Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
File: 8_alfqKpAutJEt6SffgDBMNVqxI.mft (raw, json)
Hash identifier: rdbLrA6rfGQb2f5XnPhvockUlQnAERFkIWFQZKoHnYE=
Subject key identifier: CD:68:C5:27:21:0B:6F:7F:F8:DE:73:45:20:F4:12:7F:ED:EC:28:04
Authority key identifier: F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12
Certificate issuer: /CN=f3f6a57ea2a902eb4912de927df80304c355ab12
Certificate serial: 01967C0E016D7D23D7E525272680613D8E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
Manifest number: 1464
Signing time: Mon 28 Apr 2025 11:00:14 +0000
Manifest this update: Mon 28 Apr 2025 11:00:14 +0000
Manifest next update: Tue 29 Apr 2025 11:00:14 +0000
Files and hashes: 1: 8_alfqKpAutJEt6SffgDBMNVqxI.crl (hash: tGLu4jfg05vwWuelFYfWQZ+JNuFW/1sZlJ+QeHKHrZ0=)
2: u8DCnmiwdvKh2XgFpOMuHJjylj4.roa (hash: pyYbMY7OWkqDVRgEujgw5F9QcQGgPWWbAPnLnwKmM2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:01:6d:7d:23:d7:e5:25:27:26:80:61:3d:8e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3f6a57ea2a902eb4912de927df80304c355ab12
Validity
Not Before: Apr 28 11:00:14 2025 GMT
Not After : Apr 29 11:00:14 2025 GMT
Subject: CN=cd68c527210b6f7ff8de734520f4127fedec2804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:14:94:a1:1b:65:a1:a7:80:e5:9d:a7:4b:
38:23:d9:d7:50:c5:ee:97:10:1e:09:4e:69:63:a8:
a0:9b:71:8f:3f:9c:c8:80:ae:69:d3:1e:c5:60:ed:
00:f4:73:d8:80:82:c6:b8:09:ca:da:f4:b9:d2:e5:
14:e7:63:2d:6b:3c:4e:c3:17:8a:86:c5:f5:5d:b2:
68:c0:7b:fa:d1:64:a0:eb:a0:04:18:d4:03:b1:24:
ac:a4:8a:82:ec:a5:31:39:19:99:80:6f:fc:41:39:
0f:ee:50:38:fa:53:f0:49:9d:11:a5:fc:a9:4a:29:
23:44:00:90:cb:32:18:11:60:ef:70:fa:96:c7:ca:
bc:a9:f7:b2:53:43:bb:45:eb:00:ab:a4:9f:1c:aa:
81:98:eb:cd:f0:e9:44:3c:d7:24:3f:1c:8b:4a:33:
b6:c6:0b:bc:50:f5:dd:e9:06:2b:d1:69:e8:6d:81:
df:b0:47:93:62:b5:46:b6:31:14:0e:4d:0d:a8:bb:
f5:23:cf:ac:2a:bd:1d:49:af:24:f5:9d:d2:8d:22:
85:f3:93:a0:68:33:9b:8c:80:d7:37:fc:e8:aa:56:
ba:14:08:cb:b4:e3:b0:10:9d:a1:8f:5a:9f:09:50:
fc:7b:6f:bd:d9:76:09:cd:ad:5a:11:7e:51:a2:5c:
14:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:68:C5:27:21:0B:6F:7F:F8:DE:73:45:20:F4:12:7F:ED:EC:28:04
X509v3 Authority Key Identifier:
keyid:F3:F6:A5:7E:A2:A9:02:EB:49:12:DE:92:7D:F8:03:04:C3:55:AB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_alfqKpAutJEt6SffgDBMNVqxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/8bf389-813c-49ba-850c-940c6b8b502a/1/8_alfqKpAutJEt6SffgDBMNVqxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:58:85:34:a0:04:be:43:df:80:2d:26:96:32:71:eb:b4:44:
59:5e:0e:1d:3d:81:41:03:71:d2:08:00:2a:1c:62:76:08:fe:
33:fb:c5:bb:2b:bb:2a:71:5f:2f:af:0c:30:3d:ad:85:a9:8e:
a3:e2:61:d1:9f:d8:36:c1:12:7f:e4:4d:96:2f:b2:0f:e6:71:
02:3e:8b:13:0c:73:cf:f5:7f:66:31:ed:fd:f5:de:59:df:36:
06:f8:a8:60:3e:05:b0:54:8c:9c:5b:41:c7:2a:db:12:65:a0:
27:16:d3:87:5c:23:bd:5b:9d:ec:6a:57:4d:aa:af:a6:17:cc:
be:77:f5:e4:5d:2e:67:2b:ef:23:cf:b0:00:4d:04:86:24:79:
1b:08:15:83:36:5a:95:c8:7e:d9:27:e6:39:61:12:2f:2e:9f:
3d:1b:2e:95:ee:1a:00:7f:02:43:1e:2e:fe:26:d6:57:3e:81:
18:09:3c:61:3e:c2:ff:8a:e4:c5:e3:f9:ab:d7:06:6c:3a:41:
22:02:18:f9:fc:9d:9a:e1:c0:49:f1:6c:1f:cd:09:c2:6d:84:
0b:88:54:46:cd:13:b4:0f:d6:4a:37:80:49:53:7a:84:0c:0d:
bc:96:2c:ef:e9:8d:e0:db:68:d3:17:0d:ce:7b:52:bc:9c:89:
df:f1:24:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:35:53 2025 by rpki-client