Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
File: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft (raw, json)
Hash identifier: nOV6Wlw8HQ5wAdkSmVyOQCfMqvok5a8qKPfcoXUUQ8c=
Subject key identifier: E2:4D:6D:A9:A2:3C:93:77:74:4F:6F:A1:6E:75:31:35:F3:D1:65:84
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Certificate issuer: /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial: 01969DBE4DBA46E802E61C0DB101AC3E0C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
Manifest number: 0FAF
Signing time: Mon 05 May 2025 00:00:16 +0000
Manifest this update: Mon 05 May 2025 00:00:16 +0000
Manifest next update: Tue 06 May 2025 00:00:16 +0000
Files and hashes: 1: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl (hash: AiZBjB0OC+F+JgVMQ7EyQpl8fZXGwVAEy/woZYwx/B0=)
2: iZ5p5MN0N4aCqnIjU0jjwKvIZns.roa (hash: DtCRo0LBdqkJmTlhbB6eN/7hU3EdBp5G+2hoRmL97Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 00:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:4d:ba:46:e8:02:e6:1c:0d:b1:01:ac:3e:0c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Validity
Not Before: May 5 00:00:16 2025 GMT
Not After : May 6 00:00:16 2025 GMT
Subject: CN=e24d6da9a23c9377744f6fa16e753135f3d16584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:4b:e1:75:95:06:83:81:2b:a4:1e:64:f4:
88:10:b1:62:b6:ec:22:cb:4f:ab:52:cd:f7:e7:83:
7b:10:3f:30:d6:f2:7b:b8:24:f9:4b:d9:38:ee:ed:
a4:00:bf:82:c6:60:c2:7c:27:79:1f:fe:92:6f:4a:
4a:d0:61:95:12:4e:35:b8:04:12:9e:76:d4:f1:15:
80:25:28:0b:23:e5:d3:67:df:08:c5:41:3d:af:9e:
ac:53:5e:b7:29:82:d3:48:74:dc:72:3e:18:22:dd:
b0:2b:88:a9:a4:08:af:7e:2a:53:30:aa:d7:d1:f3:
c8:3f:cc:69:f8:35:ff:24:71:1c:14:6d:4e:db:12:
fd:fc:3c:07:e4:9e:4e:bd:19:a9:38:ef:32:b2:28:
10:1d:6b:86:85:e7:00:b6:4d:3d:da:35:00:84:83:
af:1e:60:48:b2:4f:50:e6:4e:c8:bb:44:fc:af:58:
75:ba:8f:3c:4f:a8:50:3f:7a:d2:7a:37:2e:ec:66:
3e:fe:0e:e2:0d:ff:73:72:7f:fe:65:75:f3:53:15:
88:d4:c8:c9:20:ef:20:0b:3e:65:c3:75:7d:e3:86:
b6:4b:51:80:26:23:c9:f6:be:82:8f:91:d3:ae:68:
8d:ba:ae:50:c9:6d:40:76:83:d9:f5:b9:95:b2:a7:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4D:6D:A9:A2:3C:93:77:74:4F:6F:A1:6E:75:31:35:F3:D1:65:84
X509v3 Authority Key Identifier:
keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:31:fd:ae:6b:9e:c4:a7:b4:07:7b:26:a9:12:67:6c:86:74:
91:fd:f7:a0:da:a4:ac:85:bb:4c:e6:c0:51:23:40:cc:54:2a:
2a:9c:03:64:aa:e5:6b:a8:26:2b:18:d0:62:dc:fe:2f:a0:a3:
7b:6f:bc:15:dc:1c:6d:ab:97:12:d1:c9:76:fa:04:79:03:67:
3e:a3:5f:53:b9:e7:a5:27:50:27:ed:49:1d:12:b1:0b:4a:e6:
6f:ac:d5:a4:84:ca:8a:84:75:4d:36:f7:a1:04:0a:98:14:85:
22:ce:af:1b:6d:ab:06:d4:bb:42:b8:73:ad:f4:a2:64:bc:81:
2c:cf:9b:06:62:75:45:f7:cf:ad:69:ae:d5:17:61:11:d0:48:
05:7a:f3:f5:17:97:4c:d2:11:fc:f7:b4:22:dd:45:d6:a6:86:
da:ea:79:fa:ee:6d:9d:e9:6b:cb:ce:4c:78:30:8a:a7:f1:bc:
b2:9f:de:64:e8:60:f8:58:64:94:ff:a9:d3:cf:ad:e0:f2:00:
02:63:79:7a:73:c0:aa:f5:68:2c:f4:a5:6c:47:cd:7d:bb:4a:
27:c5:a9:d8:b5:7e:0d:05:da:68:fc:c9:a7:5f:3d:c1:3f:87:
73:16:bd:a2:7f:be:ab:9f:d2:7c:89:aa:b1:a8:46:9d:5a:68:
35:64:3a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:12:31 2025 by rpki-client