Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
File: 8hWid5SXEbLAHNxmnkDhcTlYVbs.mft (raw, json)
Hash identifier: UUDu73o38nWtKE3P1hb64TgJJ7+ATUYDVlWigBRppsE=
Subject key identifier: BF:2E:73:D3:C2:82:DC:FF:F9:3F:7E:64:CB:D0:C5:0C:98:6F:9B:7E
Authority key identifier: F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
Certificate issuer: /CN=f215a277949711b2c01cdc669e40e171395855bb
Certificate serial: 0196827E275992C12440936FFD39C05255DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 17:00:27 +0000
Manifest this update: Tue 29 Apr 2025 17:00:27 +0000
Manifest next update: Wed 30 Apr 2025 17:00:27 +0000
Files and hashes: 1: 8hWid5SXEbLAHNxmnkDhcTlYVbs.crl (hash: M+GZ+llSQRJHjFxrsvTvWwWWEteA1JQJ5jUFcl8i160=)
2: e9rn6bxSsUmtvRo7sJ4lEtK6S2Q.roa (hash: lsA08XTxVJOQQYnez6W7EOdFIkHihRjO9Y7qKfekirQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:27:59:92:c1:24:40:93:6f:fd:39:c0:52:55:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215a277949711b2c01cdc669e40e171395855bb
Validity
Not Before: Apr 29 17:00:27 2025 GMT
Not After : Apr 30 17:00:27 2025 GMT
Subject: CN=bf2e73d3c282dcfff93f7e64cbd0c50c986f9b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f8:28:34:a8:75:c4:af:67:4e:f7:e2:9c:31:
2c:9c:72:fa:17:ab:18:32:b1:7c:e6:ad:04:a8:0d:
b6:32:bf:28:6c:08:27:b6:dc:13:04:bd:86:5f:83:
d9:1f:e3:f9:60:0f:30:9b:83:e8:8f:cb:92:c6:91:
bb:49:54:3e:1e:5c:0d:d6:69:31:6b:ca:c8:72:3a:
05:7f:77:a5:5d:ec:4c:17:c8:cc:de:4f:56:99:0b:
ba:6c:d1:99:a9:1c:4f:d2:c4:e2:db:66:9c:62:26:
9e:52:ff:99:bc:7b:8e:1e:b4:cc:03:bb:34:e7:2d:
89:89:83:28:fe:7d:3d:6e:2c:e5:eb:2d:c0:bb:67:
81:0d:b7:ef:c4:f0:bb:c3:19:bb:a4:e2:7e:c9:af:
cd:54:64:f3:30:ad:79:ab:88:28:e1:a3:43:75:65:
b8:28:49:bf:ee:a7:6d:70:ec:8a:59:a5:d1:3c:c0:
73:ad:ff:75:df:60:b0:86:5a:8d:15:b2:db:e0:72:
e5:e1:41:7e:9c:e3:9d:69:f1:2a:22:cd:71:79:7a:
e8:48:ee:73:64:9d:75:c6:73:b7:77:f6:73:10:77:
56:d7:08:a4:82:70:32:8a:47:b5:21:d7:c5:31:6d:
db:81:94:c2:9c:29:b5:e0:93:ec:e8:b3:1c:d7:52:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2E:73:D3:C2:82:DC:FF:F9:3F:7E:64:CB:D0:C5:0C:98:6F:9B:7E
X509v3 Authority Key Identifier:
keyid:F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:90:e5:a1:6c:b2:fb:1c:03:7a:eb:b4:ae:cc:01:fa:14:84:
91:16:08:31:be:d8:12:43:77:b5:bf:5a:20:b8:90:50:40:29:
e8:dc:62:26:6f:28:1a:2b:e4:fd:de:a9:6c:dc:f6:7c:7b:2d:
fd:2d:b0:0a:fe:f6:6c:58:12:53:c5:0f:70:9b:56:f5:98:f0:
49:62:a5:37:ad:15:ef:c5:f0:c0:0c:f8:35:83:dc:70:5b:dc:
ff:d2:cf:17:11:ab:ea:e8:25:90:c3:3b:96:2c:1e:a4:9f:ec:
ed:09:41:b5:05:d3:a4:8b:ed:24:b2:cb:fe:e1:7d:d7:ea:4c:
84:5d:73:17:0c:fd:3c:87:b8:33:41:21:3c:93:bc:9e:5a:0f:
f6:a0:ac:86:39:88:d5:50:61:c4:d5:22:6d:58:7f:26:1c:0f:
18:18:78:39:12:8e:6a:80:47:0d:59:e1:c8:22:73:a0:57:fa:
85:0c:3c:3f:b3:2a:37:5a:d1:be:65:bd:48:66:5d:a9:89:b8:
52:38:70:2d:6c:72:9b:32:e8:60:c2:3a:02:1a:09:6f:26:49:
35:81:c4:63:c7:a3:d9:bc:1b:18:aa:41:39:af:d8:2d:84:6f:
ff:f6:d0:7a:fc:98:1f:b3:9a:fe:7b:12:54:3c:6d:51:35:5f:
09:b1:37:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:06:08 2025 by rpki-client