Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
File: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft (raw, json)
Hash identifier: O1UvDkDzmIMTLKn/DxPJnhoO5swnArFVeTVTpVTfy3s=
Subject key identifier: F9:B1:7B:AD:D9:1B:E6:4A:C5:D3:88:B8:33:1B:43:3E:5A:B2:DA:DF
Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
Certificate issuer: /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Certificate serial: 0196BE9341AD2E70F3A8C186666B519C9F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
Manifest number: 12E8
Signing time: Sun 11 May 2025 09:00:43 +0000
Manifest this update: Sun 11 May 2025 09:00:43 +0000
Manifest next update: Mon 12 May 2025 09:00:43 +0000
Files and hashes: 1: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl (hash: yMVFE+RzsDB7AHzX1BtA8LvdyBLTpzWfAGmONgdUhGE=)
2: OkXBNJnUgokPx0Xxs8AUPN40aT4.roa (hash: E/UomHj5ST+3/lio4VV13yWumaIvNp+hYEYFZLaJR7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:41:ad:2e:70:f3:a8:c1:86:66:6b:51:9c:9f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Validity
Not Before: May 11 09:00:43 2025 GMT
Not After : May 12 09:00:43 2025 GMT
Subject: CN=f9b17badd91be64ac5d388b8331b433e5ab2dadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d6:0c:96:f3:1c:c7:d5:76:af:fb:62:40:57:
1b:ab:10:47:df:6e:14:a8:68:53:a7:5b:48:c1:54:
53:6e:4f:80:29:45:88:ad:00:c4:f0:6e:1d:de:b0:
86:6b:05:dc:d7:86:ff:85:a8:a9:64:da:a6:de:86:
e1:9f:99:69:99:e8:88:ea:a9:69:c8:38:fb:a9:cc:
a2:0b:aa:9a:61:54:8d:a7:fb:c8:d7:b5:71:d4:ea:
b4:99:44:fd:13:ba:13:6e:c8:74:8d:5e:33:85:39:
38:a3:0c:72:73:48:fe:d7:bd:4c:0a:c3:26:46:0d:
7d:20:7e:9b:7b:b9:7a:92:63:63:90:a9:fd:bb:16:
ed:45:df:5c:54:29:63:13:03:b8:b3:a2:84:e0:2a:
0a:18:58:c7:5a:c6:ab:3e:50:31:f2:1c:ca:97:62:
4c:18:16:b6:f7:2e:02:90:2f:39:15:8e:47:de:41:
bf:ba:80:37:a8:71:3f:6c:f9:ac:ff:33:ef:a7:0f:
14:88:31:98:1f:ff:b5:d5:1b:52:62:8c:4d:10:5d:
2c:c3:16:ec:fb:39:f4:fb:4c:c0:9b:bd:8a:d8:11:
f5:9f:9e:9a:01:34:91:1b:dd:4f:b9:f0:c8:7e:52:
ab:c6:53:64:1d:0c:12:ef:ab:b9:7b:9d:dc:99:e8:
1c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B1:7B:AD:D9:1B:E6:4A:C5:D3:88:B8:33:1B:43:3E:5A:B2:DA:DF
X509v3 Authority Key Identifier:
keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:13:70:88:75:71:88:7d:b6:5a:ce:5a:e0:df:e8:e0:e6:e3:
94:bb:e7:bc:25:a8:54:aa:85:12:b4:2b:b6:6a:c6:be:8f:b3:
f0:d3:51:58:42:25:70:aa:82:df:83:7f:7a:ba:92:d7:80:a5:
f9:08:25:59:51:19:b3:31:0b:ef:f6:68:e9:d1:31:6e:d8:9a:
4a:ad:e6:21:75:0c:ff:8f:0e:0d:f6:0b:41:76:29:bf:34:12:
70:45:a1:d8:91:53:2b:9b:d3:de:fa:0f:5b:b8:af:c4:d3:f4:
39:71:7b:92:85:fa:b5:a2:12:25:e6:a4:d5:b4:0b:9e:c5:75:
02:41:d2:bc:06:c2:59:34:e9:74:ab:04:e2:3c:e1:75:09:97:
02:10:40:82:a3:63:5f:4f:49:98:70:e6:f4:43:70:62:66:c8:
be:7b:70:44:e8:ba:d3:19:95:1a:52:bc:18:d2:c1:6a:00:99:
86:d6:b2:cf:c8:74:c6:cb:6e:b7:2e:ee:ba:fd:c4:57:ad:26:
63:67:30:cc:c9:e0:96:6e:ea:db:66:81:ef:34:98:f9:6e:95:
4e:d8:c2:6f:1a:98:88:17:37:78:b2:bf:af:c6:1b:47:30:d3:
23:0e:52:40:1f:86:75:ed:c8:4d:6f:ee:24:62:fb:0d:16:7e:
fb:03:2d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:49:55 2025 by rpki-client