Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier: N/UpiHyD4cL4azUBjDSCeupjOv7glrmcfhuG9KjicG4=
Subject key identifier: BA:6E:13:4E:EB:E9:D4:A6:AF:C2:2F:19:8C:5C:91:C8:FE:5E:E3:29
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 01967642CE5B55ED9129F62B7F35903CAB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number: 04BA
Signing time: Sun 27 Apr 2025 08:00:11 +0000
Manifest this update: Sun 27 Apr 2025 08:00:11 +0000
Manifest next update: Mon 28 Apr 2025 08:00:11 +0000
Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: 5qtwIUeIV0YqMf3j/KQLcM82ISlDhNBNVKdsdDLP4/U=)
2: Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa (hash: uihaqn4cl1EUm9BC8+JYEwJFvxEP94e45YDqvyFRac4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:ce:5b:55:ed:91:29:f6:2b:7f:35:90:3c:ab:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: Apr 27 08:00:11 2025 GMT
Not After : Apr 28 08:00:11 2025 GMT
Subject: CN=ba6e134eebe9d4a6afc22f198c5c91c8fe5ee329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a9:1e:85:a3:8a:34:1f:6d:f1:49:6b:5e:03:
40:29:b4:b3:a5:71:80:74:d5:38:b4:8a:6b:93:f2:
c6:16:db:30:4f:e9:f9:fd:20:4d:38:04:10:0a:d9:
75:da:41:b5:59:99:a3:25:e4:bc:8e:e3:65:9f:ce:
11:8e:18:51:93:99:24:5e:9b:17:47:0d:f1:a2:5c:
bf:29:4b:5d:db:3a:c9:9a:95:27:a9:53:d0:63:33:
0d:43:ce:d8:63:31:98:80:9e:91:1f:74:9a:f7:a5:
4f:cb:2e:3e:78:e4:3b:12:02:69:69:8e:24:37:89:
17:ab:c1:b2:70:2a:69:83:81:db:01:9b:f6:18:eb:
1a:28:67:0e:86:0c:24:21:68:7c:36:bd:a5:70:d2:
c4:4c:2e:c7:4b:2c:99:76:c4:f2:5a:36:a4:cb:61:
43:04:88:14:fb:2b:ea:77:4c:7f:90:98:07:01:36:
38:c9:f1:9d:f9:fc:b2:93:1f:f6:d0:45:99:bd:0c:
f8:a9:29:a1:13:f1:dd:c9:18:c8:19:d1:36:01:14:
4d:2d:a3:a7:66:49:c9:28:d4:cb:d4:d7:7b:2e:6b:
d7:c8:c0:45:e5:3b:cd:4b:d8:b6:f0:1c:80:64:d9:
e9:0c:38:01:33:3e:e3:4b:4d:85:af:16:87:1f:f0:
ff:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6E:13:4E:EB:E9:D4:A6:AF:C2:2F:19:8C:5C:91:C8:FE:5E:E3:29
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:51:cb:a4:7f:3b:89:dc:19:4e:61:ab:bc:ff:c3:e0:b8:64:
57:68:0c:be:c8:9c:17:81:75:61:21:4f:4f:d6:b3:15:b2:60:
51:49:48:0b:af:1f:0e:0c:87:b4:70:17:c7:66:7b:dd:18:e7:
f9:8c:05:47:71:cc:bc:2e:1a:7d:d9:a9:68:79:80:17:84:bc:
25:56:b0:a8:b0:71:de:39:30:ef:7d:7e:88:ad:25:c0:1a:74:
d4:a2:3e:15:0c:fe:16:dc:d5:39:0d:30:31:cb:a5:eb:7d:2c:
11:8f:95:1d:14:cc:67:42:7f:17:8e:3c:21:34:a6:1b:28:40:
8f:dd:bc:5a:5f:8a:e0:ce:8f:ee:ee:c3:15:4e:0a:96:d2:c9:
f4:23:51:d8:71:0d:4d:c9:49:bd:24:17:96:30:3e:3f:81:bf:
07:6f:2d:dd:13:c5:14:e1:2a:d3:dc:4c:ee:8b:6d:65:bf:df:
50:0a:50:29:e6:6b:59:35:b5:4f:66:4b:3b:a9:74:53:8b:f7:
c7:40:64:93:df:63:68:1b:e1:47:64:d2:26:2c:dc:b0:2e:e9:
88:5e:11:d2:d0:3b:5b:8d:be:4e:a6:d5:e4:ef:8b:c7:81:62:
10:ec:c6:42:dc:19:6c:2a:09:64:5a:13:6e:d7:44:ae:61:49:
a5:64:41:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:25:02 2025 by rpki-client