Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
File: 8-NiIsy8bHIhNgVAurOp26nyN6A.mft (raw, json)
Hash identifier: DL+k5Cqwa6/3sxJyWiqSRQfXBzt6RFlRU+dO5KKpxtw=
Subject key identifier: A3:96:54:8D:77:33:FB:13:8E:88:DD:D4:8B:8F:51:17:C1:F3:1E:18
Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
Certificate issuer: /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Certificate serial: 019683FFE03A48C8D93D67D4F2AD842BED31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
Manifest number: 12D4
Signing time: Wed 30 Apr 2025 00:01:46 +0000
Manifest this update: Wed 30 Apr 2025 00:01:46 +0000
Manifest next update: Thu 01 May 2025 00:01:46 +0000
Files and hashes: 1: 4OAQQVO8VIFzfsVpiMv8jSSll54.roa (hash: JMcD21CurSjrVb9e/Fa0SxXVumzBh+XhCdZn2t0vX/k=)
2: 554gdq_ok9HYl3wcKstvNBVgVnI.roa (hash: KPXZ5rw0NzwP5c/cXfxWSL2Bey+lXp0pHFMUbBSidd8=)
3: 8-NiIsy8bHIhNgVAurOp26nyN6A.crl (hash: 7dcEqEY6669Z/FVZMtkhkzAFVoGbHqQ/y36BPDqDhR8=)
4: S4_bZaUrYeif2UyHHeNglamlIdY.roa (hash: xW3QM1MxANWCikFD0BTEoT7OwPC4SDKTPMb/5xd/WUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:e0:3a:48:c8:d9:3d:67:d4:f2:ad:84:2b:ed:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Validity
Not Before: Apr 30 00:01:46 2025 GMT
Not After : May 1 00:01:46 2025 GMT
Subject: CN=a396548d7733fb138e88ddd48b8f5117c1f31e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8e:0f:8b:12:c4:cc:4b:c2:41:34:1f:da:c7:
13:58:61:56:ba:7a:dd:31:2b:cc:a6:24:fa:db:5a:
4d:94:f4:68:c3:c2:67:18:2d:da:a8:a8:3d:9f:4f:
cd:9e:29:29:40:dd:50:be:dd:b5:22:f4:80:01:8e:
b8:b8:2a:6e:33:25:fd:b9:7c:4c:4f:a6:19:5c:a9:
b1:6a:61:3b:73:36:67:48:69:86:3e:16:a5:17:dc:
fc:e6:3b:a6:a1:38:47:11:52:9d:09:6f:94:31:ba:
3d:b1:99:4a:42:3f:c1:ec:51:65:8e:96:ef:f6:94:
84:f0:14:ac:81:a4:ee:db:42:89:c8:f7:9a:57:4c:
ae:88:16:1c:33:f6:93:7f:27:c0:7d:86:7d:15:a2:
e2:35:fa:fa:7f:41:8a:c8:3b:58:19:a2:64:80:a3:
2c:60:80:b7:52:13:6a:91:3f:4d:3a:7d:be:dd:96:
69:af:63:a4:41:81:7c:7c:e3:15:90:68:bb:65:15:
7b:0a:b8:7f:1b:49:87:ad:56:80:6d:96:27:fc:f7:
5a:c8:c3:f0:d6:f2:5b:36:42:fe:3f:e2:68:81:c9:
28:41:bd:33:da:88:7a:87:3e:fe:9c:d2:a1:38:62:
a3:cd:4e:89:05:fc:aa:47:df:ad:53:d2:5a:ff:16:
2a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:96:54:8D:77:33:FB:13:8E:88:DD:D4:8B:8F:51:17:C1:F3:1E:18
X509v3 Authority Key Identifier:
keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f0:09:71:70:10:3c:0f:bc:d5:f8:2d:54:98:c4:67:6a:49:
e4:b3:af:25:0c:db:54:50:8f:fe:a3:38:cb:cd:f5:21:5c:bc:
eb:c7:ea:43:12:49:0c:8e:4c:27:17:6b:f5:a5:73:09:4b:8d:
db:b1:35:d8:75:9b:be:79:47:fd:35:b6:d4:9c:56:10:ea:bf:
90:d6:be:f0:80:32:22:c5:ee:4d:87:b2:5e:36:87:4a:03:01:
3c:2a:d7:71:45:b6:ed:40:a6:52:bf:b2:bc:41:64:b3:30:94:
03:29:52:1f:d8:15:c8:55:40:f9:a8:a2:85:81:05:2d:b8:97:
01:8f:15:0f:de:c8:b9:72:a4:1e:3d:ac:fd:ac:d8:bf:6b:ff:
30:ec:61:41:9b:d8:4a:8b:48:e4:5c:0f:e1:6f:fc:5d:ab:e2:
c4:f6:01:63:b0:20:16:07:37:cb:fb:b7:c6:7c:a3:c4:56:1b:
5a:23:b9:89:2e:f6:77:2a:fb:b4:bb:4b:5f:19:18:44:6d:61:
6b:5b:e5:aa:ba:26:97:8e:d7:8d:db:ff:61:cd:02:87:39:b6:
32:14:d8:64:e8:5e:1f:41:55:4d:78:3c:8a:83:dc:e8:81:63:
35:ec:eb:d4:4c:64:78:a2:a4:43:85:b6:18:7f:08:d5:c2:31:
ba:b7:89:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:29:40 2025 by rpki-client