Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
File: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft (raw, json)
Hash identifier: ze+UJLUXy5EjS3y9njVuUFAcy5L2oC44Y0tfUGto56k=
Subject key identifier: 3E:EC:A7:5E:B4:DE:DF:ED:17:79:69:5E:22:31:28:13:94:C1:6C:57
Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
Certificate issuer: /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Certificate serial: 0196504804B35E206B5874DC98796D2CAD5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
Manifest number: 060A
Signing time: Sat 19 Apr 2025 23:00:18 +0000
Manifest this update: Sat 19 Apr 2025 23:00:18 +0000
Manifest next update: Sun 20 Apr 2025 23:00:18 +0000
Files and hashes: 1: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl (hash: /4wF6BuZAdJyIeaDuYTJD7jpmanXoAbwuX1NCQF+abY=)
2: zFKwxmaeEautk9glZTACNxiJuHI.roa (hash: SSRDLDzbM3kxops586eTzqegDVIiP8cLLFUXY14RKCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:04:b3:5e:20:6b:58:74:dc:98:79:6d:2c:ad:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Validity
Not Before: Apr 19 23:00:18 2025 GMT
Not After : Apr 20 23:00:18 2025 GMT
Subject: CN=3eeca75eb4dedfed1779695e2231281394c16c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:39:e4:77:9e:0b:ad:d9:5b:d9:c7:39:f9:
94:19:98:f7:dc:41:18:8e:0b:9e:3a:d2:93:64:f4:
42:df:2c:08:db:25:cd:5d:6e:7a:10:03:8c:dc:81:
b1:7e:29:d2:f1:a1:6c:88:69:e3:b4:78:46:80:7a:
58:5a:e1:44:90:bd:06:75:dc:dd:e2:f7:23:bd:9e:
d4:ba:fc:44:70:fd:d1:f4:3d:68:7f:33:01:54:4d:
07:8a:49:da:a7:0d:71:f0:dd:37:bb:a1:ac:13:cc:
89:f7:ac:77:7e:e0:7a:5e:37:3f:16:9c:82:c0:36:
67:0d:83:11:fe:88:70:44:2d:32:7e:47:46:94:7d:
12:3b:59:89:e1:e4:67:d1:ea:91:c6:cb:93:22:07:
51:da:db:3b:d1:e2:45:09:13:5c:c1:a7:ae:a2:07:
07:13:b7:32:f0:c5:e3:15:8c:0a:16:af:3d:9a:38:
5c:cc:6e:89:ef:7a:78:4d:e4:f1:15:61:82:c1:eb:
d4:50:7e:60:78:c3:d9:a6:f2:40:bb:d6:59:a3:f4:
5f:ce:9a:66:a9:94:ca:b7:54:c9:82:0c:5f:10:b7:
67:70:22:f0:a5:a6:e9:7c:08:f8:fc:96:78:8d:2f:
99:66:c7:64:61:88:c9:42:08:24:67:d4:f3:b0:c5:
a8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EC:A7:5E:B4:DE:DF:ED:17:79:69:5E:22:31:28:13:94:C1:6C:57
X509v3 Authority Key Identifier:
keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d7:42:60:88:51:d3:f4:93:f0:64:5c:b9:ef:31:af:d1:13:
8f:05:85:d7:a5:23:a3:90:1d:e0:06:f9:9c:46:7b:b4:c6:43:
76:17:e1:c7:f2:fa:33:13:0e:6a:e8:99:75:6f:2f:43:a0:a5:
96:9b:17:00:a6:02:15:af:3d:25:83:7f:b5:a7:c6:de:38:5f:
22:38:7b:d2:83:15:26:9b:bd:da:ce:c9:17:db:b7:cd:9e:ad:
a2:5c:39:f6:5b:4a:4c:a5:66:ae:89:bd:68:26:ed:f9:2c:14:
fb:04:1c:4d:47:4b:b2:65:ad:ee:0d:30:9e:ef:4d:85:7a:ba:
12:bc:73:13:a4:cb:70:fd:8c:8a:e9:1b:84:11:06:64:a0:19:
be:ce:1d:1b:ce:ed:39:26:2c:40:c4:05:44:e7:54:bf:8d:e5:
2f:59:dc:d3:9b:ea:13:f9:0e:18:20:8d:68:a0:bb:b2:17:b5:
20:3c:19:bb:19:16:99:69:a5:a3:54:ae:8f:b5:2e:97:23:62:
5b:9e:8d:9b:31:e4:df:6b:48:af:d4:be:59:f0:4e:dd:4c:85:
45:9e:f9:c3:94:bc:6f:f7:cb:b3:dd:6c:ea:25:8c:3a:ca:ac:
52:5f:6c:e0:d0:f3:55:19:e2:34:a6:25:fe:5f:0f:43:43:a2:
5a:a0:52:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:23 2025 by rpki-client