Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier: pFNELVD07FljL7S6XaRD5pu0/5qSMZOSlbbA96rKqWw=
Subject key identifier: 25:06:8A:97:0E:F5:0F:17:90:CC:8D:6F:8D:FE:EC:3D:B9:26:91:BC
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 0196B3A1B793B974F230019AAA55304F872E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number: 0A1A
Signing time: Fri 09 May 2025 06:00:42 +0000
Manifest this update: Fri 09 May 2025 06:00:42 +0000
Manifest next update: Sat 10 May 2025 06:00:42 +0000
Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: lEKgXh9Rk2nRju4BWSFbyyQ98hfnf1wVIsF58N+HP+Q=)
2: CkMelDZYJ8wLYR1cBeOcNR-SbG4.roa (hash: 6DRW9xC/bgUNN/0DP+fJRep1JSUrKnuaZJm7l+ZDw18=)
3: GK_repQ6rwK9wKBexoj_8KHn0ps.roa (hash: BVRGH6L3m9qE1hNSh0udH+0Cqw8KHPDP3+FP2Bc+9Fo=)
4: PwFex15w_vGu9rMsC-NGPYybEsw.roa (hash: oh3ulFFupTLJCwmoHULEmcM0EU2doUd+YoDkAtl9zLo=)
5: Se_t6NLKu8IA2sTkrVOBiKVsQwY.roa (hash: phtV0BDD2FsHScjhDeHLatllFRKkRPV0UJtMe0PEg8c=)
6: cWH5PPaYfZWUJba_G0n_uzh_rsc.roa (hash: C8oVSKijBzzlBacVotbOoAmP0eM+u3jK9TaM8PG08eI=)
7: eK7sZ1D_OT19uO-hHprpcrVXcWU.roa (hash: bVKg53TVS+OiFbk3Bkeg0BfOZQFTwlQ5IxwlXslILAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:a1:b7:93:b9:74:f2:30:01:9a:aa:55:30:4f:87:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: May 9 06:00:42 2025 GMT
Not After : May 10 06:00:42 2025 GMT
Subject: CN=25068a970ef50f1790cc8d6f8dfeec3db92691bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:cd:5a:e9:15:fc:ff:d0:a3:1a:e2:b1:0d:
ab:7d:66:b1:d5:9a:91:34:fe:f5:3f:3d:a7:37:fd:
45:8c:db:9c:e6:dd:4b:74:46:0b:fb:05:b5:4f:72:
c2:8e:5d:59:6b:1c:7c:c9:e9:e3:42:e6:1b:0c:ae:
3b:26:c5:97:c9:83:e5:08:d3:54:cf:26:b5:9f:cc:
04:31:ac:1c:07:7a:8c:10:37:d3:ad:b6:5d:9b:be:
e9:ce:c7:a7:7f:99:25:69:70:80:60:ee:53:d0:7f:
89:a9:4b:dc:f5:46:d3:89:95:af:89:ad:89:a2:c7:
7c:41:bc:62:59:f9:c6:34:7b:1b:9e:14:5f:af:97:
46:b3:06:67:49:4f:5c:8a:df:5a:48:5d:ab:c7:e0:
4a:36:c0:81:37:67:cc:3e:d1:84:72:a4:32:02:f2:
bf:45:39:df:ec:f4:05:1a:cc:bc:f8:7f:15:ca:5b:
f0:98:06:2d:6c:e3:be:fd:5a:df:a1:3d:a3:83:3c:
a7:31:0b:25:aa:d3:86:3f:80:8b:27:38:95:7b:92:
2f:18:a1:75:57:20:37:4e:33:be:47:60:92:a4:ba:
7f:79:ff:b1:03:b4:0a:17:9c:58:f0:7c:54:6f:c6:
c8:34:d3:7c:50:22:85:e4:18:89:3a:46:49:86:25:
7a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:06:8A:97:0E:F5:0F:17:90:CC:8D:6F:8D:FE:EC:3D:B9:26:91:BC
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:78:15:44:be:f9:8e:f0:28:4a:38:94:71:b2:21:c4:5a:97:
79:33:b9:58:3d:6c:2c:37:c8:ec:c9:80:17:37:cb:4d:2c:13:
22:56:33:72:00:85:91:4b:be:95:8d:6c:15:f4:bf:b8:35:9c:
95:4f:67:82:0d:65:e9:60:c7:53:ea:a4:51:45:a3:db:f7:4d:
00:0f:b6:16:b1:fd:f5:d3:82:e4:bc:00:48:39:c2:80:1f:a4:
d8:ba:ff:ab:85:74:59:3d:4f:7a:04:c7:d0:c1:c1:bf:71:35:
4a:df:1c:c2:46:9f:be:4b:a4:e2:7c:08:a6:ac:da:67:73:9d:
a6:61:82:b8:36:32:a9:13:01:e3:93:a2:c1:82:53:06:70:10:
8f:63:06:0a:a9:b4:42:3a:d1:f1:ed:68:aa:27:a4:04:16:0f:
b9:f6:ba:00:55:18:72:56:c5:d2:e7:24:d8:e8:0f:da:12:c9:
11:bb:bf:15:95:20:67:73:16:fb:35:df:7f:ca:fd:15:8c:29:
94:80:18:63:86:ca:5e:fa:07:6c:b9:60:dc:d7:0c:5f:e7:74:
1c:48:31:87:f5:ad:02:b2:d1:53:b0:1e:14:ac:4d:4a:db:a0:
ff:76:a9:b7:dc:0f:d0:51:bd:77:ef:0e:ce:27:93:3d:2c:33:
7e:56:79:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:36:06 2025 by rpki-client