Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
File: 8khYdchHDmqs3JR0IQXzDFl6wrs.mft (raw, json)
Hash identifier: 00nSY8swcsnpBwjNrYYaeBj2NljaNAlddZCNkI+bmxA=
Subject key identifier: C6:5D:C8:09:F1:9E:41:C7:35:57:B4:A9:D1:30:D8:36:7A:4B:44:D2
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial: 0196748BD42863FC3C729FE28026657847C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
Manifest number: 0C07
Signing time: Sun 27 Apr 2025 00:00:42 +0000
Manifest this update: Sun 27 Apr 2025 00:00:42 +0000
Manifest next update: Mon 28 Apr 2025 00:00:42 +0000
Files and hashes: 1: 11v4ujiE85pODnajO4MIvDa-EEI.roa (hash: 899jJDpYjGC19E0C+sSPG4BflRjWNeXH81Y2tQUCHZ0=)
2: 8khYdchHDmqs3JR0IQXzDFl6wrs.crl (hash: /5F6BbNIVIlqK5RI816pS/F5HqoYQaJQxK4etAM1dWc=)
3: H5a6_PbqYpspvXprSKayoanO0T4.roa (hash: rh38nYvA7FwPR7BzdHUH02hvI8rv4wT+OqQOUSlde48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:d4:28:63:fc:3c:72:9f:e2:80:26:65:78:47:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Validity
Not Before: Apr 27 00:00:42 2025 GMT
Not After : Apr 28 00:00:42 2025 GMT
Subject: CN=c65dc809f19e41c73557b4a9d130d8367a4b44d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:9d:ab:3b:e7:36:2a:13:eb:8b:7f:7d:70:
14:1f:f5:e9:61:68:da:01:d0:8d:e5:ec:00:70:02:
88:e9:e3:d0:df:f9:b2:4c:ad:94:0d:37:33:69:93:
ac:52:bb:43:db:5e:5b:3e:09:0a:be:a8:c0:69:95:
01:33:46:6d:55:85:30:f2:35:29:8a:32:af:48:1b:
b5:f5:51:be:a8:33:cb:c1:50:83:08:f7:9a:e7:db:
74:e3:2b:9c:b7:2a:a7:ae:84:e6:92:e8:a0:ab:fd:
ea:94:31:9e:48:f2:06:46:dd:c9:61:0a:30:53:88:
d7:46:c6:dd:fa:6e:43:12:57:4e:44:9f:3e:f3:82:
3c:d7:ce:3a:60:cd:8f:21:71:b3:4b:6c:0f:03:49:
36:d6:8f:e0:3f:8a:bc:62:d4:bb:70:22:ef:6f:23:
f0:ce:ce:9d:98:2d:39:b9:91:54:46:f3:fc:30:09:
0c:16:9f:59:3e:7a:70:6f:40:1c:bf:94:14:49:77:
07:8f:98:51:d8:58:75:6f:ee:d0:f7:b2:92:64:87:
10:38:c1:8f:14:6f:eb:ef:ca:ab:9a:46:cc:27:fd:
46:af:ec:a4:d5:29:d2:42:97:95:9e:f3:87:2f:2c:
55:d3:51:f6:df:e7:7f:53:01:b8:de:8b:d6:7d:a8:
35:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5D:C8:09:F1:9E:41:C7:35:57:B4:A9:D1:30:D8:36:7A:4B:44:D2
X509v3 Authority Key Identifier:
keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:db:9f:5b:da:14:8e:8f:7f:af:c6:08:44:45:97:8e:06:15:
5f:cb:8f:cf:6b:e7:a8:89:4c:01:e3:5d:08:bd:af:4d:51:26:
28:f8:33:7a:8a:94:57:ed:63:44:9b:fa:3c:5f:bf:93:c3:4e:
6e:c4:9b:fb:18:01:ca:55:7c:0f:f3:44:e5:aa:84:fc:62:92:
ac:3b:ac:20:cc:16:80:ee:96:cb:54:6e:11:0e:cc:9b:1a:21:
4d:b3:02:c7:e7:4e:26:2c:ac:5f:8c:12:ea:0d:5f:ec:14:1a:
c3:47:39:50:e6:b0:b8:0f:35:b3:f7:86:21:fd:a1:c6:cd:a7:
5c:c6:32:09:5e:3b:22:17:46:96:f6:a9:8b:61:14:81:88:58:
91:9a:e2:ed:9c:37:87:04:9b:c1:7e:34:e7:82:84:38:4c:15:
7d:38:74:2d:9d:1f:75:7f:28:3a:d1:e6:2b:cd:8f:c5:61:1b:
9c:61:05:f2:fb:99:84:67:82:30:68:03:81:9f:bb:35:87:21:
41:fb:39:2f:28:e8:55:2e:2a:6f:3e:b3:f1:8a:33:39:37:83:
7e:47:e9:d2:f7:39:5b:46:5f:f7:84:d9:2d:bb:c7:08:54:35:
d8:13:e7:da:2a:60:94:88:2a:e4:c9:ee:f8:53:7e:1d:f1:57:
09:f1:ab:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:10 2025 by rpki-client