Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
File: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json)
Hash identifier: nRYNvRsZxxQlTDVh4rTjnnihMMbyzQnOjqLok1kTQA8=
Subject key identifier: 23:66:03:D7:16:AC:06:B8:F1:C6:B7:D9:F1:43:BC:9A:43:15:8A:5A
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial: 019684DA384EC713760344978EEB6FC19E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
Manifest number: 0688
Signing time: Wed 30 Apr 2025 04:00:15 +0000
Manifest this update: Wed 30 Apr 2025 04:00:15 +0000
Manifest next update: Thu 01 May 2025 04:00:15 +0000
Files and hashes: 1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: drsoGWTKwfFCmG7+9p6OB9SrTv54bmyGNwaWhL7Eh6E=)
2: nJ3bZDTF3klediLdsGzrGEizejI.roa (hash: XOv5pl5Y0ikBc3XP047Nh+8GGnppEmfe5vg+dWr14YI=)
3: qnlY-2XHeoB5T91L-eAv--psw3s.roa (hash: GlcTsLYuOrrcX+rD96Cshdq9OCpUu7GdPBcBG+rwyLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:38:4e:c7:13:76:03:44:97:8e:eb:6f:c1:9e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
Validity
Not Before: Apr 30 04:00:15 2025 GMT
Not After : May 1 04:00:15 2025 GMT
Subject: CN=236603d716ac06b8f1c6b7d9f143bc9a43158a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1d:37:8f:c0:e9:78:a3:ed:25:59:e1:6b:c4:
81:b7:a7:d0:e3:1c:95:5c:29:30:4b:5d:7e:dc:69:
69:60:f1:ba:04:88:d6:4d:7c:c9:f5:f8:b7:45:cf:
8a:91:10:cb:83:2c:57:29:ac:fc:11:95:6c:45:71:
36:cc:24:46:10:41:5d:33:a3:4f:d8:14:21:98:8b:
df:37:0c:44:62:d7:e9:87:78:ca:44:75:1f:67:c8:
ed:c9:d8:14:c0:7e:62:29:44:89:1c:85:cf:2e:84:
f3:d4:2e:36:4b:6e:b9:6b:4c:5c:5e:ba:b8:25:b1:
ee:96:96:36:1e:23:15:57:b8:b8:01:6c:48:1a:e5:
22:21:6f:3f:3a:3a:09:0e:95:ea:09:cf:d1:1e:4a:
78:40:86:c5:ea:2a:0a:a2:0c:bb:46:54:2d:3d:54:
a8:52:b3:2b:6a:4d:7c:6f:bd:c0:14:be:2d:b3:5d:
1f:26:6b:be:7d:b6:77:3a:48:39:ea:b6:f0:8b:41:
5d:c3:98:e0:f4:5e:5b:c4:db:30:e3:74:c7:11:e1:
9d:b5:31:60:4f:86:75:47:d1:05:80:07:fa:fa:77:
de:96:58:2e:ac:29:ac:0f:d9:e4:05:9f:34:13:68:
5e:79:c0:43:48:18:a8:28:3b:f8:18:83:36:8b:6d:
47:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:66:03:D7:16:AC:06:B8:F1:C6:B7:D9:F1:43:BC:9A:43:15:8A:5A
X509v3 Authority Key Identifier:
keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:62:9b:be:06:e1:84:45:a3:85:fa:6c:37:46:b5:d3:10:0e:
97:90:95:2f:1b:ac:c9:f5:e2:6e:25:50:05:7b:66:ac:da:39:
60:5b:f5:6a:23:5a:75:3d:f0:8b:78:6a:61:ca:83:69:08:c4:
4e:f3:4d:97:e7:9b:2f:e8:39:8f:0f:10:b4:03:f9:32:9e:9d:
5a:1d:f0:fd:63:15:3b:3b:2b:ee:43:ac:c1:2b:87:0e:d2:45:
9b:e8:42:3b:96:fd:cb:eb:35:96:d4:b3:2b:f7:09:50:56:b4:
57:24:81:46:d7:de:ba:18:14:09:06:38:59:11:27:17:67:08:
6e:56:11:42:07:b1:32:6d:c9:de:50:76:6d:e8:15:7a:e1:74:
51:c9:f7:ee:87:b3:2c:14:3c:4f:a2:80:0c:75:ee:54:ad:3c:
5c:ed:c3:93:dc:bd:f6:c8:70:34:df:4b:e6:28:0f:a9:d7:7e:
fb:4c:b0:72:17:59:c4:bc:3e:f9:38:47:40:5a:92:39:b8:df:
d6:de:39:52:1d:a8:f0:2d:a9:4b:22:51:3f:65:00:90:6b:47:
ca:7b:78:ce:98:c7:50:d6:51:3c:26:41:26:e2:b6:c2:c3:44:
d8:15:2a:2c:6a:a6:3d:2d:50:ea:a4:76:9b:94:81:ed:27:c6:
35:10:56:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:38:14 2025 by rpki-client