Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: u9t/bViDdZRrX1HyH24FPAGzcWW3Rgi51oFfolkRcbw=
Subject key identifier: 7E:D6:31:AD:31:80:95:05:9D:FF:87:59:14:9C:AC:6A:97:B7:20:3D
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 01968021FEB0EBE5C90AD498B3F838782F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 08DA
Signing time: Tue 29 Apr 2025 06:00:33 +0000
Manifest this update: Tue 29 Apr 2025 06:00:33 +0000
Manifest next update: Wed 30 Apr 2025 06:00:33 +0000
Files and hashes: 1: FSsZO7tf2uyGI_GTm9rqM0qzwyo.roa (hash: +N02NDT8cxwi6khKovC14z/AE2KwVw5IVFU5XCAAiJs=)
2: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: VRQ6/o9M3SDdg5J/2VokD/040vqw0eP54gWj7HJIPJA=)
3: pGnzHT17oa6cGFgaKh_Mb1gg4HU.roa (hash: tnbr1e3XQydvlzjAP3o8eDkS1HDgrVPM/kErIEuP+f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:21:fe:b0:eb:e5:c9:0a:d4:98:b3:f8:38:78:2f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Apr 29 06:00:33 2025 GMT
Not After : Apr 30 06:00:33 2025 GMT
Subject: CN=7ed631ad318095059dff8759149cac6a97b7203d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:64:18:7b:31:a6:da:f8:10:58:b8:61:8c:
1b:4d:90:a8:63:d8:aa:10:0d:5e:aa:4a:05:ff:10:
c0:9d:02:b8:d4:2c:27:85:d6:47:71:de:55:7e:80:
3a:23:25:e6:88:5a:91:df:12:e0:a4:ed:00:03:9e:
4b:2a:07:c2:43:9c:71:23:57:7c:67:61:5b:66:20:
ca:06:a9:d8:c0:7d:42:a8:2d:67:59:1d:9c:78:88:
4b:4d:d7:3c:61:48:fd:e0:37:f7:36:2b:fd:46:66:
17:15:39:ec:3d:77:a0:89:98:94:55:66:dd:da:a1:
43:d8:bc:3a:df:bd:90:e3:ac:06:90:1a:ca:ce:ff:
e9:58:4d:af:0f:e3:73:6d:41:ee:3b:7d:ec:3b:45:
20:2b:a3:34:0c:82:00:56:98:71:d7:b1:01:8f:6d:
68:e7:6d:e2:cd:14:3a:6a:a5:9f:dd:44:5a:77:76:
d7:39:f7:60:ce:eb:57:ff:a4:bb:a3:39:82:a3:4d:
1c:ae:05:a3:bc:13:38:f5:b4:6a:60:9d:5c:6d:c5:
94:df:9b:c1:7d:a6:68:2c:0a:0e:c7:5d:04:3d:65:
06:27:2a:f9:7e:6d:39:17:8b:ca:24:41:23:f1:2c:
89:f3:9f:25:06:2f:c8:b2:d1:2e:a2:ef:12:c1:ba:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D6:31:AD:31:80:95:05:9D:FF:87:59:14:9C:AC:6A:97:B7:20:3D
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ee:aa:ab:8d:69:34:27:4d:fc:d3:7b:42:7a:d3:8f:5b:69:
cf:46:a3:58:09:c8:f2:3e:0e:04:be:bb:2d:1e:57:05:87:3e:
c8:df:90:d7:79:f2:f5:5a:04:55:3c:36:d0:d4:31:6c:1e:34:
8c:97:db:e5:05:de:68:dd:6c:72:97:d9:62:6b:f8:2f:dd:ee:
09:03:b1:ff:bf:14:5a:19:0f:ec:ef:8a:3b:bc:2d:cb:1f:f9:
9a:0c:bf:8c:09:3f:cc:9c:53:74:ac:69:35:8e:75:d9:bf:54:
64:ea:6a:ce:cd:32:38:0c:49:19:77:52:24:75:78:d1:4c:f4:
f0:4e:1f:04:37:71:43:a8:73:cd:a9:06:ed:69:d8:96:4f:3e:
18:fd:d4:9d:5f:55:98:80:f0:3c:fa:39:29:69:ac:c4:d5:cc:
21:c4:a4:90:31:07:2f:ff:34:85:65:ec:09:17:76:1f:8b:b1:
53:72:31:d8:89:59:e6:5c:55:45:4e:57:0e:a5:97:91:d0:89:
5c:e8:8b:6b:51:cf:05:43:82:3b:7b:eb:6d:3e:8a:47:28:b8:
e9:ed:dd:24:f7:3d:6a:3c:23:29:ac:d8:11:54:ca:de:bf:df:
aa:b5:10:7a:91:e3:94:2f:0a:cc:06:76:a7:8a:a8:b8:52:6c:
6e:78:8c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:24:42 2025 by rpki-client