Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
File: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json)
Hash identifier: ICB2IIzGffUg7sQboIC/FijiZv8QEO2R/JF43z6UzFw=
Subject key identifier: 17:0E:68:BB:BC:B4:79:4C:0C:11:F3:2E:54:8B:D0:FB:E9:19:66:DE
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 019614A1E796ACB804C16E8F0F46ED32D5A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
Manifest number: 14E4
Signing time: Tue 08 Apr 2025 09:01:16 +0000
Manifest this update: Tue 08 Apr 2025 09:01:16 +0000
Manifest next update: Wed 09 Apr 2025 09:01:16 +0000
Files and hashes: 1: _Q5q23PPHO-mRvT-qL8ygRyZcq8.roa (hash: MlSwzzd2g428PzEfHlimkQJSWkAp7XxXXCW+AJUIUOw=)
2: jyrC-t0H_GkAg2c88y9tSfnyeDQ.roa (hash: QuK2j2bldMS2fMD4ill15moXvawQIfM3BSjaK9rkpUw=)
3: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: ks/58UwKY14+0UH+I3R8PvdcikalZXOD0yy7fWHI3bc=)
4: rZAA3Y495kRkRNDpWyGUUlyfTzU.roa (hash: Fgv+FkEtI7c1vlophMoAf5XyRQp0aEoHwM68DDPsUbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:a1:e7:96:ac:b8:04:c1:6e:8f:0f:46:ed:32:d5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Apr 8 09:01:16 2025 GMT
Not After : Apr 9 09:01:16 2025 GMT
Subject: CN=170e68bbbcb4794c0c11f32e548bd0fbe91966de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:32:b5:a4:18:ea:1e:5f:38:d5:55:41:1d:
57:36:44:6e:2c:13:08:67:e0:96:c6:89:20:28:81:
f9:13:e7:48:9c:ea:fa:dd:d6:9b:e6:72:be:1a:c3:
33:0e:57:f1:6b:68:0f:e5:7e:61:ac:40:fe:fa:4f:
8d:06:59:07:a9:80:0d:a4:7b:3c:99:36:18:2d:b0:
79:2c:5f:83:5e:91:bb:24:aa:2a:2e:67:d5:e0:b5:
5d:38:3b:fd:d6:a0:63:a0:35:c5:24:f5:7a:b0:a5:
49:b0:ac:72:2a:4b:02:79:c0:16:6f:26:26:59:91:
d5:9f:41:96:26:7a:05:8d:7d:29:1d:90:17:af:f3:
14:cd:fe:86:05:bd:2c:bd:ae:c9:1b:ad:e8:55:2d:
7a:56:30:00:66:8c:39:2f:1a:10:39:07:d1:ea:ea:
95:11:be:35:d8:13:64:49:49:ab:7d:07:16:c6:98:
51:ab:02:a4:ce:e1:0c:97:dd:be:f7:b7:ab:61:ce:
fc:da:b6:75:f0:ab:ec:30:96:b5:5f:d7:00:2f:b3:
92:3e:75:28:12:8e:51:46:76:b8:30:18:8b:e5:91:
23:cb:e4:86:f2:7d:63:0d:63:59:d6:5c:76:17:c0:
98:e4:83:3b:4f:64:11:be:f8:36:35:4d:f7:e5:66:
3b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0E:68:BB:BC:B4:79:4C:0C:11:F3:2E:54:8B:D0:FB:E9:19:66:DE
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:03:fb:2d:47:25:1d:03:4c:ac:da:c7:f5:21:98:02:54:e2:
4b:98:44:7c:bf:fe:7d:a6:cf:a7:af:73:87:9c:d2:7b:e9:51:
30:5f:34:1e:ed:26:02:7c:f5:5c:c7:ef:72:87:e5:46:24:0c:
b3:24:ff:58:91:56:5f:04:26:51:d5:51:70:af:7a:1e:31:60:
6b:6b:68:0d:0e:06:0d:ac:a1:f9:98:14:db:2b:a2:d1:29:25:
36:cc:d7:fc:b7:1d:cc:c7:ac:fd:42:de:90:cb:54:c3:bb:9b:
d6:d0:b0:09:ac:60:38:ed:a9:2d:c7:48:cb:8e:40:53:3e:ce:
67:1b:7f:2e:6e:21:12:bb:f1:9d:5f:ba:df:f9:5c:9f:6e:36:
26:dc:58:bc:64:fc:75:29:4c:6e:70:82:c4:61:9b:55:2f:86:
eb:a2:4d:8a:ea:28:5f:a3:d4:f7:15:9a:51:94:10:4a:04:5d:
7a:43:d7:97:f2:dd:03:e7:9d:2d:aa:44:18:06:29:d3:66:37:
a7:e8:da:29:a5:01:8f:08:ac:ec:98:50:e2:7c:f8:0d:af:ac:
ec:82:c4:7b:cf:f6:f2:ca:2a:39:6c:df:66:c4:ec:30:9d:a8:
d1:05:17:f2:21:61:e7:47:3d:1d:28:ee:58:e2:2d:b6:91:1f:
87:7e:96:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:12:21 2025 by rpki-client