Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
File: 8fF-vMKlJa_PySIYFZyvUogpeNI.mft (raw, json)
Hash identifier: nm1fgzKVMkBIIB9sicdMmU18UUoDI9IncgbIW1BPvHY=
Subject key identifier: 55:5C:E3:83:6C:24:1B:02:6B:33:3B:90:41:69:C8:41:E5:08:EA:0C
Authority key identifier: F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
Certificate issuer: /CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Certificate serial: 0196A5414B071E13B48187A515E7755F58D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
Manifest number: 0587
Signing time: Tue 06 May 2025 11:00:41 +0000
Manifest this update: Tue 06 May 2025 11:00:41 +0000
Manifest next update: Wed 07 May 2025 11:00:41 +0000
Files and hashes: 1: 8fF-vMKlJa_PySIYFZyvUogpeNI.crl (hash: g98cam9xMP5TN33A89WXDwSEZ/dkLip1gvPjD1dMNqw=)
2: xG5nFDK1Nyvy5vl4sT_P7td-s98.roa (hash: 9ZslVC10Wq5A6L0EoqSP1oGGII0oefI9/cuRC4XS49Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:41:4b:07:1e:13:b4:81:87:a5:15:e7:75:5f:58:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Validity
Not Before: May 6 11:00:41 2025 GMT
Not After : May 7 11:00:41 2025 GMT
Subject: CN=555ce3836c241b026b333b904169c841e508ea0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:63:1f:f9:37:66:f8:08:1a:86:61:b2:6b:
2c:de:f0:06:5a:39:7a:2a:2a:65:d3:41:22:92:e6:
25:a2:2b:d6:17:f2:b9:63:9a:34:a2:8b:f7:7c:0b:
10:1f:29:5e:4e:44:3d:91:72:da:a8:25:a3:f5:1a:
1f:5d:7b:60:5e:6e:ea:99:e9:07:79:1b:05:01:f5:
27:1d:aa:e7:1a:c8:42:ba:e6:60:3a:d8:58:de:7b:
2e:0a:c3:c6:4b:5c:4d:04:a5:10:78:98:23:9e:c6:
3b:14:ed:6f:6a:7f:49:ec:7b:d9:47:7b:c6:72:68:
61:a7:c2:c1:ba:af:a0:3c:d5:5a:40:27:1a:b1:dd:
2e:18:0d:6f:9c:90:84:74:14:6c:32:99:7f:68:4f:
96:ac:a5:f1:b1:f6:6f:93:e3:cd:da:93:74:0d:dc:
f6:fe:c5:6c:a2:19:2a:86:c6:1b:4d:8f:5e:46:ed:
67:9c:bf:5c:20:e0:9c:c5:b7:06:68:00:3e:d5:8d:
de:ba:cc:d0:32:28:b5:ba:35:e1:85:7b:40:c8:4b:
03:29:a1:92:8a:9a:ae:29:d5:4c:f5:ec:6c:82:13:
62:66:42:a2:b6:41:99:d9:0e:0b:57:e8:1d:f4:cf:
6f:a6:c6:6c:4d:d4:ef:09:28:ea:99:cf:f6:95:ab:
02:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5C:E3:83:6C:24:1B:02:6B:33:3B:90:41:69:C8:41:E5:08:EA:0C
X509v3 Authority Key Identifier:
keyid:F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f4:64:8e:95:c4:55:ea:cc:7b:4b:9c:08:6e:7a:ce:60:2e:
21:97:69:0d:4d:58:a3:43:7e:26:df:1f:09:75:18:af:ef:8a:
21:3f:dd:84:ed:0a:4a:1c:21:9b:7e:73:35:48:20:8f:9b:b3:
49:1a:e2:36:3e:ec:6e:31:46:de:29:79:01:fa:3c:36:8f:51:
02:23:19:da:3d:f5:e7:7a:91:bc:b9:68:b8:88:af:4d:97:11:
54:51:90:50:5f:69:63:fa:ca:a6:26:40:4b:f4:78:3a:d9:82:
9e:5f:8d:bd:5b:b7:ff:85:02:d8:fc:fc:a6:45:aa:ec:13:23:
b4:f7:25:0b:a9:e3:fe:c3:b6:39:d8:a4:b6:5f:18:5f:92:f6:
c2:16:d5:b7:10:7e:57:c7:41:df:1b:96:01:34:81:45:a7:b9:
39:c6:23:ee:ac:b4:f4:2a:52:10:01:c8:14:57:be:15:51:94:
93:eb:23:35:aa:35:b9:75:e7:68:7e:f3:3d:d4:34:e3:b6:36:
01:cd:58:8e:2a:e9:d7:b1:bd:af:d4:9d:ac:3a:28:66:34:88:
53:71:35:2b:64:bd:fe:52:ed:22:a9:9b:e0:29:1f:0f:4e:77:
91:1d:2e:d4:83:54:1a:fd:e8:0d:a7:88:8c:f1:a5:3e:75:f6:
2a:f2:8f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:24:13 2025 by rpki-client