Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File: 8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier: RnQnmz8nws7lpExk2Mc6Ayl8h2OQx5MpnDjds/h8zdk=
Subject key identifier: 1B:39:70:2B:E7:70:4A:9C:FD:BE:32:B4:3B:E2:C4:9A:61:4D:60:A6
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer: /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial: 01967679D39F5B4570DD4B98E8A8C497062E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number: 0366
Signing time: Sun 27 Apr 2025 09:00:17 +0000
Manifest this update: Sun 27 Apr 2025 09:00:17 +0000
Manifest next update: Mon 28 Apr 2025 09:00:17 +0000
Files and hashes: 1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: iUVmZM93FlE7THLuhYsVx7WNbxB7aFUTCg8tSSfWuWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:d3:9f:5b:45:70:dd:4b:98:e8:a8:c4:97:06:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Validity
Not Before: Apr 27 09:00:17 2025 GMT
Not After : Apr 28 09:00:17 2025 GMT
Subject: CN=1b39702be7704a9cfdbe32b43be2c49a614d60a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:7c:2a:a2:ad:1c:6c:9f:2f:db:2a:46:28:
d3:59:2c:ca:cf:64:97:41:2e:60:a9:6b:79:fc:b6:
80:3a:6e:09:9b:b1:4a:35:f3:9b:77:d8:12:f4:b4:
7f:f9:3d:44:88:9b:b3:b4:13:21:09:27:30:4c:46:
95:d6:33:80:9d:3f:a4:b8:4d:98:65:bf:87:47:5f:
15:73:e9:c7:8c:75:94:00:03:66:8b:00:06:46:b9:
41:1c:48:53:a3:a5:c3:fc:62:18:f7:e3:31:f5:20:
d6:d9:fe:5d:24:24:b4:85:02:24:53:02:c7:72:39:
fd:86:84:b4:10:45:3a:f8:19:7b:77:b5:70:10:32:
44:74:e9:9f:e0:25:75:cf:17:60:93:48:9c:23:7b:
4a:15:79:df:de:96:ab:36:ca:80:af:bd:a5:51:19:
2d:07:0e:c0:6c:ee:db:4a:85:ec:a5:f9:c1:7c:4b:
b2:8a:7b:84:59:f4:81:91:8b:56:f7:b4:5c:e7:4c:
6a:2a:7c:ad:65:26:36:a9:8b:94:03:1c:96:84:90:
d6:b2:21:b9:8d:2b:98:06:fc:9c:77:cc:21:21:27:
72:0d:63:2b:65:f9:17:8e:d3:25:02:9d:f4:6a:6a:
c3:63:15:e5:9c:df:f6:36:91:94:3f:69:f3:05:a2:
bd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:39:70:2B:E7:70:4A:9C:FD:BE:32:B4:3B:E2:C4:9A:61:4D:60:A6
X509v3 Authority Key Identifier:
keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:28:91:f5:b7:6a:09:96:41:85:51:d1:67:49:6c:37:16:f1:
76:05:8b:d2:94:92:9f:fb:24:dd:1e:ef:82:c0:9b:8a:d8:ff:
ba:63:a1:2d:c0:96:96:db:e2:e1:57:95:57:08:b5:8d:39:bf:
a7:ad:45:3f:bc:b4:d0:a5:c7:3c:87:9b:31:01:24:67:5a:3d:
7f:16:5d:c1:b4:da:fe:fe:01:86:5b:67:bc:aa:77:ad:2a:42:
9f:4a:06:fe:11:3c:5f:31:e5:65:0d:8c:fe:17:5f:14:fc:25:
e7:36:26:ad:38:47:99:98:b7:44:25:99:51:f6:d2:a1:93:1d:
e4:39:1a:9a:f3:dd:3e:40:97:12:4f:b6:96:c4:fc:a6:88:4d:
2d:00:00:d1:25:0f:f0:94:cb:90:4e:5e:e9:f0:4d:12:94:a3:
80:f7:d5:b5:12:a2:5e:1f:c3:d5:2d:dd:b9:e7:2e:84:96:89:
55:94:94:1e:b5:e2:fc:d6:67:7b:40:d5:7f:24:c3:54:9d:6b:
02:2b:29:c7:73:e5:f8:82:df:64:04:7c:3e:4c:17:c9:d5:a3:
30:38:aa:a1:e5:1e:b5:8b:cb:01:d3:9e:7d:be:90:03:96:76:
6c:da:ad:df:f2:d0:38:ec:0a:c2:08:b9:60:02:e9:6a:6a:54:
5b:7f:e0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:22:55 2025 by rpki-client