Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier: TRZ73/lr4mq1isdiA/ktJbgwNunWAIRI4mE42juePLQ=
Subject key identifier: 91:88:9A:E1:83:62:87:F1:B1:B2:BC:5A:31:51:AB:D1:35:AE:8C:80
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial: 0196A9C2ECF95BE2B6973F51F0241408DDAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number: 0F3D
Signing time: Wed 07 May 2025 08:00:46 +0000
Manifest this update: Wed 07 May 2025 08:00:46 +0000
Manifest next update: Thu 08 May 2025 08:00:46 +0000
Files and hashes: 1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: 1fmwKh708FN+HjA3VhTG7a0Ob/0ZvGMarckyk8FB9+o=)
2: rPbx58T-x5ORRRx0tEYr-rx7t3U.roa (hash: vSn+krLvdIPvrWL0ipO2XK8jiZxa1ds2oZDzxWzd7dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:c2:ec:f9:5b:e2:b6:97:3f:51:f0:24:14:08:dd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Validity
Not Before: May 7 08:00:46 2025 GMT
Not After : May 8 08:00:46 2025 GMT
Subject: CN=91889ae1836287f1b1b2bc5a3151abd135ae8c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:4a:fd:0d:bd:c9:0e:f9:ab:52:06:15:90:
ba:e0:7a:77:da:2d:a6:fa:5a:cd:1d:e0:a5:d4:fd:
0b:37:fb:97:a0:ac:5d:fd:4d:8c:a0:4e:1e:9b:94:
42:c0:0f:af:09:5b:39:d6:15:db:cb:36:e2:c1:4e:
22:30:0e:11:ef:8c:e2:b2:50:51:63:87:2d:9e:c4:
46:15:f6:60:a5:33:42:ad:c5:92:42:75:b9:d1:ab:
70:34:c1:94:35:fe:b4:83:f0:b6:87:53:ba:56:69:
c3:68:be:09:9b:6f:6a:f4:6b:bb:e2:00:4c:f0:e1:
5d:a7:2c:6a:d8:d1:34:6b:3b:91:65:de:9a:bb:c0:
cd:c4:78:51:09:26:e7:d5:90:1f:9f:3f:5d:47:b1:
fa:0c:13:d7:52:29:f7:2d:f1:f6:f4:a1:5c:10:9a:
ba:9a:0e:20:4b:d5:05:2d:be:0a:5e:99:5a:9e:88:
7c:03:eb:8c:a1:8b:5d:ef:43:2d:15:72:be:dd:eb:
de:73:65:cf:57:ac:c7:00:2f:3e:3f:35:8a:35:80:
c5:9a:d4:01:d3:59:b7:b0:5b:81:24:0b:33:50:37:
f8:e4:b8:34:6b:e4:41:71:73:3b:a5:67:6c:5c:e7:
a5:ff:2a:3b:6e:43:20:3e:0b:a5:46:82:3d:6f:5b:
7b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:88:9A:E1:83:62:87:F1:B1:B2:BC:5A:31:51:AB:D1:35:AE:8C:80
X509v3 Authority Key Identifier:
keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b8:c9:7d:dc:dc:7b:76:93:17:a8:da:6e:41:1b:9d:0b:e7:
4b:50:0d:c6:44:63:cc:a5:cd:38:52:83:d1:62:e9:6a:5b:b4:
20:67:a2:75:da:f6:10:bd:0d:30:97:59:20:a2:09:6e:b6:8a:
21:61:6e:cf:50:4d:4a:18:27:df:45:73:13:ad:73:23:43:60:
2d:e8:23:85:48:fd:a0:d0:00:b7:9c:ce:86:f1:b3:e5:db:ef:
4e:b4:12:18:01:09:4d:ae:1a:f9:22:64:86:25:fe:36:86:90:
83:a8:bb:65:16:98:f6:92:6a:20:17:7e:c4:2f:63:41:b6:98:
f5:b4:c1:b2:3b:e9:18:5e:0c:a8:1c:7d:56:5a:34:9a:7d:bd:
ca:0e:f7:c8:d4:a7:5e:e7:a1:d5:ec:c3:e5:fa:d4:fd:e5:28:
a4:95:96:0d:f3:50:0e:19:2d:29:0c:ae:25:31:46:dd:02:6d:
3d:80:94:6c:28:23:3f:45:d3:25:53:19:cb:9c:54:0d:6d:c3:
7e:be:3e:54:e5:11:c1:3c:17:a3:b1:5f:3d:de:e5:c7:29:5e:
9a:88:30:be:b0:a1:0d:88:d9:d0:25:a9:81:99:d1:f1:6d:f0:
29:1c:f2:cc:57:1f:f3:8b:b5:59:db:6d:3c:c1:0f:f2:05:04:
ec:2a:70:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:19:20 2025 by rpki-client