Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
File: i58lgoNRffGYWTiOE7rRrgJopfs.mft (raw, json)
Hash identifier: t6hMIZ6Y/NY9TUSic4pPBJZYEWT39EGkEkZR2BcobdE=
Subject key identifier: 7E:D8:E9:4D:FD:3D:E5:29:B9:F3:50:D2:2B:E4:93:1A:9E:50:CE:40
Authority key identifier: 8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
Certificate issuer: /CN=8b9f258283517df19859388e13bad1ae0268a5fb
Certificate serial: 0196767A14B91B72466F26FB4EC33A8D6B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 09:00:34 +0000
Manifest this update: Sun 27 Apr 2025 09:00:34 +0000
Manifest next update: Mon 28 Apr 2025 09:00:34 +0000
Files and hashes: 1: aUEo_6I1NIoEpJrfmKA_-34y2x4.roa (hash: qf/pPhy348tojuz4A7OR24KHAsQ8d6peWd65flxSoJ4=)
2: i58lgoNRffGYWTiOE7rRrgJopfs.crl (hash: 4PAo1alx3JAauV+d3qrik7kkZGrhFFQkmmtzN0DOEuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:14:b9:1b:72:46:6f:26:fb:4e:c3:3a:8d:6b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9f258283517df19859388e13bad1ae0268a5fb
Validity
Not Before: Apr 27 09:00:34 2025 GMT
Not After : Apr 28 09:00:34 2025 GMT
Subject: CN=7ed8e94dfd3de529b9f350d22be4931a9e50ce40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:b2:3b:3f:b5:ea:b6:51:a9:2f:1b:4f:ba:
31:c0:0c:56:07:51:00:01:d6:7d:ef:cd:de:94:cb:
2d:12:22:6b:4c:62:19:35:93:98:0b:39:26:8f:b5:
b0:1e:74:3e:e3:aa:c8:a2:0f:15:09:de:81:4b:0c:
ad:e9:a8:0b:9c:37:3f:37:1a:59:9b:38:d7:e5:f9:
8c:17:0a:8c:79:fe:fb:ac:24:3a:fc:55:c0:31:82:
18:5f:ab:fd:06:88:1d:49:02:dd:79:af:48:44:5a:
f4:7a:cf:0c:5e:05:91:d2:a0:ce:cc:6b:e4:2b:f0:
f5:d2:43:c9:48:34:e9:9b:50:dc:5e:25:be:0d:80:
5f:d4:2c:81:c6:73:15:62:e9:75:cb:79:da:06:bc:
c3:08:17:2e:da:44:d6:30:15:72:75:3b:37:09:b3:
bf:28:52:08:71:68:da:25:3c:dc:09:d8:a9:45:01:
73:e2:e8:b3:4b:fc:1d:d5:f1:2a:aa:51:9c:2b:39:
1d:05:99:3f:36:e1:89:ae:7a:0f:6d:f0:5d:20:6e:
eb:06:d2:0a:6f:e1:62:0e:4f:4b:10:14:e0:e5:75:
d1:ad:28:8d:59:10:92:52:44:85:54:db:02:99:d7:
2b:12:3f:9b:f5:16:04:f1:66:a6:13:9b:10:8e:af:
18:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D8:E9:4D:FD:3D:E5:29:B9:F3:50:D2:2B:E4:93:1A:9E:50:CE:40
X509v3 Authority Key Identifier:
keyid:8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7b:20:bd:05:eb:99:f2:67:41:40:a0:a2:b4:c8:b4:35:c8:
98:e3:21:04:92:b1:14:3f:40:35:fc:7a:69:da:30:4f:84:19:
cd:5a:19:83:1f:8a:11:29:98:30:81:9c:49:23:e5:65:a4:7c:
27:82:c7:d4:ae:34:bb:50:d3:fd:0d:18:19:0e:1d:11:9c:c5:
65:ea:c9:df:8a:07:bb:d6:bb:fc:c7:c8:bd:8e:0e:4a:18:c1:
02:15:63:21:c3:ec:a0:0c:f9:99:db:44:ca:f4:ca:6f:8e:59:
8e:d3:12:c1:e3:9c:34:87:9e:75:b5:79:94:a0:7c:0d:6d:27:
56:a6:97:ac:e8:9b:2f:47:e6:5c:1b:5d:8b:b9:aa:60:04:c0:
b4:bc:3c:3b:93:8b:3b:7e:e8:f5:4e:15:e5:26:30:cb:03:06:
e8:87:e0:25:19:13:99:43:a6:ad:30:a3:af:82:a6:8e:1a:44:
c2:a6:16:66:73:9e:68:6f:0f:cf:85:12:e0:89:81:2c:9e:ae:
33:77:da:ca:39:3c:23:31:a0:14:fb:49:93:53:80:46:cb:1e:
fc:71:83:05:12:1c:4d:70:01:81:ff:a7:a8:55:bf:2a:41:8c:
99:91:ad:04:5a:2a:59:2a:82:0c:43:a6:cd:ad:be:6a:d1:53:
cf:3d:af:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:49:11 2025 by rpki-client