Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: bsoohglXA4w6YQA0x3lizyLZckHLrwLgyi3yUayn3ec=
Subject key identifier: DF:AE:4B:F6:FA:BB:7B:7E:5C:3D:52:DE:07:AA:13:1A:AF:F1:B1:80
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 01964B90B50D2B1AC664318DB120D13975AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 1238
Signing time: Sat 19 Apr 2025 01:01:36 +0000
Manifest this update: Sat 19 Apr 2025 01:01:36 +0000
Manifest next update: Sun 20 Apr 2025 01:01:36 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: A101PnLuUDICNbzIvYWZrQeZ5w0dNsYf76KWlHExC1I=)
2: Md8iGia1MbUzqtIWwDExWkmRVgM.roa (hash: 9TNv7T0YESkDbmJU8WmVBlvb3hJYh8sZp0R9zt0P83g=)
3: zzfWrdnIm-Z-w7o1PR68Qstk9VY.roa (hash: kTwVtQXhrNaWPZylIvh+tacEo9MdRsMxrNowU5p51wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:b5:0d:2b:1a:c6:64:31:8d:b1:20:d1:39:75:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Apr 19 01:01:36 2025 GMT
Not After : Apr 20 01:01:36 2025 GMT
Subject: CN=dfae4bf6fabb7b7e5c3d52de07aa131aaff1b180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:48:20:d7:1a:54:fe:46:f6:97:17:70:b1:
3e:ba:e1:9b:95:a0:76:88:11:39:cb:f6:24:94:8f:
db:82:22:e6:ce:2d:d5:74:24:12:05:30:20:89:02:
50:24:6b:ea:49:db:6f:e5:3f:1e:16:45:3e:c4:4b:
6b:ee:02:5e:09:8d:8c:cd:1f:f1:a2:15:4a:92:20:
8e:da:b5:44:8a:87:19:bd:96:69:cc:35:f5:04:d7:
fe:e3:d2:78:78:79:a0:c7:92:d0:87:66:2f:71:04:
07:31:70:98:60:80:9e:d5:c6:9a:28:97:62:db:92:
f7:df:63:09:a6:09:6d:f0:03:da:df:c5:6b:8d:b1:
ed:72:11:2f:de:7e:88:ce:4d:e2:d6:53:6f:a6:be:
78:6a:f8:4e:1f:45:df:ea:f7:82:cb:9a:9e:a1:96:
c7:58:c5:35:96:dc:72:8f:17:99:92:70:f6:3c:a3:
64:66:1a:f8:49:3e:ef:44:94:6d:ca:39:85:d4:dc:
c2:d0:96:12:64:b9:78:f9:c7:e5:75:22:f4:1a:79:
98:07:ee:e2:0d:c7:4e:82:ab:7b:e4:44:72:24:4e:
d6:9d:9b:c6:5b:7c:ce:04:d9:42:a3:94:01:6f:1a:
72:7d:d6:4a:36:39:ca:01:2f:61:9a:b5:25:1a:fd:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AE:4B:F6:FA:BB:7B:7E:5C:3D:52:DE:07:AA:13:1A:AF:F1:B1:80
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:21:24:d2:6e:e0:d8:2f:fd:b3:af:42:54:56:d1:3a:1e:d1:
82:96:e8:09:6b:78:eb:a4:be:f6:0b:c3:08:36:39:9a:dd:a0:
23:25:f2:cc:e8:f5:df:21:03:74:f3:78:15:d6:01:22:63:b8:
6a:88:ac:84:49:e1:0c:83:fa:2e:cf:d1:8f:c6:c0:95:d7:be:
d4:f8:a0:41:6c:4e:48:51:99:75:00:6e:fa:98:f4:2d:21:4f:
62:95:06:e2:ee:d6:5c:f3:a8:5b:b7:46:f2:26:df:b7:62:fe:
d4:62:94:2c:bb:55:f5:71:a9:ec:82:aa:15:62:88:7b:0f:16:
77:ef:69:35:6e:a8:26:a4:76:5f:e6:7c:b8:ff:2f:44:5d:4a:
6a:45:0d:45:d7:f7:84:c7:85:29:f4:8f:f8:06:b5:ff:3b:76:
9c:d0:f5:d0:d6:b1:c0:28:ef:61:87:35:20:5f:2b:53:5c:0f:
31:a0:85:02:3f:77:66:10:73:fe:5f:05:58:da:65:f9:9d:38:
05:aa:24:7d:1c:71:52:ae:80:58:ad:98:a5:57:86:34:5e:c1:
9e:4b:78:6a:e1:17:30:38:44:f5:59:7c:09:d6:ee:42:1c:42:
0c:ca:14:db:bf:d7:66:0b:9b:dc:5e:6e:5e:b7:99:28:ca:e1:
13:fa:e6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:46:25 2025 by rpki-client