Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: ddV6vep+rA+Lq0PcSNK1cX7XJ1LZU2VVwRx+eJr8/r0=
Subject key identifier: 61:E0:31:0E:49:4F:5F:3F:0C:9F:07:E6:94:E8:DE:C6:64:01:B6:95
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 01968BB8588B1A592C297F09D4167CB45FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 05DB
Signing time: Thu 01 May 2025 12:00:36 +0000
Manifest this update: Thu 01 May 2025 12:00:36 +0000
Manifest next update: Fri 02 May 2025 12:00:36 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: LPw2q1x3PV9RgA+E4yrr6BkHkkv60rPlc1PmTTQKsaM=)
2: NoirTMocfMUxRX4SSF3NnN1MXMg.roa (hash: k1dgXUxG201nPT5HWgsPlWuxupL/o/GsnkXTowkj8SY=)
3: kBL0NGTyltK_bUGqu0ZT8FN5oyY.roa (hash: RQ7q9e83VNSzPNBYQofT5w9K3HiXcrFugBatkkxu9/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:b8:58:8b:1a:59:2c:29:7f:09:d4:16:7c:b4:5f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: May 1 12:00:36 2025 GMT
Not After : May 2 12:00:36 2025 GMT
Subject: CN=61e0310e494f5f3f0c9f07e694e8dec66401b695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:13:8f:ef:06:c4:1d:45:ea:dd:a3:c2:71:
71:e9:7e:ce:1b:cd:b9:e4:88:cb:48:4a:67:d2:2c:
a1:d3:7f:af:21:59:45:d1:94:fd:e3:45:3e:67:87:
c1:66:2b:80:97:69:4c:3e:b6:a4:e8:6f:4f:60:37:
3d:26:91:b6:a0:a5:ee:e6:bf:3b:82:e8:f8:1d:27:
b6:5a:5a:59:19:0e:e6:c5:5d:c2:a4:2a:5c:56:c4:
bc:49:cb:ab:7d:bb:83:20:f0:7e:cf:48:57:c3:13:
63:e0:13:58:3d:d8:06:47:9d:73:71:43:4d:30:45:
d9:63:ff:5b:15:0c:ef:66:2b:bb:73:49:df:92:ee:
6a:67:00:35:ac:ad:a3:84:39:28:76:a1:8d:fc:41:
89:9a:fc:37:fe:39:3b:88:1e:6e:3e:1a:e4:66:44:
83:8c:34:a3:75:9a:0d:4d:f2:ca:73:ba:56:31:b8:
c0:32:3a:d2:6c:7e:e8:c5:51:75:5c:fb:8c:50:0f:
f3:7b:56:16:ce:6c:3a:7a:af:6b:5a:27:94:15:bb:
07:75:9d:32:e0:19:81:db:1a:61:88:13:e5:7c:fd:
d5:b5:d4:e8:3b:fa:24:d6:a3:b8:47:1f:06:73:e9:
61:e8:f7:58:eb:47:d0:20:87:ef:30:02:2e:14:cc:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E0:31:0E:49:4F:5F:3F:0C:9F:07:E6:94:E8:DE:C6:64:01:B6:95
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:dd:49:d3:01:0e:64:c3:3c:15:21:c3:9c:16:d3:cb:9f:65:
53:85:1a:5d:96:ec:ed:83:33:71:72:68:1d:3f:55:35:86:15:
52:1a:07:ea:df:c0:ef:0f:d3:9f:29:25:d9:48:c3:85:b7:12:
f2:63:86:e4:ec:8f:c1:07:c9:95:0a:28:03:a4:cc:d2:24:5c:
1d:b4:3b:c9:78:3f:df:ab:f6:66:5f:85:1d:8a:9d:37:16:d9:
8f:29:b2:13:77:e2:03:2b:87:ea:de:bd:15:2d:c6:21:23:5c:
3c:e5:ad:c9:a8:aa:a2:f8:5a:3d:c2:5f:87:74:13:7a:65:d1:
49:bc:6e:67:41:a4:30:07:b8:b2:92:75:a0:ae:1a:ca:2d:3e:
f6:aa:a2:01:5e:a9:45:f8:d2:01:f1:f2:a0:a2:4f:d7:b2:ea:
ed:b8:80:b9:4d:bd:20:5a:21:44:c3:9c:47:7f:06:52:33:f7:
ef:aa:74:38:ab:ce:60:ee:ed:05:03:28:09:b9:8d:a7:49:54:
c4:3a:1a:f9:ab:9c:1c:11:1e:48:2f:27:5e:41:1d:d8:31:ca:
2e:b2:21:3b:f1:f0:66:3c:5a:87:7c:6f:7e:20:5c:cb:50:9a:
83:85:c9:16:a4:c5:a6:46:33:13:a6:5b:a4:5e:9c:2e:36:61:
e2:11:71:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:01:32 2025 by rpki-client