Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: xt9MmTOcm7movpMKGojMl8Jayq4CxEjqou+aEn6xwDc=
Subject key identifier: AF:BA:B1:73:E6:76:CD:28:7B:82:00:94:B1:12:F8:2A:AB:8C:9E:0E
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 0196A1D230EC15F3E03A3EB73714BDD28523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 1529
Signing time: Mon 05 May 2025 19:00:28 +0000
Manifest this update: Mon 05 May 2025 19:00:28 +0000
Manifest next update: Tue 06 May 2025 19:00:28 +0000
Files and hashes: 1: 2xBb1eN1uQhPtol-uKswad7hTL8.roa (hash: dXJffbqWVGzT51NatOrFAZ7XiueTLyhLa5jFxa/I29Y=)
2: 44uLXBcL_RZwFzmvHMDFnzRLsrc.roa (hash: ebcHWLKhk2lxI2aGu12w8EL09XqOe4qlsJc7YtoQwgs=)
3: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: WgnM0OpQ/Fth+o/GBnwbglo7OCG/59NidsNIr01lQAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:30:ec:15:f3:e0:3a:3e:b7:37:14:bd:d2:85:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: May 5 19:00:28 2025 GMT
Not After : May 6 19:00:28 2025 GMT
Subject: CN=afbab173e676cd287b820094b112f82aab8c9e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:e2:08:b2:b0:c2:bc:2a:cf:b5:b3:64:84:
dc:cc:82:49:b8:66:90:80:a4:ce:9b:f6:8b:af:18:
cb:d7:49:b9:e9:68:c7:be:28:20:10:aa:b9:53:71:
f5:d6:17:26:35:74:29:fb:41:e8:3f:c5:0b:42:f9:
04:eb:db:29:55:3a:88:36:0a:3f:cd:87:a4:86:3a:
87:62:47:c2:64:0e:0c:51:3a:bd:a0:7b:07:33:26:
64:93:00:96:c5:5f:2c:47:8e:f0:28:58:ff:51:3f:
50:3f:2f:13:45:55:08:dc:72:78:b9:36:19:34:61:
e0:d6:00:63:80:3c:27:d5:1f:cd:b9:b2:ef:c1:38:
47:f6:60:47:d5:b2:e1:ed:e8:ad:15:75:80:60:f9:
88:98:a3:c6:48:32:df:69:da:78:42:9f:5e:ee:40:
bb:5e:24:c4:5c:87:70:e9:ab:36:89:49:86:ca:fa:
e2:ef:21:17:25:8b:05:60:40:7f:d4:57:8e:9d:d2:
a4:d7:90:c2:14:23:55:b1:0e:d8:a3:83:e4:8c:57:
41:67:f1:ac:13:9c:52:4c:4d:73:86:f6:91:73:b9:
44:da:cb:a5:a4:4c:e4:e4:8f:c0:3c:e2:61:b4:cc:
5d:96:3e:21:bc:8c:4e:57:bd:69:0b:5f:8f:06:4d:
54:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BA:B1:73:E6:76:CD:28:7B:82:00:94:B1:12:F8:2A:AB:8C:9E:0E
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f4:1e:4f:f5:00:b7:22:40:17:7e:ee:77:74:51:23:22:0c:
cf:99:11:f3:30:51:52:18:66:d8:63:8d:1f:1b:fd:f9:88:56:
7f:74:f7:d1:26:7d:9b:5d:1f:88:33:c4:94:52:36:65:c5:07:
d4:79:b4:65:d9:6a:88:57:d2:9d:e2:89:a8:d4:65:92:2b:af:
9b:13:d4:ba:b9:af:e2:62:d8:67:24:1c:e0:db:e6:f9:82:31:
65:53:44:03:a4:d9:c1:9f:3e:42:88:4b:aa:e5:e6:8e:f7:c5:
9a:45:c6:7f:6d:38:b7:3e:bb:0d:1e:f3:c4:fd:46:75:84:35:
02:2d:05:3d:14:83:30:7c:7e:84:74:b1:f6:35:da:4f:ff:b7:
df:c6:e9:3d:08:8c:20:34:26:ab:04:1c:75:20:4b:3f:63:a9:
d1:8b:17:86:3b:10:80:cd:f8:99:68:40:4a:85:a6:05:1f:b2:
52:92:43:3f:eb:99:77:5a:1b:b4:50:96:b8:fd:ab:08:08:f4:
e4:f8:b4:cd:ff:b2:e5:82:0c:55:01:14:91:7e:2d:10:9d:46:
51:4d:9d:b5:06:45:25:f7:eb:33:dd:2a:fa:1b:92:b4:38:0c:
e3:4e:5e:03:2b:78:e1:9d:8a:cd:cd:a9:57:fb:a4:54:52:14:
a7:39:62:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:44:36 2025 by rpki-client