Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: F8NfqdeFdKYyJ15cWxQNwfQr2w8BQl0iCH47CtYAlJw=
Subject key identifier: 5A:66:82:AE:56:C1:B8:E9:3D:66:20:85:C8:8F:D7:C9:B9:79:7B:FB
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 0196759E6E82E53D9E2938C787FAF54DCA8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 05:00:39 +0000
Manifest this update: Sun 27 Apr 2025 05:00:39 +0000
Manifest next update: Mon 28 Apr 2025 05:00:39 +0000
Files and hashes: 1: 7XoxbsiH0tvuamwOaZJkHsbncU8.roa (hash: eOLDYEBs+ePiFOo04IA8xxSpoLseLj4knNzwy/AuO7c=)
2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: iO3M5dZnekGCb6LI7LagQyLwyyfVrW7p2zg6IIWuAu4=)
3: jMGhTNUb7i42fBQA0pNbTbsvC0w.roa (hash: 3rIrbzRKv4rGgOKlFAltJmUMNb9Mmay1gOYKugMTp+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:6e:82:e5:3d:9e:29:38:c7:87:fa:f5:4d:ca:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Apr 27 05:00:39 2025 GMT
Not After : Apr 28 05:00:39 2025 GMT
Subject: CN=5a6682ae56c1b8e93d662085c88fd7c9b9797bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:fd:4a:ab:9d:bc:16:08:f0:c6:1f:dd:3c:
37:10:40:16:f2:0e:6c:42:a8:35:b9:51:16:5b:26:
5a:f2:56:0b:d8:d6:0a:f4:9c:e2:4c:1a:8e:e6:28:
3f:6d:5d:28:ca:d2:19:0b:e3:8c:e7:17:eb:7d:fc:
97:29:70:0c:7b:97:5a:d3:58:60:46:63:0a:8a:79:
1a:70:87:14:4d:28:61:a2:aa:53:2b:95:ba:14:3f:
7a:0b:3b:b3:fa:78:df:59:54:64:7d:35:05:6d:ed:
41:ab:e2:3e:25:2f:ea:eb:c6:af:72:1f:51:8c:ba:
78:2a:5e:f9:99:ff:74:92:23:a4:27:dc:5e:8e:24:
ca:42:d7:e8:94:68:86:61:4c:91:a6:af:38:6a:a6:
e5:7f:10:57:76:1b:6a:c1:89:cf:b1:30:62:65:54:
02:8e:b2:1e:00:a4:a9:e4:69:2d:b8:20:cc:ab:7d:
f9:cf:73:9a:a4:96:55:67:1d:be:e8:62:65:89:fb:
fd:93:cf:13:c0:79:a4:1e:67:26:30:a0:07:39:36:
32:5b:0b:56:d4:9c:e9:62:3b:2c:25:eb:33:bb:d0:
b4:34:79:d7:eb:3e:fc:b8:68:c4:ca:9a:fb:e3:a4:
1b:84:ea:6f:33:7d:3f:12:04:9a:91:7b:f4:1d:72:
aa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:66:82:AE:56:C1:B8:E9:3D:66:20:85:C8:8F:D7:C9:B9:79:7B:FB
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:54:bd:85:34:6e:fd:02:b7:c1:ee:a1:ff:a3:e8:a6:11:b1:
72:90:9c:07:29:66:1f:37:de:27:8a:fa:25:31:8a:8a:fe:f4:
23:83:a0:ce:f3:06:67:b5:28:ce:55:4b:30:38:f1:96:f3:f9:
75:2f:8d:49:ea:06:35:9c:a8:2a:35:49:81:98:ed:03:ca:c9:
a4:78:3d:2e:6b:00:23:58:b3:ab:2a:b2:3f:5b:52:86:0a:66:
20:ba:69:0d:cf:4b:1b:a4:ce:06:95:08:de:26:fa:78:58:a1:
51:8d:b3:fe:fd:ec:59:79:e3:5c:ca:26:8d:df:bd:86:2c:75:
7d:59:8d:a8:2f:9f:4c:ab:67:b6:29:40:0b:9a:41:90:c1:04:
75:6a:7d:46:d2:13:5e:85:4b:96:28:c9:eb:97:74:4c:3d:3c:
2e:60:ae:fb:8a:28:a4:01:78:a6:e7:4d:9c:94:26:15:60:f5:
e0:1c:38:3c:d7:22:c8:59:99:ea:07:ac:39:77:a6:3a:06:83:
6a:f3:18:fe:72:fe:41:4e:66:d3:6b:f6:21:cb:97:31:f8:f3:
a6:11:08:cc:0d:21:47:57:28:3f:09:99:b4:31:6c:56:fc:45:
a6:3f:88:df:1b:2b:37:c8:27:61:08:49:2f:40:e2:1e:b8:9f:
08:d4:28:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:58:18 2025 by rpki-client