Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: qp4yplk9vvKdbQa+uwDZCt/eAeX3V860vAFkVVBN63w=
Subject key identifier: C4:CD:F5:6F:65:98:8B:C9:9F:49:E0:7A:0A:13:74:43:D9:39:6A:2E
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 0196D13E9FE2B00ACF48495D92AB7AAD83EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 0E96
Signing time: Thu 15 May 2025 00:01:04 +0000
Manifest this update: Thu 15 May 2025 00:01:04 +0000
Manifest next update: Fri 16 May 2025 00:01:04 +0000
Files and hashes: 1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: +pL9XRpVFKG5nLt+ODiPlh0rQNEyU/HpkOmoy9Ib5TQ=)
2: ju7OLwWOvoLnlAHiuO4kBTFVzwY.roa (hash: e9FAsffXnl64K8Cv3+KjxTUevpgUYG3UY/wewoBEVBQ=)
3: nbL7-TNKQqJ1-yJVoHEn9a5u6DU.roa (hash: tfXwKToKmsCep/7a6KKpGiz+Hfu7rsnL13FXZOQiKEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:3e:9f:e2:b0:0a:cf:48:49:5d:92:ab:7a:ad:83:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: May 15 00:01:04 2025 GMT
Not After : May 16 00:01:04 2025 GMT
Subject: CN=c4cdf56f65988bc99f49e07a0a137443d9396a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:34:35:73:a5:46:11:0e:5b:5b:b4:61:41:
96:1d:88:ad:59:b0:7d:fa:d4:1e:37:9a:a6:f6:ec:
ac:ae:b7:28:cc:51:07:9e:bd:f1:a9:d4:d9:71:9b:
b0:e8:d7:51:77:e4:da:92:88:4d:c8:39:75:9e:05:
20:ea:83:24:b8:f3:80:9d:3c:76:78:10:21:a4:68:
0e:1a:85:72:ad:c8:db:f2:79:0c:8d:bd:08:b9:c3:
7c:1e:23:f8:b0:b8:08:73:f9:de:6c:e4:9f:25:bb:
c9:84:4a:1a:5e:19:14:58:6a:6f:05:ef:41:b3:5a:
68:2c:25:5b:70:b4:f0:a8:6b:5e:68:47:d5:c3:fc:
54:b4:6f:89:78:27:7e:c4:fb:66:6e:84:2b:de:ef:
61:1a:14:35:e8:3e:db:ca:02:38:23:09:8d:66:80:
2a:2d:6c:bf:5a:2b:97:3b:d6:f7:81:9f:23:b0:29:
86:e6:ea:0c:ea:8b:dd:84:f2:88:05:8d:92:58:65:
95:8e:48:84:f3:6c:7f:ae:32:a9:7a:48:d6:29:55:
b6:21:21:5e:93:60:57:63:ee:0c:be:bc:6b:4a:1d:
f2:19:04:4b:50:63:55:01:46:a2:a1:01:50:56:09:
f7:11:1f:5a:b0:55:6f:0f:55:a0:f8:3f:57:b5:d2:
64:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CD:F5:6F:65:98:8B:C9:9F:49:E0:7A:0A:13:74:43:D9:39:6A:2E
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c1:3a:42:62:87:80:61:31:36:91:16:89:be:a6:6b:5d:51:
3a:20:37:26:04:51:f2:53:0f:c8:03:80:69:92:78:75:66:0a:
9c:b8:a1:46:3e:fc:83:86:8b:7d:2b:da:8a:15:7b:cf:5d:78:
e7:66:3b:d9:95:dd:61:22:b2:b5:61:46:45:2b:d3:4f:47:e6:
b6:f3:f9:f5:e7:83:f9:1d:71:47:bb:f3:76:d1:bc:3c:f7:10:
7b:b9:aa:b8:75:ae:a1:af:de:2d:bd:04:9a:60:96:1f:29:47:
66:db:72:0c:3e:6d:e0:4d:92:1a:43:59:87:d6:69:6c:79:fe:
a2:58:9e:19:b8:b3:e2:83:01:80:73:dc:35:cb:cd:6b:ae:38:
60:62:dc:d8:9d:bf:03:12:32:4a:0a:32:f9:e3:f8:7d:77:82:
1d:6a:a1:08:12:34:06:2f:7d:a0:25:9c:79:eb:16:e6:b4:9d:
aa:3e:ad:13:13:09:f2:84:94:72:02:e3:30:8b:93:ef:cd:ab:
16:d3:ed:7c:05:07:fb:43:62:6b:4a:d2:51:3a:05:c5:91:d6:
fa:c2:b4:5e:f0:c9:f2:0a:36:68:a1:41:c6:73:c9:68:ba:24:
0a:08:d3:08:82:f8:2c:de:41:9e:35:09:08:8f:8d:3d:f0:4b:
76:4b:c5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:00:57 2025 by rpki-client