Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier: /EdnQBQ3yoKfRfsLehdmebPTTr1yqAN+NkEuemufU+E=
Subject key identifier: F2:20:BC:FF:53:BF:0F:1B:AE:6D:9E:54:6C:9C:AC:FA:68:F3:7D:8A
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 01958C972788808D763D50BF9C5080974117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number: 0441
Signing time: Wed 12 Mar 2025 23:01:11 +0000
Manifest this update: Wed 12 Mar 2025 23:01:11 +0000
Manifest next update: Thu 13 Mar 2025 23:01:11 +0000
Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: JoHQdZqm0t9DQI/+9gkWMsrBLK1ctBnp1lv7BmXWpSg=)
2: Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa (hash: uihaqn4cl1EUm9BC8+JYEwJFvxEP94e45YDqvyFRac4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:97:27:88:80:8d:76:3d:50:bf:9c:50:80:97:41:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: Mar 12 23:01:11 2025 GMT
Not After : Mar 13 23:01:11 2025 GMT
Subject: CN=f220bcff53bf0f1bae6d9e546c9cacfa68f37d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:26:a7:bc:16:6b:9f:c3:00:37:c8:6a:cc:
95:53:a0:d5:b5:69:41:a4:db:9f:f3:d2:f7:cd:08:
5d:68:78:94:70:a1:a0:91:e4:30:a3:cf:51:18:b9:
3e:3e:bd:1a:fa:0b:e5:50:91:df:0e:fc:1a:b3:50:
51:dd:4f:88:32:2f:ff:d3:27:a0:57:4c:9e:c4:93:
6b:3d:d3:58:ab:b4:19:9d:af:a8:77:cb:aa:0e:68:
f1:68:06:a4:3d:fb:74:23:4b:59:0e:a6:04:5f:1f:
4e:9e:b2:d1:1d:fd:46:18:bf:02:c7:c0:fe:d8:b4:
05:05:f1:56:c7:fc:b2:b2:45:28:66:ac:bf:06:d2:
08:50:cc:aa:b6:5e:84:69:01:b1:d1:56:0b:23:bd:
d3:9a:90:bb:87:68:bc:8a:fd:6d:5c:e5:88:32:6c:
5f:b0:1c:f3:3a:c8:4a:47:30:70:64:4e:dd:19:47:
7d:e2:1f:2b:a3:91:a5:9f:84:7b:e4:57:a2:19:25:
a8:2b:d5:1a:0a:5c:40:fe:a4:ce:ed:d9:95:19:35:
f0:28:e2:e4:6f:53:95:2b:04:0a:22:88:4a:89:f9:
19:bb:14:66:5e:76:8f:d1:03:07:28:a0:d3:fe:e5:
18:44:6e:45:b9:0a:bc:74:c5:3f:fb:2b:6b:a2:2f:
0e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:20:BC:FF:53:BF:0F:1B:AE:6D:9E:54:6C:9C:AC:FA:68:F3:7D:8A
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:99:51:e6:2c:c6:3a:5c:d6:ad:8b:4e:7a:6a:b7:8d:2a:19:
ca:ef:39:8c:2c:6f:86:85:e8:61:25:ed:d9:e1:22:bf:60:68:
c0:e5:98:08:2e:e1:6b:b2:38:37:75:a2:dc:72:52:9e:f7:86:
2e:ea:e5:8a:64:67:b3:75:01:85:90:d9:d2:e8:e7:c3:7f:00:
ee:03:6b:6c:3a:f9:bf:e2:d6:21:66:a2:8b:f4:29:e3:1c:4c:
cb:1a:b2:6d:f7:e4:c7:3f:66:24:83:09:77:17:80:a0:65:76:
d6:59:dc:e0:42:23:98:88:33:a0:d9:c3:e6:65:62:82:44:e9:
c3:0e:81:b4:87:2b:02:98:e4:64:85:61:f4:a8:48:39:6d:52:
8b:99:6f:01:e2:ff:f0:c0:f9:c4:a3:4c:4c:e5:02:33:c5:5b:
e9:91:03:bd:5b:2b:bd:7d:41:58:91:8e:d3:34:24:f7:72:c3:
09:2c:95:66:fb:21:04:11:4c:50:46:17:fb:ed:bf:bf:dd:32:
0a:1c:4d:9e:d1:cd:70:e5:58:71:0d:5f:7e:7c:df:d7:bd:f1:
91:0e:26:c9:8e:19:82:30:21:ff:f1:c5:3b:68:ac:1d:b7:6c:
d1:04:57:10:c1:c6:6d:ba:4b:f2:8a:42:35:2e:ed:1f:8f:33:
c3:a1:be:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:55 2025 by rpki-client