Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier: ZEtmgmpKSfakA3LCUtAWh12hs7BGjYhj42XdRdWmsGw=
Subject key identifier: F1:B6:85:8A:C2:FD:A4:EA:D1:66:58:15:99:B1:25:F1:89:BA:D2:9E
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 019677FB97C52AACA26D7D56FE2B972736AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 16:01:39 +0000
Manifest this update: Sun 27 Apr 2025 16:01:39 +0000
Manifest next update: Mon 28 Apr 2025 16:01:39 +0000
Files and hashes: 1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: Imt/TOsqvg9lOdJEE4Ui1b0vS1LdL/YzIM/w7NLLAaY=)
2: WVDdYi47m-6hf2_QV0K2CVkP7zw.roa (hash: 9WCgzOj2n+hDIFLmZXxef2ObXsI93yW31Mx8FRKIiM8=)
3: _nQyzxD5tzJPLFHKcoFX_hH-tT8.roa (hash: K943OWLrTeetJ5gY0wxowSl9TJP/OQ1YX347sbUwBP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:97:c5:2a:ac:a2:6d:7d:56:fe:2b:97:27:36:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: Apr 27 16:01:39 2025 GMT
Not After : Apr 28 16:01:39 2025 GMT
Subject: CN=f1b6858ac2fda4ead166581599b125f189bad29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:06:58:bc:0d:cf:2b:36:4b:4c:e4:09:6d:a9:
05:22:25:96:5d:cd:6e:e0:e2:5a:ec:4a:6c:d8:0f:
1c:d0:1a:83:c8:c3:34:cf:a8:bf:aa:cf:23:0f:25:
6a:a5:90:e7:85:51:19:72:50:dd:77:12:45:3f:31:
f6:94:70:43:36:e7:f0:10:13:37:41:fc:60:55:7e:
77:68:44:82:7b:9c:71:9f:95:c1:7e:15:83:41:84:
06:8a:15:f8:fc:aa:fa:6a:21:a8:f9:24:1b:5a:d7:
f6:f8:a4:92:17:36:16:3b:09:49:36:87:c8:93:24:
2c:0a:5a:fb:ec:11:ef:35:2c:19:dc:ae:c1:fa:f4:
d7:56:2e:93:5a:d6:cf:0c:e0:3f:55:97:e9:05:a9:
c6:d6:d1:49:16:ca:50:d9:2e:20:ec:0a:59:4c:0a:
03:89:bd:08:b8:a0:a3:bb:82:57:2b:ed:13:61:ab:
f5:5c:1d:c0:33:ec:dc:83:f6:23:4b:64:25:8b:3a:
43:03:71:e4:ed:70:45:e8:17:a2:d9:59:00:fe:54:
62:60:4b:bd:f5:5d:b6:63:89:cf:b7:93:f5:bf:d3:
8f:a7:bf:3b:9a:07:fd:11:42:ec:b3:e4:57:33:75:
a7:55:56:7f:50:da:5d:b7:39:1d:70:47:18:05:09:
c2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B6:85:8A:C2:FD:A4:EA:D1:66:58:15:99:B1:25:F1:89:BA:D2:9E
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:08:75:91:40:6e:67:ab:6a:08:27:14:e7:9b:37:d4:af:64:
ac:4e:33:47:79:0c:b8:a4:8e:40:26:9b:79:89:1d:6f:52:a0:
ef:9d:92:53:98:6d:71:97:f7:2d:92:45:ca:2b:97:ed:93:37:
b9:16:15:fa:f1:c4:a0:ae:68:4e:a4:d7:5b:ce:32:32:d9:cd:
ef:a9:06:ec:63:73:03:e4:2c:10:71:4d:91:73:a7:87:3d:00:
cd:24:5b:a2:31:07:98:63:59:cc:f8:78:97:98:8c:5e:8c:42:
de:9f:b8:57:fa:e8:13:8b:cd:55:b8:da:35:6f:66:db:ad:9c:
48:a3:a9:81:4c:b7:23:27:41:18:00:7c:80:42:1d:76:0b:bb:
8a:ea:f4:27:75:91:27:ff:a2:fc:eb:3d:15:cc:72:4a:65:18:
92:71:79:35:3e:23:f4:04:8f:bb:8b:40:48:84:27:d4:ee:8d:
cc:47:18:ed:52:89:bc:4c:02:5e:63:88:c2:00:93:ef:16:46:
fa:f8:d6:13:d1:5e:6c:e9:3c:94:c0:54:23:c2:56:f7:b9:70:
c3:b2:d9:83:17:d3:3a:39:1e:18:22:58:b0:b2:f4:fa:87:05:
8c:c4:63:f2:17:1e:29:a6:bc:1a:36:d4:a4:4a:26:03:78:15:
b3:13:c2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:34:55 2025 by rpki-client