Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
File: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json)
Hash identifier: PY1tKeA56tcDRZThCGqMJDNsWfWZU/m12ZhQ5Aecj5Y=
Subject key identifier: FD:9C:F6:21:9A:F5:FF:F6:F9:B7:A0:F9:18:7D:23:F6:E6:5B:67:80
Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5
Certificate serial: 01968021D43FF62A08B82D92A28D31FB73AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
Manifest number: 01F3
Signing time: Tue 29 Apr 2025 06:00:22 +0000
Manifest this update: Tue 29 Apr 2025 06:00:22 +0000
Manifest next update: Wed 30 Apr 2025 06:00:22 +0000
Files and hashes: 1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: 7z4BIs3d+XpVyuEynjtxUmfE0xam07JGCv112oYlNKs=)
2: I-0idQ-x8b_iuF_AN1e-P1ZFsto.roa (hash: J959UKPkKfG7mGSEhJQ4lp0ApYm6t4BNil0ibX/rnJ0=)
3: JKMKM7uXmV7lI_F_YSWzDWamfs0.roa (hash: xcsy0pAckaCr9b80/NnrYrq4k894iPZjymdOh59OUBk=)
4: M4-beGRB9tOP3S3vejQEdcFQFUs.roa (hash: T0CA649c+RNTd9rAKy27jb+pgwbmOkXNyfnl9vaMPls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:21:d4:3f:f6:2a:08:b8:2d:92:a2:8d:31:fb:73:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5
Validity
Not Before: Apr 29 06:00:22 2025 GMT
Not After : Apr 30 06:00:22 2025 GMT
Subject: CN=fd9cf6219af5fff6f9b7a0f9187d23f6e65b6780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:e8:b8:10:b2:12:42:3e:98:3e:e5:36:3e:
b6:0a:ff:be:df:76:f8:62:92:31:42:39:25:ab:3f:
2b:df:f1:c4:7f:ce:e6:90:9e:e4:f6:18:da:31:39:
2a:c8:36:55:e1:ab:2f:b6:8b:e7:82:5d:ff:c3:b8:
18:da:5c:ba:f8:c8:8d:28:2f:f9:44:3c:23:34:c1:
7f:e1:b0:15:92:2c:fb:a3:36:95:1e:24:42:4d:db:
48:54:01:eb:bc:ce:51:a6:7b:0c:47:b8:be:86:c5:
62:36:82:c3:ef:cc:cc:dc:b0:79:b0:4b:5b:a5:24:
9f:8e:0d:ea:2d:88:22:0c:1a:a8:b6:86:94:14:c7:
50:b7:86:66:af:37:ec:e3:0b:c4:e9:40:4c:b9:58:
2c:0c:ec:33:48:b8:f9:c7:c9:15:1b:65:6f:04:5d:
8f:83:f1:45:2e:f9:4e:5e:8a:82:f2:29:4f:c0:59:
90:b9:e1:32:d5:b3:76:63:79:4b:8c:9a:4b:87:b3:
cb:55:d3:ab:14:c4:a5:cb:2e:6d:6d:fb:33:59:ad:
b2:08:5c:21:93:52:83:d8:1f:62:4a:7b:8b:a0:25:
ff:16:97:1e:6f:eb:fd:a4:71:a0:52:0d:de:33:93:
f3:ba:d0:89:87:34:08:3a:58:42:6d:49:17:f5:38:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9C:F6:21:9A:F5:FF:F6:F9:B7:A0:F9:18:7D:23:F6:E6:5B:67:80
X509v3 Authority Key Identifier:
keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3a:6c:45:95:27:7c:82:97:7d:80:0f:80:92:61:e3:85:12:
ed:c0:7e:6d:4d:57:08:c6:22:c9:e7:b4:a6:ff:5d:69:96:5d:
7f:cd:29:d4:39:e1:f1:b5:9a:d4:1f:1b:6e:50:5d:78:59:c1:
65:2e:84:92:1c:6b:fe:50:75:56:d0:ce:ae:7a:4e:12:0e:60:
f3:50:6a:85:e0:a2:14:a2:51:83:e6:21:f6:5a:0b:c8:6e:86:
63:43:b6:f6:ab:ff:c5:c1:c7:7c:53:33:ef:8b:ef:d2:f1:88:
7c:15:45:c3:d0:0e:21:9e:7a:1d:52:48:f8:ff:f4:8f:db:b7:
27:4b:6f:80:fc:3d:36:74:74:20:17:fe:5a:33:e4:13:b3:db:
a3:f4:2e:f1:20:43:9d:8f:16:08:b8:fc:5e:69:f8:5c:3c:95:
33:65:06:71:6f:a3:d8:13:7e:fe:9d:77:8e:63:38:19:4a:8c:
d7:e6:83:16:11:4e:47:3a:43:3f:8f:a2:c8:5c:bb:7c:b1:8b:
93:02:0a:b0:97:4d:cf:c3:2b:ab:7c:3a:1d:c2:7c:b9:07:ee:
c4:8a:ce:d2:89:77:27:56:f0:db:f3:ae:a1:11:97:a6:23:36:
7a:65:72:8f:ee:4f:f2:ca:ae:d2:93:bc:a3:d2:a7:c8:68:90:
0e:09:f1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:20:36 2025 by rpki-client