Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
File: 8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json)
Hash identifier: vbXgQ/QorSudVjoGG/7a9uRAHP0kqyqPqE3pf5Dj2r0=
Subject key identifier: 88:90:20:01:F3:46:82:B7:71:A4:FC:53:56:4D:B2:AD:4F:99:75:DD
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial: 0196753054BE84B1C179843316368B387BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 03:00:23 +0000
Manifest this update: Sun 27 Apr 2025 03:00:23 +0000
Manifest next update: Mon 28 Apr 2025 03:00:23 +0000
Files and hashes: 1: 3-RywYSjpl9yuamrGaiHfk5Mz6o.roa (hash: khi3zX71hfk8spUUIwuIJwDTfe1y2tzgOMplAgujSag=)
2: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: Ey/mc6/g4vZFrPIm2lNSTZ7RN/w7b6yc+J9+X9FvOYw=)
3: qmufYg21c7b0gdjuY1ziryDKce0.roa (hash: cPNs19EWQmBAO/qKhHL4tQL9v8RMF/40vmmVOD5n7Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:54:be:84:b1:c1:79:84:33:16:36:8b:38:7b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
Validity
Not Before: Apr 27 03:00:23 2025 GMT
Not After : Apr 28 03:00:23 2025 GMT
Subject: CN=88902001f34682b771a4fc53564db2ad4f9975dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:ef:fb:1d:60:5c:a9:4a:25:bb:fe:d6:05:
2c:0f:b4:0f:02:34:ae:73:3f:8d:77:56:79:6a:a1:
27:da:8b:74:8c:a9:3b:25:39:5b:f2:ef:a5:e1:7e:
6b:03:1f:bc:a6:dd:75:45:c3:96:5a:77:7b:e3:69:
f4:ed:54:f5:a6:b6:98:24:10:d5:ff:3c:96:87:3e:
ae:02:69:91:97:df:6c:4e:af:60:9d:c6:41:94:79:
65:f8:dd:44:c7:06:00:75:68:13:81:a7:f2:f9:49:
b6:5a:80:ff:33:a3:10:c5:41:98:12:83:29:6b:3c:
47:b2:2d:b5:7e:7d:a5:c9:1b:ea:af:53:af:ab:8c:
76:69:98:f4:f8:ab:1a:4e:70:c3:d7:7e:d4:a8:17:
58:0f:50:70:ae:77:ff:aa:63:f7:dd:0f:db:b7:68:
40:ee:c6:9e:57:99:b1:96:2d:5d:00:87:4e:58:57:
35:1f:af:0f:4f:62:bf:ea:ec:ce:ef:9a:6e:c2:fb:
8f:e4:48:f7:e9:19:89:bb:b7:fc:c8:0e:7b:59:5e:
5f:f4:09:5a:14:c7:22:14:9e:bc:a0:ad:39:94:ad:
fb:0d:ad:f9:94:a3:76:61:45:64:b4:f5:d8:fd:58:
26:38:aa:dd:6b:99:d8:5b:c6:26:79:55:58:d1:5d:
fa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:90:20:01:F3:46:82:B7:71:A4:FC:53:56:4D:B2:AD:4F:99:75:DD
X509v3 Authority Key Identifier:
keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9d:dc:09:0c:36:e7:f9:83:a5:d9:94:13:74:d5:3c:2f:9e:
e4:f0:e9:85:a0:0a:a1:9f:06:85:65:43:88:e7:af:ad:48:1a:
6e:50:f6:29:51:42:24:91:0b:a1:8d:ee:66:ec:0d:43:2c:d7:
7b:f3:9a:51:5d:ac:89:5f:a3:1b:55:46:aa:ba:e8:db:4d:f2:
d4:94:60:58:7f:af:a4:15:18:a8:82:36:74:b9:bc:d3:2a:fe:
4e:6a:9f:6b:e2:75:21:56:32:9c:fc:db:7d:73:7d:af:18:7e:
b3:28:87:fc:37:85:78:4b:f6:b0:a1:5b:37:4b:4c:0c:20:80:
40:36:0c:79:8b:7e:44:12:46:3e:ac:dd:b0:53:4c:1a:b4:46:
41:3a:02:cd:3d:e2:fe:75:25:65:b2:c3:0c:7f:24:aa:de:40:
80:30:e3:f9:0c:40:5d:c3:c7:e9:24:0a:3e:bc:4c:41:9a:fe:
c9:39:21:f0:37:de:7c:52:80:bc:50:03:bc:5d:72:30:7a:e1:
f5:86:cb:fb:c4:78:c2:0f:33:71:d9:47:6a:10:5f:22:32:cb:
76:05:be:ad:4b:8b:b8:fd:8f:16:a5:17:f4:25:88:63:4f:2b:
bf:66:18:bd:7e:fc:e6:74:9a:18:20:e1:08:db:ba:3f:4f:fe:
9c:82:9e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:19:49 2025 by rpki-client