Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b45f21-3ee6-4712-98fc-b89840a74809/1/i7tTj8T48ZhBAGQN2ENXZqYgZyM.mft
File: i7tTj8T48ZhBAGQN2ENXZqYgZyM.mft (raw, json)
Hash identifier: 8HVBdAZ/uX/l3hI4VhR4RUGxNe4KPDASA3spzXBz8Rs=
Subject key identifier: 93:42:B3:46:03:F0:39:C4:D1:1E:D9:B6:0D:8D:CB:91:75:E4:B4:39
Authority key identifier: 8B:BB:53:8F:C4:F8:F1:98:41:00:64:0D:D8:43:57:66:A6:20:67:23
Certificate issuer: /CN=8bbb538fc4f8f1984100640dd8435766a6206723
Certificate serial: 01968021A74434EDE9D19BBC2D96E2A0F0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7tTj8T48ZhBAGQN2ENXZqYgZyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b45f21-3ee6-4712-98fc-b89840a74809/1/i7tTj8T48ZhBAGQN2ENXZqYgZyM.mft
Manifest number: 1518
Signing time: Tue 29 Apr 2025 06:00:11 +0000
Manifest this update: Tue 29 Apr 2025 06:00:11 +0000
Manifest next update: Wed 30 Apr 2025 06:00:11 +0000
Files and hashes: 1: F-XmOCCi8zdRGEXsEW8GIj9dotE.roa (hash: aZqtC7YnlJ57aaBe7FRji3vyD3JPHZ6fm+Qh4aIyCFw=)
2: i7tTj8T48ZhBAGQN2ENXZqYgZyM.crl (hash: V3ZWX2ewIEfySSrNslW43d3arYCr2xcmvYKkTVq7BJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b45f21-3ee6-4712-98fc-b89840a74809/1/i7tTj8T48ZhBAGQN2ENXZqYgZyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b45f21-3ee6-4712-98fc-b89840a74809/1/i7tTj8T48ZhBAGQN2ENXZqYgZyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7tTj8T48ZhBAGQN2ENXZqYgZyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:21:a7:44:34:ed:e9:d1:9b:bc:2d:96:e2:a0:f0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bbb538fc4f8f1984100640dd8435766a6206723
Validity
Not Before: Apr 29 06:00:11 2025 GMT
Not After : Apr 30 06:00:11 2025 GMT
Subject: CN=9342b34603f039c4d11ed9b60d8dcb9175e4b439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:5a:65:66:8f:b9:3d:c9:59:2c:42:fa:b7:
3a:77:7e:0c:cc:a8:3a:6a:63:1d:f8:ff:fe:c9:e7:
3f:a1:ff:71:02:d6:6d:05:6d:a6:62:93:b7:93:c3:
c8:4d:3b:40:67:10:99:73:56:0a:06:b6:1c:ed:60:
b7:4e:63:7e:a5:63:c9:79:8d:92:fb:a0:48:b6:34:
31:17:3e:74:a8:22:00:15:51:64:a0:f0:97:7e:6e:
ce:85:33:c1:dc:66:35:57:df:00:c4:31:17:d2:a2:
37:f0:70:70:57:7b:67:2e:e2:63:54:4b:70:57:66:
cc:33:de:f6:0f:98:8d:6b:07:fa:74:8e:e5:e6:76:
d5:94:87:29:2a:71:c7:88:b9:76:88:f2:b0:74:9a:
d4:f6:9f:e2:20:69:10:9f:80:ea:11:9a:13:64:b2:
a2:39:9b:5f:a4:ae:4b:0d:ee:51:c5:8b:48:d7:19:
47:84:2f:31:c7:5a:aa:6c:06:ee:05:89:7f:6b:48:
92:f7:3e:96:9b:2a:f3:e9:d4:12:31:4f:49:46:af:
4e:e1:ee:30:0c:1c:6f:23:e0:22:d4:ab:3d:a6:5c:
46:38:4a:3b:b5:c3:1c:e8:ce:de:d2:fb:be:4f:8d:
8c:6f:f4:d3:61:da:da:55:84:e9:1f:8d:c1:5d:fc:
12:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:42:B3:46:03:F0:39:C4:D1:1E:D9:B6:0D:8D:CB:91:75:E4:B4:39
X509v3 Authority Key Identifier:
keyid:8B:BB:53:8F:C4:F8:F1:98:41:00:64:0D:D8:43:57:66:A6:20:67:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7tTj8T48ZhBAGQN2ENXZqYgZyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b45f21-3ee6-4712-98fc-b89840a74809/1/i7tTj8T48ZhBAGQN2ENXZqYgZyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b45f21-3ee6-4712-98fc-b89840a74809/1/i7tTj8T48ZhBAGQN2ENXZqYgZyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:97:b6:2d:cf:4b:bc:89:ef:63:a0:25:df:aa:66:72:d9:e8:
89:32:c6:33:af:aa:a0:af:24:1b:00:15:99:1d:7e:35:f6:3c:
10:a0:5b:53:b3:5a:86:ee:7b:e1:02:b9:21:75:98:22:f3:78:
0b:aa:69:a4:2f:75:c3:f9:6b:ae:c8:57:01:b3:b2:a5:6c:aa:
8e:fe:74:fb:35:7e:0e:39:73:e9:09:80:e9:f7:9f:5a:d1:f0:
95:e3:f2:10:a7:94:2d:eb:dc:7c:37:65:82:e1:39:d4:78:ae:
d5:4a:f3:fd:1a:05:45:4f:e2:2d:5b:2a:2d:21:3f:88:08:d9:
fe:86:f4:82:06:e2:e7:a9:cb:b6:2f:b5:4c:ee:18:d8:ae:f6:
1e:b2:8f:0d:19:42:af:a6:d9:24:99:72:65:31:0c:ba:1f:f3:
31:de:09:d9:d0:17:a8:eb:97:69:0c:6d:40:f5:71:7a:89:1e:
6f:bd:74:f5:c8:2c:c8:4d:ac:e9:cf:2a:e0:f2:35:17:a3:c7:
d8:e2:9b:b0:af:6b:b0:a4:40:b9:01:ca:1e:99:a3:2d:dc:e8:
be:8d:38:33:c9:e1:49:8e:81:ea:f3:ce:18:45:94:aa:ca:c8:
35:56:81:df:6c:7b:e8:f9:e0:61:4b:4e:c3:c3:f1:02:53:15:
aa:6f:7c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:37:56 2025 by rpki-client