Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
File: cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft (raw, json)
Hash identifier: abBwU8JlShsDjqXqBUDp2WGEmNodKiZVUEUiAxfZ3EI=
Subject key identifier: 08:7D:0C:23:19:31:4A:43:64:5C:57:B8:80:C0:8B:4A:38:A6:20:66
Authority key identifier: 70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
Certificate issuer: /CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Certificate serial: 0196526D3A1AF205FC4F6A03A92EC5806150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
Manifest number: 1160
Signing time: Sun 20 Apr 2025 09:00:11 +0000
Manifest this update: Sun 20 Apr 2025 09:00:11 +0000
Manifest next update: Mon 21 Apr 2025 09:00:11 +0000
Files and hashes: 1: UkvE8dqZrzxtAH_b1DZxgqF6vTM.roa (hash: wAlll9K9/ln6lzYhTcmMHQV62ZPi/AvIvfXVgruDZb8=)
2: cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl (hash: +GjfRCti/yhtWwQrj3P3+h/P0eLUSersUew6dIxaF9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 09:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:3a:1a:f2:05:fc:4f:6a:03:a9:2e:c5:80:61:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Validity
Not Before: Apr 20 09:00:11 2025 GMT
Not After : Apr 21 09:00:11 2025 GMT
Subject: CN=087d0c2319314a43645c57b880c08b4a38a62066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ad:51:8c:07:bc:56:42:2a:98:1e:a7:3c:16:
a0:f1:86:44:70:25:6c:f7:fc:a9:6c:7d:fb:bb:04:
3e:cc:0f:94:5c:98:4c:e3:af:67:a5:81:f9:5b:f4:
70:00:53:71:42:c6:2c:54:b1:3f:61:1c:bf:5a:18:
ed:7f:ea:03:e4:10:fc:f2:d3:c2:23:13:3c:df:63:
5d:f4:49:9f:7d:b8:36:28:77:c2:39:14:1f:cb:70:
86:43:1b:01:85:39:98:df:c1:06:04:75:67:3e:db:
a9:6f:7c:82:e5:ac:44:75:32:5e:51:4e:7e:d3:d1:
fb:e9:ca:89:f7:42:6b:03:01:ea:7d:18:6e:8b:43:
ae:b0:70:f9:45:06:cb:67:86:31:19:35:0f:1d:af:
d5:65:02:8b:cd:bf:f6:de:c4:97:23:7a:7f:2c:2a:
de:2b:21:79:d9:57:5a:c6:ce:56:11:0b:88:88:3b:
8e:f5:4b:79:e3:45:5b:7a:55:72:8a:5b:2b:ae:83:
a7:01:4c:5f:d0:b0:f6:36:90:f7:4b:b5:b3:a0:69:
ea:69:be:c5:85:4c:bf:5e:b9:84:e3:b4:0b:11:a2:
be:42:4d:cc:eb:3e:81:a4:07:25:82:f3:a5:e4:62:
d3:60:93:02:17:e4:1a:8a:fb:5b:d6:99:33:3c:5f:
8d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7D:0C:23:19:31:4A:43:64:5C:57:B8:80:C0:8B:4A:38:A6:20:66
X509v3 Authority Key Identifier:
keyid:70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5f:ed:de:83:91:9d:42:a6:48:4a:21:f8:5e:ae:97:43:2a:
26:33:8f:98:5f:fe:15:4b:d7:df:4c:21:69:1c:8a:9e:f2:12:
2b:67:a7:49:52:72:4e:8b:03:77:64:c9:b4:ef:50:e2:6b:0d:
43:10:d1:79:7a:e1:dc:f6:f4:b1:d2:1f:06:dd:61:62:40:37:
b2:ed:72:22:40:79:c6:28:e1:53:6a:ea:be:28:34:64:eb:1c:
83:da:98:d3:b2:85:59:2e:e3:3c:a2:b8:ad:82:57:12:1a:1b:
2f:e1:b7:62:59:03:ce:04:e7:12:62:25:a2:af:6b:ca:59:a9:
4e:fd:17:59:41:dd:ab:f9:e6:11:8e:0c:b7:a5:46:0f:74:b3:
47:ef:42:ce:10:b4:b5:5e:d7:79:49:2e:fb:35:a2:f3:a2:09:
44:fe:e9:33:8d:35:45:2d:0f:20:19:3b:a2:a0:20:a0:11:44:
d2:90:88:56:46:ac:0d:ea:41:6a:0c:70:2d:78:cc:43:4a:10:
4f:4e:a7:45:15:4a:4e:34:04:85:28:56:03:89:bf:60:61:2d:
79:bb:a6:65:df:d6:1f:9f:ea:24:53:32:e8:ea:b8:2b:34:e7:
fe:64:d1:06:15:95:b1:3e:25:ca:39:52:36:24:0f:b6:93:2e:
46:a8:04:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:52:35 2025 by rpki-client