Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: AF4oDY6P/EVNNXOeexWAeikpAPzAbwzeo7x3ICE/MY4=
Subject key identifier: 33:30:A6:D3:8D:1D:49:33:62:87:2C:DF:5D:3A:D4:56:D3:D3:DF:A2
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 019681D98832A7410B238383F6C9AF21F881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 14A7
Signing time: Tue 29 Apr 2025 14:00:38 +0000
Manifest this update: Tue 29 Apr 2025 14:00:38 +0000
Manifest next update: Wed 30 Apr 2025 14:00:38 +0000
Files and hashes: 1: 92LlPsnUIAq2_qCu90vUr2n0raU.roa (hash: foBfA1Aqx+KxyLS/ipFmoqJrrHi0Kf81SvkfmiaHeCY=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: yPXjn55UY7pBpCmKJYgN1a1Tyt95M68fe5Vd9Cwo1eQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:88:32:a7:41:0b:23:83:83:f6:c9:af:21:f8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Apr 29 14:00:38 2025 GMT
Not After : Apr 30 14:00:38 2025 GMT
Subject: CN=3330a6d38d1d493362872cdf5d3ad456d3d3dfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:ce:57:59:4b:70:59:b5:68:68:12:99:0b:
f6:94:30:5b:d3:c1:f6:8f:27:49:51:e0:e9:2d:2d:
ff:d0:e1:69:68:94:39:b9:51:fe:d8:af:60:be:59:
6a:a9:f3:c8:d4:63:b7:ce:57:54:9d:0e:61:30:99:
f7:db:26:b6:4a:d4:b4:0a:e3:d7:81:b1:0e:47:4a:
1c:26:18:58:c6:09:5a:e3:ba:8e:4b:65:33:fa:0b:
f6:f8:e1:ea:33:e4:51:60:f4:08:0e:4b:f7:4f:48:
a3:ad:52:84:41:c1:50:f2:fb:2a:5e:e6:6f:98:e2:
49:2c:6a:d8:1a:20:5c:fb:f7:f3:0d:ad:c4:98:69:
7b:72:83:3c:36:c6:ed:04:6f:7d:c0:05:86:e5:57:
63:21:b6:79:95:c8:51:76:87:59:62:e3:ad:10:d2:
d2:e2:37:91:bb:38:c8:0d:17:26:2f:ea:21:19:60:
95:a3:e7:91:7e:3d:97:6c:0e:cd:14:9b:b0:27:3c:
2e:4d:0c:26:3a:e8:f0:35:2e:28:bd:06:40:0a:ad:
f6:57:b2:75:84:bd:3e:28:e9:e2:38:c0:0a:8e:c5:
48:02:f2:b4:91:1d:46:29:dc:ba:bd:8f:fa:1e:68:
84:7b:d2:db:ea:31:dd:e3:17:7a:80:d1:cd:96:1e:
03:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:30:A6:D3:8D:1D:49:33:62:87:2C:DF:5D:3A:D4:56:D3:D3:DF:A2
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1d:5e:e0:1b:69:9f:e2:f3:59:6d:a5:31:83:83:e3:b7:b8:
93:44:bf:58:86:52:ab:05:d5:4b:d2:94:1c:c0:0c:f7:1d:03:
7d:e3:7e:05:92:65:9e:c4:92:01:70:16:8b:49:64:82:00:17:
b3:b8:08:dd:25:a9:52:8b:52:52:b8:13:f8:62:07:9e:d9:2b:
cf:50:4b:76:58:a6:80:18:6a:62:b9:49:0d:fc:9c:af:38:9d:
6d:db:46:93:7d:ed:b2:ed:89:26:59:be:8d:6e:01:23:d1:3e:
4a:7b:63:e4:dc:e3:0d:16:f8:65:88:f7:da:ba:24:1d:a2:da:
d3:64:9a:a2:56:94:41:02:ea:c1:89:d0:89:aa:23:60:3b:47:
32:15:41:ca:25:f9:40:c8:97:c6:43:75:43:ae:4e:99:18:9d:
c9:37:90:8f:bd:4e:cb:57:0e:c0:a6:59:f0:50:9a:45:47:11:
f7:3b:c6:7a:cd:b0:a3:08:a4:30:c9:46:c7:33:66:cc:ef:cc:
a5:02:be:7d:99:f1:48:75:b8:c9:6d:ce:07:d3:df:9b:a6:1b:
35:7e:2a:32:49:03:9e:b2:e9:46:2b:08:61:cd:25:2b:ca:7e:
4b:9a:17:6a:42:67:21:a4:15:af:5d:83:e7:5c:c9:62:f1:d1:
14:41:0e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:38:31 2025 by rpki-client