Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File: 8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier: d/gfHa3n7j96u1siA6K0y24GCVMI+zLdwbYHtS7SbgQ=
Subject key identifier: 73:F3:9D:C1:01:CF:8D:FB:92:7C:68:39:08:52:6C:DA:5B:7F:AB:B8
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer: /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial: 01968623BE06705584AC47D7E14E25912CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 10:00:11 +0000
Manifest this update: Wed 30 Apr 2025 10:00:11 +0000
Manifest next update: Thu 01 May 2025 10:00:11 +0000
Files and hashes: 1: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: 67LA270FSqHN6P7llrFjiu6ooDMqp9h7N7DWP8yx4/Y=)
2: Uq0vloXHdFb2aIE_oUN66H2BMxU.roa (hash: 8OMhbaYnopF2Asv1tjCQ758nxv0+wParcC98envOi54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:23:be:06:70:55:84:ac:47:d7:e1:4e:25:91:2c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Validity
Not Before: Apr 30 10:00:11 2025 GMT
Not After : May 1 10:00:11 2025 GMT
Subject: CN=73f39dc101cf8dfb927c683908526cda5b7fabb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:c9:1a:18:78:77:96:64:ca:a5:f1:d2:47:
1d:b8:fa:a2:68:85:44:b7:fb:f9:fd:0f:dc:dd:4f:
1d:01:9e:6b:14:7b:76:da:ec:5b:45:6f:0c:75:58:
5a:69:b5:a9:78:a3:2c:96:18:41:eb:b8:c4:50:92:
be:a0:f5:17:08:d7:a6:2c:1e:8d:18:93:60:47:5a:
e7:de:a9:d0:e0:97:55:9e:9f:b7:e4:a1:52:c1:a2:
91:44:f5:8e:bf:5b:33:95:a9:91:7f:d7:b1:a6:01:
76:d7:86:f1:47:f4:33:72:ae:3e:b0:0b:1f:fb:4e:
04:61:f6:4f:f3:cb:78:85:54:c3:ba:61:a4:d9:bc:
3e:45:fa:c5:8d:26:ba:8e:07:bf:2f:e4:06:4b:bd:
a1:bd:4a:ce:ba:31:47:e7:12:48:60:3e:2e:48:ab:
6f:e2:47:0e:fc:14:09:40:f5:d7:99:cd:ed:5e:b7:
0b:8c:5d:df:03:98:76:94:6a:4d:f1:4c:26:64:ef:
87:22:37:67:1f:f2:bb:9a:fe:09:3b:12:1f:17:1b:
89:e4:07:3f:ea:42:4a:47:9b:25:7a:1c:59:a9:2a:
6c:e6:70:69:33:42:88:83:20:4c:e8:54:86:ee:c4:
d3:4a:fd:51:99:0c:a2:27:a1:04:53:b2:5b:c5:87:
7f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F3:9D:C1:01:CF:8D:FB:92:7C:68:39:08:52:6C:DA:5B:7F:AB:B8
X509v3 Authority Key Identifier:
keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b7:2d:85:4e:86:ef:ee:c2:d6:e0:e0:6c:a3:13:93:fb:86:
dc:e4:4c:c8:ea:61:64:db:5a:46:e5:c9:52:13:be:e9:28:8f:
30:a2:52:c1:57:9a:eb:fc:17:6d:a0:ac:94:ce:2a:77:6c:62:
a6:10:45:9a:05:c6:79:3e:8e:a2:6c:5e:37:c5:26:76:79:fa:
e5:b7:e0:82:c2:37:1e:00:e5:66:cd:88:99:9f:71:52:e0:2b:
c5:5c:94:d0:b1:c4:59:19:0b:b2:8a:2b:2d:c1:77:13:ad:ae:
b0:2f:b2:a2:a0:a8:4e:a0:61:1c:9a:a0:44:f8:2b:33:5d:e3:
df:68:26:ce:96:15:96:80:7c:78:fe:2f:86:98:63:2c:8f:72:
dd:e9:13:78:0f:c1:ac:b9:b2:a0:a5:53:6b:33:db:58:39:71:
2c:a2:ba:c5:06:ac:00:30:ef:2f:ae:13:83:b2:a3:ff:ea:47:
84:cc:4f:41:45:ba:23:4c:3b:e5:34:a6:6e:ea:39:15:02:6a:
65:a3:6c:7b:af:c1:dc:9b:ab:76:b6:78:a8:ee:cf:96:e1:9d:
e1:6c:91:60:1e:8c:05:72:e5:91:fc:ae:89:71:ca:ce:30:e2:
ca:18:86:91:b0:a8:37:66:5d:ec:f6:9b:90:77:6a:f6:d2:b2:
37:17:46:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:34 2025 by rpki-client