Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
File: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft (raw, json)
Hash identifier: sN/ce4JIRZ0ghFcwt5me+d8e9oHw1fsUiGjhT7iek+Y=
Subject key identifier: 4D:59:8C:ED:7C:A3:3F:D5:FC:DD:3B:1C:9B:83:A8:84:96:B8:B7:B3
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Certificate issuer: /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial: 019638E46D9A455D67FFF9FB810426A728A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
Manifest number: 14FD
Signing time: Tue 15 Apr 2025 10:00:16 +0000
Manifest this update: Tue 15 Apr 2025 10:00:16 +0000
Manifest next update: Wed 16 Apr 2025 10:00:16 +0000
Files and hashes: 1: 5oRCpfT1T6yQCJqx4kRnu1PISqE.roa (hash: EyMBU9wS84YvIBo5Y3Ut08o1N5LKBsYGCi0/aBrkiC4=)
2: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl (hash: EO3BsVifI3Oj8HK20Waw6PLOYD6MAvNyR0HW+c2TFNo=)
3: OnZ1oDUkGHXt8p5LFZr7iXHIj2U.roa (hash: /DcdW9UyVs0Pozfbw9Y31s/RNRP7VGPFkHtsuWsMDGA=)
4: ae03YOkS1ofM34wdhj2KqmDyBno.roa (hash: urHsIcZ4xBvpG+piPTKwb+t4LjinRiEgOkguvBfEZMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:e4:6d:9a:45:5d:67:ff:f9:fb:81:04:26:a7:28:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Validity
Not Before: Apr 15 10:00:16 2025 GMT
Not After : Apr 16 10:00:16 2025 GMT
Subject: CN=4d598ced7ca33fd5fcdd3b1c9b83a88496b8b7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7b:27:6f:08:d2:dc:13:fb:e7:a1:97:c5:a7:
1d:b2:1d:e3:cc:bf:93:27:e1:c7:d2:68:44:1f:17:
cf:d5:72:6c:3b:91:ae:ba:63:13:c2:c7:53:32:73:
d3:ac:70:7d:45:ee:95:b5:ab:a9:8e:54:9f:4b:9c:
8b:09:34:73:82:95:64:e2:7e:fb:e5:e1:3c:c4:12:
8e:eb:df:e4:9e:48:0d:aa:b7:f3:2b:d8:10:54:48:
80:dc:4a:2b:83:c6:9c:53:d0:2f:65:5c:e2:a1:d5:
ff:09:0c:72:aa:e3:2f:1f:32:55:ad:42:13:ea:1e:
3f:6b:93:1f:0c:8a:de:b3:a5:cb:71:47:9f:bd:90:
92:17:dd:f5:b9:39:74:26:cd:26:a2:23:cd:30:b5:
70:76:09:e7:ef:52:41:b9:40:0f:d9:3c:e1:3b:fe:
4f:48:22:de:d6:f8:4b:14:74:a6:bd:ca:71:d6:ef:
6b:31:16:ae:20:c7:a6:8e:e8:37:0b:5f:27:01:48:
f9:f8:9e:d4:0d:bb:56:c5:c8:ca:ec:e4:f9:39:e3:
ed:8a:8f:b6:92:09:ce:c4:9a:54:fd:1b:ac:fb:54:
40:01:89:5d:bd:78:71:0f:5b:20:e1:aa:d2:3e:53:
a2:0c:2a:d4:e9:5d:73:01:cc:ec:05:5e:b6:56:50:
46:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:59:8C:ED:7C:A3:3F:D5:FC:DD:3B:1C:9B:83:A8:84:96:B8:B7:B3
X509v3 Authority Key Identifier:
keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ed:2e:88:94:ba:11:67:78:b1:0c:c4:6a:4d:b6:4d:98:d3:
be:7f:22:af:24:00:64:3c:8d:32:01:8a:7d:7a:16:cc:eb:6d:
6b:1a:06:8d:fe:5c:8e:0c:82:09:86:9b:1a:c7:b1:b4:9c:f1:
5c:91:31:21:1c:51:cd:d4:3e:66:90:76:10:ea:30:57:b6:9e:
0b:59:bf:9c:31:6b:7a:03:dd:7c:1d:81:7e:10:72:98:1e:41:
53:42:a2:22:a7:2f:91:c1:60:9b:c1:49:8f:3d:91:56:e3:c3:
09:92:68:0d:bb:a8:70:28:b9:52:c3:f5:7d:50:20:9a:67:96:
5e:12:2d:df:fc:89:41:bb:be:02:ed:77:6b:31:7e:3f:17:7f:
59:b1:5d:0a:78:e7:2a:2a:58:76:a7:8a:bc:56:ac:6a:6d:6b:
40:f5:13:f4:05:15:64:46:cf:2e:6e:38:c2:eb:c9:fe:9c:fb:
a3:3f:66:ac:47:bd:3d:b1:7b:0f:a5:95:3f:98:6f:dc:9c:c5:
67:ed:6c:30:5d:55:e2:54:4c:bb:45:0b:79:69:c7:1f:44:8b:
2f:70:5b:17:44:87:a7:d1:88:7e:33:98:fe:2b:3d:f6:9d:7a:
ac:0f:01:c5:97:78:62:e9:9e:ec:26:29:76:0d:52:1d:06:eb:
97:29:00:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:35:05 2025 by rpki-client