Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
File: hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json)
Hash identifier: OyY/5OAnzatRIbEbHjHNMPcBPVyGrMMCPIq/VkQ0A+4=
Subject key identifier: F8:74:EC:8A:19:F1:2C:74:50:DD:C2:E8:02:61:D8:19:2D:2E:C7:2D
Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Certificate issuer: /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Certificate serial: 01967C7C4FEAD69A309B341EA8632D870677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
Manifest number: 35
Signing time: Mon 28 Apr 2025 13:00:43 +0000
Manifest this update: Mon 28 Apr 2025 13:00:43 +0000
Manifest next update: Tue 29 Apr 2025 13:00:43 +0000
Files and hashes: 1: Nz0U1MS6Vp6ENiK7Qgw_NtnW0Zo.roa (hash: 4kJwTGIfTzijYFZnWzmKmdRlWFcf9MpzIIKmNecHiDM=)
2: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: avmu4O+6a1ZFwX4GYUdUVwEEokHBgjzNZ45qQRboTmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7c:4f:ea:d6:9a:30:9b:34:1e:a8:63:2d:87:06:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Validity
Not Before: Apr 28 13:00:43 2025 GMT
Not After : Apr 29 13:00:43 2025 GMT
Subject: CN=f874ec8a19f12c7450ddc2e80261d8192d2ec72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:94:b0:eb:ad:55:06:82:4a:8d:15:7d:de:
a1:1c:9c:90:65:f0:f8:48:f7:4c:8b:6e:b4:89:ed:
cf:b7:5d:23:79:96:c8:4c:ef:58:44:4f:06:c4:64:
97:bc:da:ea:f2:62:04:ea:7d:57:e9:a1:7f:fc:2f:
6d:57:b6:66:14:d5:46:47:80:51:cc:5c:0f:d9:2c:
62:da:91:01:7b:cb:a8:e1:be:dc:31:2f:13:e5:2f:
2c:84:af:55:8e:6a:22:0a:68:dd:b1:e3:89:b4:34:
91:d9:fc:d8:8a:21:ff:4d:08:e8:1b:8a:46:5f:f9:
24:52:c5:61:80:b6:a4:6a:43:6b:f3:d3:54:ed:b2:
1f:57:34:15:6d:d3:fe:9d:9e:bc:89:42:b2:8e:71:
19:c4:c9:a0:08:06:67:c8:b7:30:ea:30:da:de:01:
a0:cb:e3:1d:37:e4:88:ca:06:ff:85:82:5c:b4:32:
da:db:6b:c9:4f:6e:05:d1:c4:81:24:f4:ee:a1:8d:
51:f7:a1:6e:58:33:3e:32:5c:5b:93:69:4c:45:de:
ea:10:e8:59:68:1c:6f:e4:6b:b4:5d:9c:e4:25:c7:
e2:86:68:58:d7:53:a1:ac:da:db:74:19:01:b5:be:
f3:84:c9:66:72:18:73:db:5e:b7:12:a7:8b:53:32:
02:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:74:EC:8A:19:F1:2C:74:50:DD:C2:E8:02:61:D8:19:2D:2E:C7:2D
X509v3 Authority Key Identifier:
keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:98:ef:0d:22:27:1a:dc:e8:9d:e7:e3:64:be:fb:02:57:ff:
a7:64:f0:bb:b0:c8:c5:aa:5c:11:34:13:fd:b3:91:36:29:f1:
08:ac:9c:ef:f4:b8:4c:81:c6:94:12:7d:9a:11:82:da:9c:fc:
be:6f:e4:ab:41:df:81:72:ac:64:98:46:fe:8f:b4:3d:ed:fc:
4f:eb:49:63:8f:2a:a1:b4:c3:ff:4e:2e:bf:4c:31:2d:c3:2c:
b0:85:39:26:e4:1a:67:02:b2:2e:77:d8:69:d6:b3:2b:c9:b7:
53:9d:cb:bb:40:ab:da:92:d4:18:cd:aa:c1:e0:a0:7b:9c:6a:
d7:89:bd:5e:78:4f:5f:91:8d:d1:db:19:b1:36:35:f1:15:79:
d2:2a:0a:27:09:6e:c8:da:05:6e:bb:38:9d:f8:97:90:f4:b6:
f0:27:41:6d:39:cc:53:8d:21:6b:d6:45:5a:8b:8a:e0:2c:13:
f8:40:12:4c:71:03:ae:55:a8:c6:50:6a:9d:f5:23:be:e9:f9:
ae:8b:af:25:2a:6e:40:db:fd:ce:6d:bf:80:c1:b9:c9:d2:56:
e3:b7:6e:40:d4:58:3b:17:bf:60:ca:36:d8:7b:4a:08:64:15:
30:13:df:28:11:85:e8:26:10:dc:a0:c8:11:e4:71:57:bd:f2:
19:03:f8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:45:38 2025 by rpki-client