Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
File: hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft (raw, json)
Hash identifier: 63AKxw3GIrViAF5+GHURnl2j3IIKS1e22tUibSGkTFM=
Subject key identifier: F8:86:5D:0C:DD:A1:84:03:A7:15:02:70:8F:D8:B3:37:BC:FC:3D:A3
Authority key identifier: 86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
Certificate issuer: /CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Certificate serial: 019676E80DCA4FFE86C3B10C26C986E4CCC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
Manifest number: 10F2
Signing time: Sun 27 Apr 2025 11:00:41 +0000
Manifest this update: Sun 27 Apr 2025 11:00:41 +0000
Manifest next update: Mon 28 Apr 2025 11:00:41 +0000
Files and hashes: 1: F1oKspcJIA5CxkgGbXIBC4yC3wU.roa (hash: AKm+230ZJqvJyVXgtMkmTb/sN72RWRXH+8ONP+ImAwA=)
2: hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl (hash: bSxUNcML9D0CJJvdmCVlyb7MWHRE38uAm8+gydONiOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:0d:ca:4f:fe:86:c3:b1:0c:26:c9:86:e4:cc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Validity
Not Before: Apr 27 11:00:41 2025 GMT
Not After : Apr 28 11:00:41 2025 GMT
Subject: CN=f8865d0cdda18403a71502708fd8b337bcfc3da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:40:5a:20:61:cf:9d:3e:e6:c4:a2:8d:6f:
c4:4d:cf:af:b1:da:74:68:a7:77:7e:c4:18:b9:c1:
51:b2:9c:ca:cd:ca:83:e3:cc:9f:5e:d8:5d:22:c9:
18:2f:38:ea:24:cc:18:f2:6f:f7:ce:d4:96:ad:84:
83:10:2a:ad:ed:5a:10:31:b2:96:e3:9e:af:09:86:
e1:8a:12:3b:cf:ce:16:60:07:8b:36:53:0b:cc:8f:
e4:df:35:3c:4e:db:15:e6:3e:72:6e:a5:73:76:ab:
ea:8c:4f:76:c8:67:51:0e:cc:41:37:a3:b7:64:ba:
5f:29:46:99:b2:1a:ee:2b:45:8b:6f:68:25:91:4b:
92:21:98:c4:6e:23:30:32:59:54:d8:9e:29:45:41:
a7:a9:3b:55:0c:15:64:53:b8:95:62:bc:6a:dc:a2:
d2:a6:ef:08:19:1d:01:a4:3e:6a:54:8b:f7:1c:45:
cc:06:28:6c:35:c0:c4:d3:38:26:67:d8:35:be:3d:
d5:87:50:b4:38:ea:6d:fe:31:7f:15:03:ed:6e:67:
cc:e1:3f:dd:dc:e2:42:d1:b8:cd:44:91:13:4c:14:
f9:80:65:74:1e:5c:fb:4a:12:e9:d9:d5:32:60:64:
7f:a5:00:39:39:b0:50:76:d1:60:27:1e:40:b8:e0:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:86:5D:0C:DD:A1:84:03:A7:15:02:70:8F:D8:B3:37:BC:FC:3D:A3
X509v3 Authority Key Identifier:
keyid:86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e9:3b:f3:a3:73:b1:66:4a:41:aa:08:e4:d5:e5:d9:41:ca:
ad:2b:8f:20:85:dd:34:84:ab:8c:b9:06:70:4d:77:e7:e9:33:
f1:87:44:19:8b:31:30:29:2e:20:40:16:ac:df:13:3d:41:85:
19:34:41:c8:8b:ec:57:e2:67:1c:c6:ad:3e:95:e6:3b:c0:93:
ef:90:29:99:1b:cb:b9:92:65:e3:4d:ea:3a:c7:61:6b:96:25:
e3:06:8d:bd:8b:fb:b3:43:ff:a8:65:e5:f0:de:95:dc:b1:1b:
f0:27:3b:6d:96:90:71:1c:7c:19:1d:3d:21:ed:e3:b4:09:9e:
be:84:17:92:9e:d3:8a:ff:5c:d8:2b:3d:6e:b1:1a:3f:88:06:
dc:41:2c:f2:0e:10:c4:b6:03:05:79:f6:09:f0:17:71:e2:b9:
83:a7:a1:0b:b2:23:23:f7:af:3d:3f:bd:f0:19:0b:e3:50:19:
2d:23:41:00:74:5c:1f:3d:8a:e1:a4:e9:7c:a0:79:aa:dc:0f:
d3:7f:93:13:2e:0f:ad:7b:8e:60:66:b2:b1:1f:a8:ec:27:d2:
16:72:63:a8:f2:6a:e1:01:43:f9:9a:f8:0b:43:01:d7:8c:0b:
a0:5f:c6:85:7b:d2:1a:a7:db:fb:c6:61:29:aa:c6:f5:d3:54:
97:c0:6b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:47:05 2025 by rpki-client