Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier: TB9fzTiq4IVhL6XuTOFXyJFEg+o6tRSZA/m4It1jLQ0=
Subject key identifier: 34:84:A6:8A:74:35:B0:CB:47:9D:E4:23:71:68:EF:02:A4:41:A2:C4
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer: /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial: 0196ABB1217EB573238E2E4CF75DC04907BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number: 0540
Signing time: Wed 07 May 2025 17:00:34 +0000
Manifest this update: Wed 07 May 2025 17:00:34 +0000
Manifest next update: Thu 08 May 2025 17:00:34 +0000
Files and hashes: 1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: U/F3sKGoiUb4/L1gGmNiGa++daCrwmeHAH+fspsDeMc=)
2: QkDfFPHioKn_HpsksL_NF9YS6vY.roa (hash: 1Lri5Ec30fDzCxdnmve0TUpmzcMOSjp4uMTpIup2clA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:b1:21:7e:b5:73:23:8e:2e:4c:f7:5d:c0:49:07:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
Validity
Not Before: May 7 17:00:34 2025 GMT
Not After : May 8 17:00:34 2025 GMT
Subject: CN=3484a68a7435b0cb479de4237168ef02a441a2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:27:f8:c8:5f:64:b8:73:56:43:e9:e6:4a:de:
2d:89:86:f9:eb:b8:61:15:20:7e:40:6b:a6:61:a6:
17:a3:00:c9:31:ca:13:21:79:fa:b8:5f:3f:16:b3:
a1:37:8b:bf:48:18:5c:7b:cf:7b:67:03:4b:c0:d1:
8e:17:59:2c:cb:17:13:d9:42:e4:90:85:e9:6d:40:
e3:6b:70:41:34:39:a5:ce:ba:bb:a9:b8:6a:27:eb:
75:78:f8:bf:ad:28:b0:23:e2:44:64:bd:c7:dc:ee:
e5:5e:99:98:27:e4:26:fc:b6:d2:94:fb:b4:13:63:
e0:9e:ec:fd:e6:2f:40:48:27:77:29:b1:ed:54:ef:
0c:fe:c9:0e:3a:36:fc:97:17:30:a7:4c:1d:8e:15:
08:e7:99:3e:b7:3f:3f:53:65:67:b7:6d:c2:31:8a:
5e:9c:f8:fc:36:e1:3b:5a:51:8c:d1:64:58:d5:c1:
ab:4c:d8:19:dd:8b:3c:01:19:50:7d:72:7d:5c:bc:
56:40:c1:b8:e3:70:6b:9e:80:e0:4e:67:2b:b7:23:
e5:82:a5:8e:9e:99:f6:0e:e9:a2:86:6e:03:d8:f5:
24:4d:ca:f3:de:f3:2b:d9:19:a2:71:36:a3:a6:56:
c5:fa:55:cc:cc:d3:a4:54:62:73:44:17:d6:f9:54:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:84:A6:8A:74:35:B0:CB:47:9D:E4:23:71:68:EF:02:A4:41:A2:C4
X509v3 Authority Key Identifier:
keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0e:1d:4b:13:06:c0:a3:23:97:05:a0:d8:f3:9f:c5:41:56:
a8:59:72:cc:4e:8d:89:b4:50:27:fe:d2:df:4e:74:c4:1b:2c:
7b:63:f8:3b:a8:fc:1d:a7:4d:f9:a6:d4:6b:e8:f3:34:d3:28:
69:03:b9:6f:40:a1:e2:17:83:65:1d:1b:20:33:0e:f3:d4:84:
81:c1:ab:d5:99:7e:fd:87:ac:be:46:e8:fd:67:10:c2:55:c6:
06:34:28:77:3c:dc:e8:15:aa:a3:2d:0f:55:d2:fa:28:ce:6c:
d0:51:29:fb:f2:a9:64:c8:06:79:4b:72:20:83:5a:1e:2c:42:
9f:b5:ba:6c:72:8d:11:dd:aa:5e:3c:f2:c5:ce:fc:c9:fc:21:
5c:31:0f:f9:b6:3e:93:76:31:c2:eb:a2:3a:d4:95:3c:4a:ad:
12:3e:fb:20:bc:98:fc:05:9b:4c:8e:14:cd:61:0b:16:33:26:
59:58:8c:55:00:43:7f:7f:b3:ae:d5:ff:6d:19:b0:d5:f7:2d:
23:df:1f:fe:4d:47:71:96:06:c6:07:66:b7:be:a1:ea:59:13:
05:62:46:51:58:27:5b:e1:54:83:a4:8c:ae:dc:7b:7d:f7:f5:
b1:e2:61:02:ec:0f:c0:ba:ad:31:9a:e3:ff:61:93:23:90:6b:
d0:cf:01:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 01:47:39 2025 by rpki-client