Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier: 9rGsLOUrW6sbKGR/fUfjJuuvvBb3poS4ltD6ZHckXAg=
Subject key identifier: A4:B0:2F:72:16:17:8D:04:0C:5C:2D:74:05:55:C1:8C:FC:60:6A:C7
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 0196455667F0D81A2BE29EC48893934DA442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number: 12C2
Signing time: Thu 17 Apr 2025 20:00:12 +0000
Manifest this update: Thu 17 Apr 2025 20:00:12 +0000
Manifest next update: Fri 18 Apr 2025 20:00:12 +0000
Files and hashes: 1: 1-_88t3hetlFBanVHA2DU4QOnOb4.roa (hash: latlaUAnjm2YfCy+iquDacPIbXwTYbtI55yE63hF5qU=)
2: 9bvrYkBqiqKMnn8_sup9wHDDvAw.roa (hash: OmLw4QBgjy48HSO5mm8k/HJy6DwFgzHoft0ePJqTlrs=)
3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: H0YrvHTGux0u6HFvEjMqzaHsKn+C0nz302rIkdStq08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:67:f0:d8:1a:2b:e2:9e:c4:88:93:93:4d:a4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Apr 17 20:00:12 2025 GMT
Not After : Apr 18 20:00:12 2025 GMT
Subject: CN=a4b02f7216178d040c5c2d740555c18cfc606ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:a0:89:b2:e8:83:20:1b:9c:bd:70:f5:27:
45:07:ad:78:43:a6:9e:a6:7a:fb:4a:51:62:d7:d8:
09:b2:26:81:8a:96:7f:b2:e0:ec:cd:82:ab:a6:d8:
dc:fe:d4:9a:1f:09:49:c8:dc:6d:5f:87:7c:05:bd:
c0:7f:2a:ad:3d:2d:6b:29:dc:61:86:6f:74:4a:ff:
93:f4:24:65:01:c7:0d:da:b6:ce:f4:64:bf:a7:80:
bf:42:41:35:ce:70:3d:39:02:34:d6:42:56:f5:bc:
43:60:cc:67:e2:66:57:7f:21:98:a6:66:7f:f3:88:
87:4c:d1:e5:23:59:65:6f:ee:b6:53:49:08:2b:22:
fb:4f:72:19:2a:07:9d:63:8f:fe:d3:34:98:db:7e:
5b:8a:50:b7:3e:57:e6:d6:a1:c4:ad:52:04:bf:97:
4d:3a:93:ea:ed:4e:e2:f4:81:a1:f3:cb:5f:88:9c:
d0:dc:dc:94:e3:7f:c3:92:a7:fc:b0:36:34:14:bb:
f2:b9:0a:e3:ea:ab:c2:0d:69:9f:a7:b3:a0:69:00:
0e:42:6c:72:b1:d0:86:14:18:61:29:f9:27:32:77:
7d:b2:fd:f6:bd:9a:56:53:27:fa:72:0c:3f:45:ba:
23:db:18:d1:ff:7f:da:1e:10:f9:df:c4:92:ec:fc:
bb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B0:2F:72:16:17:8D:04:0C:5C:2D:74:05:55:C1:8C:FC:60:6A:C7
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9b:ff:6f:6c:14:d7:c0:61:6d:22:37:b1:d5:2f:33:32:02:
ca:fa:dd:1a:9e:f6:91:ba:ef:f9:8a:b1:5b:a7:ba:60:51:ae:
17:8d:ad:17:52:78:fe:e7:e7:73:83:09:aa:47:b5:10:3a:aa:
f0:3a:48:6c:78:31:2f:6a:ad:35:69:e5:ed:0f:d3:3b:19:a2:
45:a0:d9:92:58:a2:a7:57:63:ec:49:6f:f4:dc:e1:35:71:c6:
0c:1d:28:69:2a:62:73:f1:f3:80:6d:94:4e:55:88:98:92:c3:
ba:f5:6b:55:5c:ad:65:88:c6:9e:b5:52:08:af:4d:2d:3e:92:
c7:99:61:8e:74:95:8e:1b:ee:d4:c5:47:58:e2:d3:13:05:ca:
35:c1:6c:9e:3d:c6:5d:fa:05:3d:e0:32:86:b5:fb:4f:b7:45:
e6:34:fc:c0:e6:6d:0e:50:ff:34:e6:03:cd:5f:e2:70:6a:f9:
4d:d0:b7:81:a7:32:a6:ae:c3:63:f6:cb:16:65:49:27:d5:9a:
10:aa:7a:d9:b0:17:7c:23:ae:99:39:ef:bf:75:d7:98:08:0c:
b5:2f:58:10:11:1f:1d:f0:93:cd:44:e9:52:31:d3:8e:37:24:
45:2d:2e:f3:4b:8f:7c:43:b0:c1:ad:0f:6e:81:42:f8:80:bd:
f7:e7:b6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:48:00 2025 by rpki-client