Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
File: 8_74sMHKR-cW2iGdMQKAKH026-M.mft (raw, json)
Hash identifier: hIcJz1VC5EBiqHs8TJObzfGTZ3iTkUhqWinlswQVdso=
Subject key identifier: D1:55:22:4C:6E:F2:8C:E7:7B:3E:10:38:69:31:A2:D4:F5:09:0F:59
Authority key identifier: F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3
Certificate issuer: /CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
Certificate serial: 019679E9F8989C3FE61224D81E9477EA6931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
Manifest number: 0B9D
Signing time: Mon 28 Apr 2025 01:01:38 +0000
Manifest this update: Mon 28 Apr 2025 01:01:38 +0000
Manifest next update: Tue 29 Apr 2025 01:01:38 +0000
Files and hashes: 1: 8_74sMHKR-cW2iGdMQKAKH026-M.crl (hash: 5E+4aU+Ro4QDRfxsp6/QIsLGk/znTWGDggeDApS8Zto=)
2: Nh4smUq7Nayhm_h4hcJhFSXbd98.roa (hash: 0tOyxit0JfWpS02swEQXMIpCvZrxbPbACrr2wxwWLsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:f8:98:9c:3f:e6:12:24:d8:1e:94:77:ea:69:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
Validity
Not Before: Apr 28 01:01:38 2025 GMT
Not After : Apr 29 01:01:38 2025 GMT
Subject: CN=d155224c6ef28ce77b3e10386931a2d4f5090f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:ff:5a:d5:03:3d:63:da:39:79:9a:11:03:
76:0f:b0:e6:62:30:30:c4:7f:00:30:b0:43:59:e2:
4b:72:e2:a6:8b:8a:15:9e:fe:7c:0e:99:6f:83:17:
24:2d:50:1d:14:aa:15:9e:39:ff:c9:f5:3d:a8:1c:
71:eb:4e:db:ec:bd:df:66:96:11:41:59:e4:1b:c8:
70:bc:aa:2e:f4:5c:45:53:8a:5d:05:0b:e1:64:d0:
dd:b1:54:22:4a:9d:f6:fb:43:83:b4:ae:50:8e:3d:
e6:02:47:0f:aa:b8:5c:ba:58:f8:0a:0e:80:a7:be:
0a:5b:db:90:eb:c4:c2:6c:a0:3f:4b:a4:50:67:37:
6c:43:50:03:d7:16:6d:7f:bc:1c:30:bc:5d:03:b8:
4b:c9:e2:75:87:93:24:fe:fc:32:3b:4c:9c:63:95:
ff:2e:52:1a:96:87:2a:91:50:c6:6e:df:e6:0b:2b:
76:5c:86:c4:cd:25:cb:74:c4:8a:a6:fb:33:c1:c7:
37:c0:a7:c8:08:43:58:a5:79:3d:8a:89:a7:c2:35:
31:4d:15:14:37:05:ee:54:17:51:00:4d:4f:a4:93:
22:c9:87:28:0b:25:96:31:3c:71:27:1f:96:d9:36:
38:43:0b:9d:b1:bf:ef:54:b2:43:02:88:54:bc:5e:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:55:22:4C:6E:F2:8C:E7:7B:3E:10:38:69:31:A2:D4:F5:09:0F:59
X509v3 Authority Key Identifier:
keyid:F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7a:0f:74:cb:d6:ac:66:dd:53:52:bf:49:38:f4:3f:c5:25:
a1:21:2c:c1:6f:78:1b:a7:5a:e7:42:61:39:1d:96:94:b1:ad:
40:6c:02:57:f5:5c:74:9e:d0:d7:67:83:9b:65:7a:48:58:f7:
b0:91:8e:26:92:cd:9c:a6:64:b8:61:f9:77:01:e3:ff:db:b1:
05:e4:62:56:9f:3b:0c:cd:31:7d:e5:0d:ab:54:26:35:c4:92:
c8:bd:3c:2a:ac:b9:ca:bd:39:bc:a1:07:6a:68:90:67:ef:07:
23:17:d5:35:77:cb:f0:12:8d:af:0d:55:14:e7:9a:3b:ef:18:
6a:12:a4:4a:42:2d:0f:1c:90:27:70:27:7a:f6:70:37:44:8b:
4b:e5:6b:b4:6b:cb:0b:4c:fc:bd:6d:76:f6:2b:2c:72:0e:f0:
a9:78:29:ce:90:9d:fd:15:1d:f9:17:5f:62:e5:07:7a:0f:f1:
58:6d:a3:e0:e3:33:ab:79:db:04:42:71:bb:dc:e3:b5:f5:77:
cd:bf:24:61:fa:d1:5c:00:4e:c3:91:12:c1:f7:c4:0b:62:0e:
a8:11:9b:69:54:e5:e6:7d:dd:56:52:fe:84:b1:e7:8c:5d:dc:
3a:d1:e9:92:54:9e:58:5f:43:59:2d:b3:b6:66:6b:45:f2:e0:
90:10:86:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:32:24 2025 by rpki-client