Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: kPkjLELflb9gcAFcFID3Q9C6knmUmJXUXDVdhkgdCgU=
Subject key identifier: E8:B9:62:B0:C8:BB:3F:66:84:27:67:4C:6B:7A:13:D4:79:77:06:12
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 0196748C27384042E615D11A6D12B69DC0B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0907
Signing time: Sun 27 Apr 2025 00:01:04 +0000
Manifest this update: Sun 27 Apr 2025 00:01:04 +0000
Manifest next update: Mon 28 Apr 2025 00:01:04 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: 41ssYplnMwBk9hSeNo79dynJdEzs5O+ujqc7q2lFxmQ=)
2: mXq5imVatjJhnnG6SsoqA-p0UNQ.roa (hash: 8CJwggTE1PoL2jvcGBTOZHCwbyGaj586VEqXhjgdUvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:27:38:40:42:e6:15:d1:1a:6d:12:b6:9d:c0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Apr 27 00:01:04 2025 GMT
Not After : Apr 28 00:01:04 2025 GMT
Subject: CN=e8b962b0c8bb3f668427674c6b7a13d479770612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b4:fe:28:b2:3a:14:c0:46:fb:32:1f:2e:10:
40:aa:9d:53:50:7d:fb:e0:f4:90:70:09:c1:11:34:
d2:dc:db:2e:43:31:04:1a:88:69:69:77:5d:b2:08:
33:bf:94:cc:6d:3f:ce:45:cc:5f:43:69:4d:18:41:
90:4b:e9:d9:72:c5:ed:08:fa:41:53:e0:6b:3b:bb:
94:c2:6d:7b:86:36:89:bb:67:36:ff:12:08:34:6a:
50:50:7d:d1:5e:f4:97:8a:02:71:72:b4:da:02:ff:
a6:55:a7:ff:de:4a:b8:56:ee:34:df:f1:8a:ba:7c:
51:ca:e8:95:cc:8d:64:7c:75:70:c9:b4:bf:41:d3:
05:18:33:47:90:cc:ce:34:b8:c1:6a:42:69:0c:75:
e4:a4:6f:a5:4a:e8:14:84:c0:d7:e6:f6:70:df:af:
e3:66:d7:87:74:a5:e8:2a:d7:3b:9a:6e:1b:e9:1f:
40:7a:84:5b:24:24:37:f5:99:4a:4c:5b:eb:1e:d3:
bf:bd:e0:3d:74:3c:a1:5c:7c:11:f7:00:8f:1f:d0:
d5:a9:a8:b5:84:3e:84:7f:ac:67:f9:82:8a:2f:20:
4e:b1:b0:57:e3:6d:be:90:73:85:89:0a:8a:55:49:
88:e4:0f:b3:e0:db:92:ad:a9:a4:bc:04:25:d1:65:
d2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B9:62:B0:C8:BB:3F:66:84:27:67:4C:6B:7A:13:D4:79:77:06:12
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:30:6c:38:d7:70:b9:f0:c6:bf:b2:6e:2c:27:fc:8d:6e:e7:
17:05:99:ba:e8:33:e6:cf:6b:65:50:af:c2:ff:cd:c0:bb:51:
c4:70:70:c7:4a:da:5c:f8:d5:89:d8:52:4a:42:8b:17:84:ef:
d4:78:0c:77:80:b8:e1:db:bd:c6:ea:8d:e1:59:4a:0e:83:dd:
d9:b5:f5:97:dd:53:2b:df:a7:ee:1e:0c:44:48:88:2f:49:fb:
33:4c:32:58:f2:71:d1:be:bf:ff:0b:df:f4:31:3f:19:40:89:
0d:1e:e4:f1:e0:93:e5:04:55:c2:dc:d0:c5:be:76:10:81:89:
ae:a8:65:3b:b1:44:40:00:7a:2e:c5:c8:06:3c:20:c9:b0:68:
7c:49:cb:a0:93:75:89:b8:29:ca:a2:4d:07:c1:9b:bb:b1:8f:
12:ff:91:ab:ae:1e:3c:e9:6d:55:42:5b:10:16:e5:82:ed:85:
3b:9d:48:7a:99:6a:65:33:7a:79:d3:01:45:1f:ce:e2:3e:98:
69:36:a5:14:7b:df:e1:61:64:c8:13:a9:f4:d7:89:8b:11:94:
4a:9d:7f:b1:a9:83:c5:1d:2b:96:e5:5a:40:e5:1b:00:cb:85:
a1:51:02:21:fb:fe:d9:e9:69:3a:4f:0d:f7:34:66:d5:61:a9:
3b:36:6e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:31 2025 by rpki-client