Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
File: 8IcQ5uJObWm9XESv6vDunGftOgY.mft (raw, json)
Hash identifier: H9DohKs2TeW+5e1eBWtnFUso2mzDJR7CuxRA9icTTxE=
Subject key identifier: CC:59:41:8B:14:17:4A:00:A3:FE:EB:02:5D:F5:0B:42:14:DF:D8:BC
Authority key identifier: F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
Certificate issuer: /CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Certificate serial: 01968021DBBC7474D3D15744418CBB5570EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 06:00:24 +0000
Manifest this update: Tue 29 Apr 2025 06:00:24 +0000
Manifest next update: Wed 30 Apr 2025 06:00:24 +0000
Files and hashes: 1: 8IcQ5uJObWm9XESv6vDunGftOgY.crl (hash: L2YtVhYCyzpTzz5WNP/+/epeVYv28ge0OV1ggzCX8qw=)
2: GSeC1Rl6mpKFcoTMI2ji-UCz9Y4.roa (hash: PbjkP2/mvOpx2a2PbKu6Uf4IiG6ZwqTripEFW9PTXoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:21:db:bc:74:74:d3:d1:57:44:41:8c:bb:55:70:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08710e6e24e6d69bd5c44afeaf0ee9c67ed3a06
Validity
Not Before: Apr 29 06:00:24 2025 GMT
Not After : Apr 30 06:00:24 2025 GMT
Subject: CN=cc59418b14174a00a3feeb025df50b4214dfd8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:11:1f:f3:ce:97:e3:52:4a:00:68:84:b0:
10:5e:6e:fe:d0:82:0a:ee:54:e0:07:1f:33:a9:8d:
d7:ef:c7:8b:7f:0d:03:ec:21:ba:44:6e:2b:a8:31:
2c:d0:58:3c:3f:07:aa:4f:55:bd:54:a5:05:9b:5a:
ae:4b:c2:cb:83:5c:a9:74:b6:fb:2a:9c:b5:1f:94:
42:19:d4:30:91:9f:9b:61:82:df:71:f8:30:ee:fe:
1c:c3:25:6f:3e:25:0c:00:b9:a8:16:d0:3c:f1:bb:
5e:9d:f3:ed:e2:96:86:c5:ed:ed:49:db:de:b1:34:
37:32:51:df:fd:a5:25:a3:d7:04:e0:1c:d4:e0:12:
4c:b6:ee:0f:7a:da:c9:10:e4:a5:cc:1d:2f:87:3b:
34:83:5c:46:17:b0:6c:e0:2b:ac:e5:2f:c0:ec:e2:
cf:11:35:88:98:70:8c:d1:ca:93:8f:93:20:44:6c:
f1:24:bf:65:00:c4:58:fb:62:8f:e3:2a:8a:92:e0:
8b:bf:00:96:83:7a:97:d6:b4:e8:f3:93:3a:30:01:
d4:35:f1:cc:e2:6f:0d:3e:84:fa:d6:be:22:1c:ec:
36:d0:48:e3:93:bd:e5:27:a6:b2:9b:fa:1f:a0:0b:
f7:6d:9e:88:65:43:6b:bf:82:c1:fb:24:9f:a5:b5:
6d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:59:41:8B:14:17:4A:00:A3:FE:EB:02:5D:F5:0B:42:14:DF:D8:BC
X509v3 Authority Key Identifier:
keyid:F0:87:10:E6:E2:4E:6D:69:BD:5C:44:AF:EA:F0:EE:9C:67:ED:3A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IcQ5uJObWm9XESv6vDunGftOgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7bbad4-e15a-4bfd-ab32-76e865e2c4bd/1/8IcQ5uJObWm9XESv6vDunGftOgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d4:8f:c1:c0:5d:d1:0a:27:a7:fe:ae:07:31:11:b5:17:96:
52:d0:b5:ff:e8:6b:39:e7:24:23:e4:23:b0:17:fc:f4:88:26:
f1:52:03:fc:77:62:51:fe:ff:a3:40:ec:e9:04:d0:dc:a8:9f:
e0:25:59:e9:7e:e7:fb:56:1a:a7:b3:eb:cf:64:6d:a2:f6:36:
f9:20:9a:26:bf:ba:10:fc:a7:12:8f:7d:73:ea:e7:23:bc:a5:
e5:dd:2c:e8:19:ed:d7:94:fd:46:ff:0b:5f:5a:7e:31:ad:a3:
35:88:c9:18:f3:44:d7:ff:35:1d:55:16:1b:0d:aa:6d:84:13:
5a:d6:5c:6e:7b:8b:f0:93:49:10:f9:03:68:ff:23:f2:58:7a:
cf:14:4c:75:90:49:d1:18:27:88:38:3f:51:30:9a:88:2e:37:
6d:d1:ed:c8:6e:16:e8:42:87:20:87:e9:81:3f:db:f7:ec:1f:
8b:4b:48:83:eb:d0:3e:cf:be:ef:e8:9b:87:d9:da:4a:33:d7:
13:b5:ed:a6:fa:46:43:54:5f:d2:d7:b5:6a:69:15:1a:e2:cb:
b6:50:50:ff:49:d4:74:76:5a:55:7e:f8:72:cc:d6:13:a9:26:
89:8c:be:8c:8f:a4:d5:89:ed:93:51:6f:9d:ce:b0:87:1b:f7:
a5:80:90:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:28:22 2025 by rpki-client