:
0f:7b:7b:19:ba:1e:9a:d2:25:bd:33:46:a4:bb:4a:
6a:6c:1a:c8:60:e7:e9:c8:54:a6:36:14:dd:fd:cf:
ac:03:ee:de:2c:b0:a9:e0:eb:c8:5c:ef:a4:20:67:
01:21:67:3f:de:10:81:6a:6d:b3:cc:e8:c6:79:43:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:92:A1:B9:DE:3F:BA:B1:C0:6F:DE:17:4A:35:27:60:27:AB:92:25
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:13:07:d3:64:e4:39:c5:9f:bf:91:57:bd:2a:e2:b9:76:2f:
35:f6:0b:ed:0b:32:c6:7d:6b:15:2a:bc:1d:ed:39:d5:b0:b3:
40:f8:1d:b2:ea:6d:90:9b:e6:3f:75:34:53:a6:14:01:4d:da:
fb:0c:b4:73:db:d3:f5:70:8b:8d:5e:d0:81:22:ee:aa:86:26:
b8:8b:73:90:18:42:b6:a2:3f:6a:c3:11:00:4c:62:6b:a1:ac:
15:e3:eb:08:a9:93:39:0c:13:6b:b3:99:11:05:34:1d:04:85:
d1:6a:e2:ca:c8:81:fe:a3:c0:ce:dd:6d:e8:44:0b:8b:ab:4b:
08:00:ed:9d:2f:81:68:82:26:d9:e7:f1:1d:b4:1b:9e:03:31:
bd:76:42:e3:96:df:e3:a4:4a:d6:11:af:2b:b1:f9:da:d3:86:
4b:a2:11:b6:31:1a:9e:d6:e6:f5:9a:66:1a:ba:e0:7d:8d:74:
70:f3:b1:d2:9b:ae:65:a2:8a:01:40:5c:42:e2:12:c8:ff:ef:
a0:f5:ea:6e:12:f3:83:90:56:bf:41:eb:7b:25:c7:5e:84:ba:
a9:06:be:58:78:5e:88:f8:d4:19:25:1c:90:9d:97:6d:b6:1b:
b9:4a:f4:c7:c2:21:83:49:ce:31:56:5b:9c:a4:77:14:17:24:
7e:5c:c6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:49:09 2025 by rpki-client