Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
File: i0LHUqmwmDEos9KV5F6hazPuffk.mft (raw, json)
Hash identifier: CEyUhF1yL+f+GIgOTs2+BsexI8CAB0dr7Wno/mAA9eE=
Subject key identifier: AE:81:5A:8C:0D:A2:27:F7:A6:BE:36:41:09:94:F7:F4:4C:06:F2:70
Authority key identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
Certificate issuer: /CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Certificate serial: 01967A2007A7687587BA9959F3E653DFF62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 02:00:41 +0000
Manifest this update: Mon 28 Apr 2025 02:00:41 +0000
Manifest next update: Tue 29 Apr 2025 02:00:41 +0000
Files and hashes: 1: deCTZwf8Lo4tPBt2V0GwD8QTdjQ.roa (hash: FyKYzrCJB3LXbVhWQRcS/ZI/wI5zOqLIDpvmKLMGaw0=)
2: i0LHUqmwmDEos9KV5F6hazPuffk.crl (hash: 0QNR4vkptsnuwPbl7zlYaaXvKHWAEDOXOzQHe47lyxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:20:07:a7:68:75:87:ba:99:59:f3:e6:53:df:f6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Validity
Not Before: Apr 28 02:00:41 2025 GMT
Not After : Apr 29 02:00:41 2025 GMT
Subject: CN=ae815a8c0da227f7a6be36410994f7f44c06f270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:49:4b:cf:9b:a8:5a:db:ef:57:17:54:28:
f3:54:b4:19:ec:34:7f:e3:d4:23:06:d6:fd:a5:f1:
3f:7c:61:71:f7:5c:43:f9:c1:4e:11:a2:1d:bd:6a:
51:56:44:0f:36:43:93:49:ba:3f:b0:c2:c5:35:a2:
f0:2a:a9:22:19:72:9f:9e:6d:21:c1:c5:f0:e3:ff:
09:2b:94:40:39:98:a0:87:73:72:12:a2:6d:c2:01:
ab:2d:09:7e:14:e3:e8:c4:0e:3d:0a:6f:de:63:52:
70:7a:17:06:d6:95:54:6e:47:ff:02:1b:b0:a7:9b:
65:69:dd:f6:ac:2b:7e:07:69:1c:e7:c4:9d:bb:97:
32:6c:76:3f:16:ea:1f:f6:42:e1:ce:b8:3d:00:aa:
ed:d4:15:64:6c:a3:30:01:40:93:12:a8:fb:68:e2:
4f:5e:9e:44:74:fa:58:f1:5c:54:ff:83:0a:39:f7:
49:12:68:9e:33:0f:39:3d:75:11:bc:5a:6e:51:df:
87:18:7c:4f:23:2b:3e:f0:f7:2e:3d:3f:04:5f:7d:
f6:2e:73:7b:0e:d3:d7:14:6e:82:32:4d:4f:71:6e:
39:87:36:2f:7f:63:7e:76:b8:a5:ff:a7:84:7e:67:
fb:a0:7d:d5:7d:a3:60:64:97:24:65:ce:97:bd:f5:
9e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:81:5A:8C:0D:A2:27:F7:A6:BE:36:41:09:94:F7:F4:4C:06:F2:70
X509v3 Authority Key Identifier:
keyid:8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6d:39:cc:5e:19:aa:3e:3f:35:21:e3:a9:1f:95:a6:49:6e:
b6:db:47:2d:eb:24:78:9c:61:00:a0:e3:0c:be:4e:57:2e:e1:
45:08:b2:59:41:db:13:63:56:b2:80:3c:3e:e3:02:16:6b:64:
c7:bc:d6:2c:4d:dc:9d:f8:1b:f8:f4:71:99:ec:dd:5d:3f:19:
da:8b:17:0a:77:1f:5f:f9:29:a2:9e:ee:cb:92:81:ce:cb:fa:
75:36:ac:9d:4a:89:d5:47:4c:65:e0:88:f7:35:c4:ac:7f:99:
0b:fe:f0:80:9e:67:2a:99:2a:53:86:c9:ea:99:0c:71:e8:13:
2c:9e:ab:c9:2b:b2:e2:37:bb:29:cd:fe:df:f9:48:dc:e7:6b:
a7:20:a3:30:9c:96:52:85:c1:2f:6b:09:37:d5:24:55:8b:58:
c7:da:2f:c4:28:78:b2:4e:2a:a6:87:47:5b:26:2a:fe:fe:0b:
d5:26:48:4f:dd:eb:fb:60:59:a4:50:c4:7d:e1:29:e0:35:4d:
6f:e0:94:11:e1:00:5c:aa:38:07:39:16:dd:2e:ff:87:21:a7:
6c:8a:37:1c:72:02:62:e1:21:e4:5a:1f:20:5e:95:08:93:91:
75:d1:98:00:be:c3:e0:41:8c:72:dc:cd:45:39:37:21:c5:5f:
cb:f2:d5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:08:08 2025 by rpki-client