Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
File: i3P4NzXIqxCgqNROFwEo8COEbnk.mft (raw, json)
Hash identifier: WevJcnSVL2ZnQc8vJLlqn+YSKoqKJ8UEv3nJTrqvGB8=
Subject key identifier: 92:B4:FC:FE:C2:71:17:3F:D9:29:3D:48:44:5D:9D:C0:03:EF:58:B8
Authority key identifier: 8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
Certificate issuer: /CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Certificate serial: 0196B7479FC9F885759742E91E25DDB72BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
Manifest number: 03F4
Signing time: Fri 09 May 2025 23:00:46 +0000
Manifest this update: Fri 09 May 2025 23:00:46 +0000
Manifest next update: Sat 10 May 2025 23:00:46 +0000
Files and hashes: 1: L3ocwI9skWdmpza9Qr_soDnI5iA.roa (hash: 9lUp3ywFYQ08BYq4aJkqYCgUsr8TmtCB3L7KRcDWSOM=)
2: i3P4NzXIqxCgqNROFwEo8COEbnk.crl (hash: 73HiK9JB8DQsRTJ9LGQ3WHuyysFPTfViSmEnWpenRbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:9f:c9:f8:85:75:97:42:e9:1e:25:dd:b7:2b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Validity
Not Before: May 9 23:00:46 2025 GMT
Not After : May 10 23:00:46 2025 GMT
Subject: CN=92b4fcfec271173fd9293d48445d9dc003ef58b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:a4:a8:de:93:8d:19:b8:72:8a:85:87:e0:
39:ee:74:96:28:77:67:b0:87:de:45:33:1b:bc:95:
27:b0:c4:a9:10:0f:5e:98:00:57:94:0b:fc:5f:1a:
8f:c6:2e:d2:ac:63:64:40:38:e5:26:ee:9d:01:b9:
00:cd:2e:90:50:1c:ff:0d:21:7b:da:2c:2c:0e:ba:
4e:d9:83:26:fc:1a:d9:26:00:da:f7:8f:23:e9:09:
59:38:0a:2c:7d:5a:0a:04:4f:8d:f5:dd:e9:54:c0:
03:d6:ae:c5:c3:88:51:86:bb:2c:31:e1:f4:fd:af:
53:bc:d0:44:96:71:b3:c7:22:6c:dc:6e:fe:28:6a:
02:10:85:46:d5:d1:45:1c:73:71:b6:c9:7b:b3:6a:
a4:8e:ec:7d:b1:2f:1a:80:93:b1:71:50:23:b2:63:
0c:ca:f4:8a:60:96:68:b7:5e:02:2b:87:ad:e7:bb:
00:d4:79:39:ad:46:cc:e0:8a:e8:fb:4e:10:de:30:
cb:07:30:65:7a:7d:6d:97:33:ac:a9:15:e5:5b:e1:
23:c7:31:cc:10:51:fa:37:d9:b4:b2:2a:d2:c9:bb:
22:8b:b3:2a:89:b0:ad:c0:2c:f1:2c:3b:cc:ad:4b:
38:c1:87:3b:79:ff:40:3d:9f:74:5e:62:7c:16:8b:
39:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B4:FC:FE:C2:71:17:3F:D9:29:3D:48:44:5D:9D:C0:03:EF:58:B8
X509v3 Authority Key Identifier:
keyid:8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ff:a1:19:c4:a4:19:d5:cd:50:2a:52:49:ca:2c:0e:f9:1b:
bd:20:da:d5:84:f4:0c:75:f2:e0:0b:1f:7c:16:07:f8:f6:ab:
48:a4:55:75:6c:40:c5:32:f8:28:7c:25:ae:b1:c8:e5:7e:bc:
0b:e9:9e:a3:7a:73:17:c1:8e:06:de:23:3d:f4:fe:e1:ac:ba:
37:d4:f2:79:64:35:f6:05:3a:3a:99:ac:ec:ca:9d:de:0d:fb:
14:7b:ff:1e:10:3f:67:af:55:df:5c:a9:5e:0b:53:53:5e:78:
41:6c:73:b8:6f:63:9a:09:24:e3:25:15:95:1f:bf:56:28:43:
8b:93:0e:2d:7d:45:46:1c:9a:7e:c7:c2:53:d6:ab:3d:b9:51:
65:63:04:d1:19:54:ac:ed:78:fe:8e:f7:a0:2f:74:1b:70:c7:
49:88:bc:bb:03:5c:3f:3d:b5:8f:46:b8:de:7f:ca:20:fb:06:
36:6e:52:91:e9:1b:34:d7:d2:13:a7:52:e3:3d:4e:49:ad:a3:
5b:cb:44:a2:1a:7e:11:43:66:ee:d3:2b:3c:f0:5d:47:ff:af:
f1:05:48:58:63:38:ec:3c:b8:41:5b:2f:0d:36:2e:5a:81:4a:
27:5b:03:48:27:7d:0d:a9:b9:bf:b2:30:b7:e8:f2:41:c7:df:
a6:c9:43:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:35:49 2025 by rpki-client