Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
File: ih8K1VcrribjnIdAxoqPu0buSGQ.mft (raw, json)
Hash identifier: xxPac1YpDpawPrWuPXv97LLklymaLlKFT9piOUxDlWI=
Subject key identifier: 88:53:DD:EE:90:2D:5A:41:B3:89:BA:41:E0:9D:43:5E:31:2F:CA:80
Authority key identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
Certificate issuer: /CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Certificate serial: 0196DA0A4848C294BE398416777C2167C4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
Manifest number: 08D4
Signing time: Fri 16 May 2025 17:00:28 +0000
Manifest this update: Fri 16 May 2025 17:00:28 +0000
Manifest next update: Sat 17 May 2025 17:00:28 +0000
Files and hashes: 1: eG2Sz-NBLwpAqaii4LbUZ-cWycY.roa (hash: uPzFHNSnB/27/j7jzNn6SSjG0qijsqzpue+Zsmabwu4=)
2: ih8K1VcrribjnIdAxoqPu0buSGQ.crl (hash: osYHgbUL2FfUjMk+YO0mbt18/6DCU9IJZQSWWZMKCts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:0a:48:48:c2:94:be:39:84:16:77:7c:21:67:c4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Validity
Not Before: May 16 17:00:28 2025 GMT
Not After : May 17 17:00:28 2025 GMT
Subject: CN=8853ddee902d5a41b389ba41e09d435e312fca80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:12:20:ea:75:96:bb:12:13:9c:62:23:7f:
7b:47:7e:b7:43:b8:a1:4a:9e:25:56:6a:c9:dd:0f:
55:3f:26:04:13:3d:48:38:ae:b8:c6:62:c0:95:bb:
b9:c4:c3:73:a3:61:9d:42:71:9f:74:22:32:98:9f:
7d:97:5b:ac:58:2a:0e:dd:51:74:85:2c:a1:e6:5e:
2b:85:54:46:a5:75:9f:86:2d:32:98:fd:72:2a:59:
c8:9f:dd:16:f5:cc:eb:fd:4b:22:82:2d:62:2e:8a:
a0:b8:ea:71:24:7b:c2:a9:0d:3c:e1:8e:e8:a2:30:
df:64:e6:ed:30:4f:ad:07:cf:5b:b9:cc:96:21:c9:
63:91:78:f7:32:e8:43:09:d6:f3:a4:7e:67:fd:f5:
40:21:86:38:28:0f:23:b9:cd:f9:d8:d2:64:a0:fe:
29:a4:a6:38:70:3e:a6:d1:d9:28:a6:b9:f2:ed:84:
a8:7d:fa:8c:c2:6d:57:fd:b3:06:70:86:47:a9:34:
a3:c3:66:28:c6:31:1a:e6:13:d7:7c:7b:ca:8d:a9:
d8:07:f1:1d:de:e8:15:ff:8b:77:08:4e:0c:5f:85:
38:57:21:b8:4a:f3:e0:85:1a:e1:aa:0f:7c:bf:15:
94:81:c8:01:c7:b6:57:8f:9d:f1:59:87:b1:ed:ec:
fb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:53:DD:EE:90:2D:5A:41:B3:89:BA:41:E0:9D:43:5E:31:2F:CA:80
X509v3 Authority Key Identifier:
keyid:8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ef:16:51:03:81:8a:ae:80:eb:25:00:8a:bf:6f:ae:29:fc:
38:6f:b5:8c:18:34:ac:f9:47:97:b4:53:c4:5d:32:90:fa:ee:
7f:0b:e1:f7:a1:eb:37:0e:93:0b:9f:51:24:38:f3:bf:12:d1:
28:e1:a4:d3:fc:6c:62:d7:a3:f3:5e:38:38:94:1f:57:9b:b7:
03:3e:da:cf:01:93:a2:82:21:97:f4:11:4c:26:b4:2a:25:38:
ad:61:f6:e6:7a:31:78:67:d0:a8:d5:de:84:8a:0d:57:e5:39:
1d:fa:00:1b:7b:a1:9d:b7:10:3c:e5:cf:8c:09:fa:90:46:9d:
68:3c:da:62:c6:4c:18:65:8b:1c:fc:37:d2:7b:20:f5:53:dd:
8c:e0:ee:48:41:84:39:f6:23:17:c1:29:e5:9c:c7:8b:3a:e1:
d4:86:b8:92:3d:f8:da:2f:ab:34:db:56:e3:2d:8a:a3:74:73:
64:12:0b:70:5e:62:5d:32:c7:71:4e:03:d0:a5:c0:cb:50:bf:
0f:88:16:93:50:c4:81:1e:e1:77:4d:3c:00:68:2e:1d:88:a4:
c1:a8:9a:57:fc:0d:7d:5d:8b:7a:2b:91:85:87:6b:ce:d2:7d:
1e:61:e0:14:8a:82:78:b9:9d:8e:82:45:65:95:d8:bc:dc:41:
95:9d:23:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:21:43 2025 by rpki-client