Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: tFuEFsP1uQUyoepDIaIfrP5+we1ulxVA0kYY6SjdAis=
Subject key identifier: D3:76:97:AD:56:DD:F1:5E:05:D5:7E:2C:4D:3E:13:59:07:77:C9:D6
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 0196B17C41CE04D86E6A1BD4A71CBF483714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 09AD
Signing time: Thu 08 May 2025 20:00:32 +0000
Manifest this update: Thu 08 May 2025 20:00:32 +0000
Manifest next update: Fri 09 May 2025 20:00:32 +0000
Files and hashes: 1: 2Utz6EvNmTYHORm-GQMKm69p8WI.roa (hash: j7FVQ06WFgxEJj//G5Co8Dizh+fdctkzSaSmR5/2mVM=)
2: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: w+3YighWiMjwCE7SN8av5TimZv2mJnFSyl+sTT4Yrug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:7c:41:ce:04:d8:6e:6a:1b:d4:a7:1c:bf:48:37:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: May 8 20:00:32 2025 GMT
Not After : May 9 20:00:32 2025 GMT
Subject: CN=d37697ad56ddf15e05d57e2c4d3e13590777c9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:54:07:f5:f4:95:07:49:51:5b:2e:f4:0f:5f:
29:28:8e:7e:e8:b8:f2:d5:62:85:f7:bb:e3:6e:ea:
f3:dd:1e:99:b3:8a:d8:72:ca:a9:24:9d:69:85:51:
7b:8e:ec:de:f4:0c:b1:15:c9:f9:42:bc:08:e2:f0:
92:74:c4:63:df:4a:45:4b:b5:38:68:99:82:28:1f:
a6:59:04:1a:81:47:3e:f9:46:8f:69:15:64:81:2f:
31:e0:13:7c:a9:07:a5:fd:a4:9d:0f:93:54:c6:0d:
04:e0:7e:ff:3b:ab:68:b9:27:f5:e1:cd:24:0e:66:
42:bc:0d:3e:3e:e4:c9:0f:ba:21:f2:5a:c3:b8:a8:
94:6d:0f:48:c6:ca:01:be:31:0e:df:7d:85:f1:fc:
ae:0c:4d:62:40:f5:4f:83:3a:4d:c2:9e:9e:84:91:
22:02:13:e0:64:d5:89:ba:e2:ee:b3:a0:6f:cc:2e:
76:90:e9:f5:2d:ba:22:0b:a2:ae:c5:8f:51:3c:a8:
c6:ec:86:e8:85:81:77:5a:6b:76:84:8c:af:9b:c2:
b7:4c:75:48:0e:e4:1a:ad:04:43:93:2b:46:8f:62:
50:d4:47:6e:9d:c4:e9:94:3c:92:3d:cc:d5:12:90:
70:a4:d8:44:fe:9b:8c:cd:d9:d5:90:17:02:88:7d:
ff:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:76:97:AD:56:DD:F1:5E:05:D5:7E:2C:4D:3E:13:59:07:77:C9:D6
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:01:40:c6:ae:fb:29:27:5a:61:db:25:89:d7:26:0f:3e:74:
4e:33:71:5a:b1:98:30:19:59:ef:03:5a:b0:57:68:b5:6d:4e:
b0:0d:b9:1f:d6:ee:ff:86:9d:ec:34:22:d4:c3:5c:bb:d4:4d:
91:13:b2:99:ec:c9:50:79:d3:eb:ea:9e:58:0d:af:0e:39:e2:
46:7a:e3:ee:ef:73:d4:e6:b8:a1:80:fa:2a:77:a7:2f:a2:0a:
73:e3:b3:96:76:cd:1c:49:01:79:e1:b2:1f:7d:cd:02:65:f2:
18:4d:ff:7c:6a:30:b1:9f:af:28:a7:3d:a5:08:66:65:4c:08:
62:a7:92:9c:75:95:71:57:bf:3d:41:e8:f0:4f:59:4f:52:5e:
65:12:61:16:31:02:b9:7a:f5:06:43:f5:45:cf:a0:52:3b:db:
77:1c:55:15:a5:2b:2a:9b:b8:ae:7e:c7:dd:92:5d:db:65:ca:
b2:c2:b2:b4:ea:e1:ed:e6:fc:8a:80:7a:91:96:1e:37:28:3f:
26:bb:46:00:e2:bf:11:e8:de:1a:63:68:40:33:2e:a8:f3:ee:
06:dc:2e:42:4f:c5:c9:4d:1c:59:15:1e:08:3b:53:9e:f8:3f:
b0:c3:bc:b9:50:1f:d2:b3:2b:d7:65:10:4f:40:da:b8:c3:95:
e1:d7:12:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:05:05 2025 by rpki-client