Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
File: p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft (raw, json)
Hash identifier: ipsboWM61UWf5vCphRqZVpwdmjirCBEBd5OvOEHQSWs=
Subject key identifier: D0:FE:3A:51:EE:C1:6D:4F:37:42:13:35:4C:3B:99:70:60:BA:1D:7E
Authority key identifier: A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
Certificate issuer: /CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Certificate serial: 01964067835BB2AAD05BAC9FB616C5B36005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
Manifest number: 11C1
Signing time: Wed 16 Apr 2025 21:00:47 +0000
Manifest this update: Wed 16 Apr 2025 21:00:47 +0000
Manifest next update: Thu 17 Apr 2025 21:00:47 +0000
Files and hashes: 1: AGh_BXwDaFnqdr1rluMLMPMOrnM.roa (hash: L7VSHEAFfvwnZGbHuhPcAH6Mmh4M0FtFsSBsZ0VnfV0=)
2: p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl (hash: pP8h/iCZzC4TPHy00sS8quVK5BC83u0vIo4BCB7PcxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:83:5b:b2:aa:d0:5b:ac:9f:b6:16:c5:b3:60:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Validity
Not Before: Apr 16 21:00:47 2025 GMT
Not After : Apr 17 21:00:47 2025 GMT
Subject: CN=d0fe3a51eec16d4f374213354c3b997060ba1d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:55:ba:b7:09:fd:0b:c7:8e:0f:98:4c:a6:f8:
68:fe:f8:c6:4d:53:9a:c0:bf:1f:45:36:5e:1e:1d:
b9:7d:8a:cf:8d:a2:85:21:ed:da:29:ce:0d:85:2c:
79:fd:e4:17:81:6c:c9:35:18:4e:ad:cb:3f:ad:c6:
9d:0c:ec:18:5a:97:11:7a:b5:06:47:b9:e8:48:e0:
a2:f4:e6:f5:46:b2:ff:ca:16:2c:bf:85:47:f3:34:
ba:1d:7e:ee:08:d5:24:83:a7:a7:7d:86:f7:c9:da:
0c:6e:0e:0d:8c:79:67:fd:51:46:1f:c6:3b:6f:1d:
3e:05:af:bf:04:10:2b:52:5e:45:ab:c2:9c:b6:f7:
63:7d:1f:01:26:1a:17:85:96:a8:be:f8:2e:8c:25:
3d:eb:20:fd:15:27:2c:55:7a:65:52:65:43:0f:ea:
9b:d6:44:28:2e:3b:9d:90:4f:79:fa:df:da:53:76:
9d:6e:2c:85:1c:37:56:ea:6f:68:d3:19:dd:9f:8f:
20:88:04:6f:6b:59:3c:2f:15:2b:e8:98:4e:b2:5f:
0a:d8:e0:a3:0b:71:68:8e:54:3e:fb:e1:62:3c:13:
eb:bc:f7:2c:6f:c4:5e:23:ed:d0:0e:f6:99:6b:f4:
2e:46:63:fc:07:0d:fe:1c:59:0d:8e:1a:6a:5d:1f:
e7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FE:3A:51:EE:C1:6D:4F:37:42:13:35:4C:3B:99:70:60:BA:1D:7E
X509v3 Authority Key Identifier:
keyid:A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7d:fc:f6:b8:87:d2:18:e0:a4:19:af:23:8f:6c:6e:a2:7b:
c1:d5:9c:00:f0:73:75:2f:7e:2c:19:e8:97:cc:b2:e5:71:6c:
fe:7a:7e:94:0e:5d:8d:26:d4:61:ac:64:dc:bf:6f:ce:47:45:
a9:db:fd:61:bf:fb:8b:a3:e3:0f:4f:5c:5f:64:0f:e3:6f:4a:
21:fc:eb:da:50:e9:46:96:3c:21:95:d1:6e:60:27:80:ae:ec:
b1:e6:b6:60:a1:ce:eb:1a:6b:9f:00:42:f9:33:65:03:42:7c:
f3:f4:8d:16:0c:da:60:e1:45:a2:34:8b:9a:cd:57:d4:df:93:
f4:2d:b5:49:b6:87:22:26:bf:1c:a7:e6:ff:36:62:aa:cd:4c:
f4:49:6e:01:d9:b0:1d:6c:25:48:9d:cd:d4:26:56:4b:9f:f9:
fe:c3:ea:5a:25:73:6b:f0:05:f6:b7:5c:e0:5f:e8:91:d8:68:
37:73:2c:b9:35:c3:bd:22:6f:a5:23:b9:f2:8d:25:a8:d3:96:
d8:1d:cc:de:ef:fa:46:6a:db:b5:ca:3c:c2:12:d1:d3:29:75:
57:1f:7a:7e:18:9b:b9:06:60:08:7a:0b:5f:fa:89:c4:76:23:
4d:27:a8:5c:46:5e:9e:97:09:0b:72:08:bf:47:0f:be:82:3b:
db:33:d7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:01:16 2025 by rpki-client