Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
File: L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft (raw, json)
Hash identifier: gko3XyiPii2aPK0PE4DO/SGUm+dCh4yoDMyVg94n+RQ=
Subject key identifier: 8A:C2:05:6B:86:C6:83:99:A9:F4:34:A9:82:4D:A9:4B:7F:5E:8E:93
Authority key identifier: 2F:C5:15:B7:1F:91:C6:E5:6A:14:AF:B4:EE:FD:95:06:1D:EC:49:D4
Certificate issuer: /CN=2fc515b71f91c6e56a14afb4eefd95061dec49d4
Certificate serial: 0196764335A89AB53F16FBED61C069561C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
Manifest number: 0F24
Signing time: Sun 27 Apr 2025 08:00:38 +0000
Manifest this update: Sun 27 Apr 2025 08:00:38 +0000
Manifest next update: Mon 28 Apr 2025 08:00:38 +0000
Files and hashes: 1: DLJprIPgvCAnO7QSJdl3zR0anWU.roa (hash: G99IKFXpxSMbCkWEKl23+BBs+CPi7iUKXtQNR3AhKak=)
2: L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl (hash: VXPYCxOw6QTgh7RFQmU3kJILiXbWC9IOREGDjb8aanY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:35:a8:9a:b5:3f:16:fb:ed:61:c0:69:56:1c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc515b71f91c6e56a14afb4eefd95061dec49d4
Validity
Not Before: Apr 27 08:00:38 2025 GMT
Not After : Apr 28 08:00:38 2025 GMT
Subject: CN=8ac2056b86c68399a9f434a9824da94b7f5e8e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:32:f1:7f:d2:98:76:8e:de:44:99:1f:00:84:
78:d5:70:75:f9:48:2d:a8:86:89:d5:00:32:ac:c3:
20:a3:81:40:16:ac:ed:80:86:c5:09:9d:a8:84:27:
2a:69:aa:a6:19:6e:f4:b1:97:d8:c0:82:d4:7c:97:
53:25:ff:3d:b4:5a:bf:23:54:0c:eb:54:ed:6d:33:
15:ee:2c:c5:06:9c:41:ef:e1:3c:00:29:85:4b:9c:
dc:4c:a6:2e:59:f5:ea:91:55:38:54:9a:72:0e:7c:
67:e5:75:4a:5b:9b:b3:34:0d:bd:ba:cc:44:bf:7d:
ec:50:45:48:1b:e0:53:70:27:55:c0:97:f4:ea:4f:
9b:ba:7d:47:8e:65:e8:98:99:93:d5:ec:51:69:04:
8d:ac:5b:67:5f:9e:3a:5c:43:78:67:c9:c1:db:b2:
d5:ef:e7:0c:b1:ef:76:3c:8e:2d:1b:85:35:2e:10:
8c:23:8d:71:ba:52:ea:a4:56:73:a4:a1:98:61:05:
04:c2:e1:e8:8c:6b:f7:f9:9d:d2:2a:09:79:c6:4d:
17:5d:e8:91:57:d2:74:10:fd:ed:41:db:d5:fd:15:
29:d4:33:cc:e7:a1:46:ae:e8:ad:25:90:bc:27:2c:
1f:55:5a:44:6a:82:5c:61:19:a8:38:db:76:2a:41:
40:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C2:05:6B:86:C6:83:99:A9:F4:34:A9:82:4D:A9:4B:7F:5E:8E:93
X509v3 Authority Key Identifier:
keyid:2F:C5:15:B7:1F:91:C6:E5:6A:14:AF:B4:EE:FD:95:06:1D:EC:49:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e1:6c:67:9d:e1:ab:50:7e:bd:24:9a:3a:22:c2:67:ac:14:
9a:b0:f8:b6:de:42:b5:1a:81:8f:6d:a0:8f:e9:f6:3a:9f:14:
18:11:80:23:11:8e:75:14:a5:55:52:5a:39:16:12:a4:94:72:
5e:f4:b0:e4:53:75:1d:eb:f5:fe:bb:89:55:e9:9a:04:22:08:
cf:d9:fc:0b:53:7b:3b:6e:21:3f:89:56:1a:53:45:63:e0:b0:
a4:cb:d9:18:59:c4:40:4c:63:d7:8d:64:f1:1e:7d:24:9e:50:
41:b8:58:86:39:0f:26:ac:32:9b:20:7d:e5:f7:7e:a8:91:b1:
31:b1:50:1b:ef:f7:43:28:a0:fa:7a:ed:72:74:91:89:82:42:
e6:c0:d9:1e:12:ae:e8:3c:c1:68:58:b1:a0:22:a8:23:b5:86:
cd:c8:8b:a3:b8:03:65:06:a2:12:3a:9d:58:0e:77:96:f8:7e:
3c:f8:74:a0:a3:93:eb:20:9b:f9:d3:d8:96:e7:36:ad:67:e6:
16:45:26:99:7f:1d:f2:4c:f3:14:ca:68:7f:6c:af:57:78:eb:
58:e1:98:13:ed:e5:93:2b:e0:2f:cb:d4:1f:80:1d:81:ef:ef:
35:e4:67:dd:5e:d5:9b:ec:fc:08:df:cc:25:84:0f:7c:d9:39:
83:a2:c4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:21:39 2025 by rpki-client