Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: E4XgRmvdzX6Q1HB6Rb8udl3NPtaMXsHw3HzvxStyeMI=
Subject key identifier: 85:1B:14:73:A4:85:5F:1F:65:EA:2A:4D:EB:2B:2F:3D:AC:87:BF:00
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 019688806672FC1485408F5C9CD6A1EF6C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 0DDC
Signing time: Wed 30 Apr 2025 21:00:38 +0000
Manifest this update: Wed 30 Apr 2025 21:00:38 +0000
Manifest next update: Thu 01 May 2025 21:00:38 +0000
Files and hashes: 1: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: VOo26Egr4LrA1Rs48Z2krcnh6jeb+S6nHtovd7+WDnM=)
2: FSVMQ4pJCPFoKLSJXQ6SN5sd20I.roa (hash: fn+/BnxEhFcy9tBiYyHkUVxuspdk8dmiFltXF8v88aI=)
3: tEflzcf84YeIQ7wQhAU1KUgL-Vw.roa (hash: 4tBHDD8ccamGIZtMNBVAmE3bow4OuhCBji726kCuMPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:80:66:72:fc:14:85:40:8f:5c:9c:d6:a1:ef:6c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Apr 30 21:00:38 2025 GMT
Not After : May 1 21:00:38 2025 GMT
Subject: CN=851b1473a4855f1f65ea2a4deb2b2f3dac87bf00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f9:e9:c9:f6:51:63:7d:2a:1c:d2:12:31:18:
f5:f9:f8:32:47:fe:b6:bf:6e:cf:65:a9:2f:60:4e:
bc:1c:d0:a1:d7:91:75:dd:04:3c:ca:44:aa:8d:5b:
e2:f8:e1:82:7a:11:7a:0d:4e:ab:b3:03:b1:61:a7:
42:19:4d:2c:e1:de:97:6a:ff:0d:fe:db:06:f8:6b:
6c:2e:a7:fd:dc:fc:18:1f:47:84:83:d3:f4:d1:99:
13:ec:cf:1d:16:c8:f9:ff:dd:1a:ac:ca:e0:46:c7:
3a:7b:c0:65:61:da:79:28:3a:86:5c:9f:2c:20:90:
42:a9:66:ec:3e:ec:96:07:09:27:26:78:3b:ec:c8:
29:45:d4:3f:30:5c:0c:d9:53:61:33:04:34:68:8b:
e6:c1:2c:44:61:f4:85:6e:05:b0:16:ca:0a:ff:db:
50:76:22:dd:0c:17:5b:70:74:c7:72:cf:97:02:a9:
07:cf:31:d6:1b:df:f6:08:dd:c4:cc:36:10:a5:ce:
03:a4:3e:e4:1a:a8:de:14:4d:79:da:e8:f9:da:f9:
c3:9d:7f:53:46:83:b4:b6:20:b0:67:6a:43:e5:d4:
c4:cc:cc:65:93:0a:fc:75:ae:fd:e4:d6:8e:f3:9c:
14:11:d6:09:ce:7b:7d:f7:fe:85:da:ae:c7:19:b2:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1B:14:73:A4:85:5F:1F:65:EA:2A:4D:EB:2B:2F:3D:AC:87:BF:00
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:87:6c:f8:df:42:01:e5:a0:cc:10:67:08:a1:db:88:d1:4a:
7b:bd:0d:57:b6:6c:5f:ee:73:f5:30:3b:fa:17:05:e4:61:bb:
ef:0a:63:75:f2:24:33:8c:29:16:88:a4:cc:e7:28:f5:a0:ac:
c5:6b:8c:25:fc:54:27:81:4e:20:85:36:c9:6c:1f:1c:7f:9b:
bc:d8:45:37:6f:79:d0:5f:28:cf:17:6c:6e:db:2d:25:d5:87:
09:50:51:af:8a:4d:75:52:84:82:56:2e:8a:d9:15:e4:00:6a:
ec:a4:32:bc:a2:98:e8:b9:f2:0d:1a:22:15:cd:96:3d:58:7c:
a6:a9:d7:54:4d:76:58:bc:c9:41:ff:be:e6:40:08:31:2c:0a:
ec:1c:c0:3f:ae:5d:4c:e2:07:51:be:66:f4:a6:12:69:05:19:
e1:04:c2:75:2d:99:ce:67:67:e5:56:ce:4e:56:1d:b6:85:a4:
dc:f8:c0:dc:c6:dc:2f:7f:e0:6b:71:0d:f2:d7:27:53:1c:84:
cd:5f:17:bb:cf:51:3a:e4:94:7a:28:ad:d3:77:2d:f7:b0:ca:
93:88:8b:c6:30:eb:bd:38:5b:9e:ed:3a:0a:05:74:8c:a3:13:
f5:f2:a5:64:78:93:5b:ca:01:a2:35:c6:a1:43:69:4c:60:83:
ce:52:a4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:08:16 2025 by rpki-client