Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
File: i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft (raw, json)
Hash identifier: H+QwbV3SaMUoHzwNul6aeblV1HDUUtd3N4pXxNz4NCU=
Subject key identifier: 8E:1C:99:B8:C7:8B:E3:B3:3E:68:2E:32:10:08:EF:7B:C5:DE:6C:26
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Certificate issuer: /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial: 0196A4656E4DB63075889D0D25532FAC5073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
Manifest number: 1526
Signing time: Tue 06 May 2025 07:00:32 +0000
Manifest this update: Tue 06 May 2025 07:00:32 +0000
Manifest next update: Wed 07 May 2025 07:00:32 +0000
Files and hashes: 1: fv5YNECYQOScxqIs8CQ4Mfvo6r4.roa (hash: 1dbsSquUR6918Zz6dymdjZNTTgaYfI6MWJh2pSzjXy4=)
2: fweRbovLWdF9pH6rb4wkNI7Qa5A.roa (hash: Ij1i47Q8RIaDs08CnmY/mVxyR0aEzscrR4GtWWkDV3Q=)
3: i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl (hash: TpPzawhfErreH1swwP0+u4rynHgGKG18izJyUzasMK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:65:6e:4d:b6:30:75:88:9d:0d:25:53:2f:ac:50:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Validity
Not Before: May 6 07:00:32 2025 GMT
Not After : May 7 07:00:32 2025 GMT
Subject: CN=8e1c99b8c78be3b33e682e321008ef7bc5de6c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:1c:04:a4:2b:e2:3c:b4:40:52:b9:91:be:
88:91:80:fb:85:a2:84:25:9e:a2:89:53:6e:cf:3f:
b2:96:62:97:ab:fc:72:c9:39:21:a0:67:e7:7b:16:
33:31:4a:99:9d:6f:99:c2:10:64:71:06:24:13:55:
43:7f:37:c5:90:fb:0f:72:07:20:0f:06:14:03:f2:
18:dd:3b:9c:9a:9a:76:1c:6e:f3:86:d9:1d:c0:bc:
66:0d:3f:0c:3f:fe:39:6a:98:63:6a:9a:be:95:68:
4a:16:c9:1e:86:2b:85:7c:fc:d7:95:66:53:7b:b7:
59:c0:cd:45:1d:17:85:8f:a4:77:29:b0:21:ef:3e:
b4:14:ca:bf:86:be:93:ce:5d:24:dd:80:5f:b6:a2:
c3:91:99:5d:4e:71:bd:fe:15:87:f6:56:31:38:88:
3d:71:86:ef:dd:8c:f4:12:90:c5:27:a2:1c:3c:3e:
2f:9d:48:56:34:cf:17:c4:2e:35:c1:29:fe:f3:4e:
8b:e3:e3:65:15:3b:00:0f:bd:9c:8a:c4:d9:7e:e3:
cc:8e:a1:f2:79:7a:c9:e2:8f:0b:9a:b4:47:79:f7:
1f:44:fb:d6:bc:39:3b:92:97:62:f8:83:f8:71:52:
36:1f:79:a1:61:c1:f8:ef:d3:23:91:07:99:68:13:
f7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1C:99:B8:C7:8B:E3:B3:3E:68:2E:32:10:08:EF:7B:C5:DE:6C:26
X509v3 Authority Key Identifier:
keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:37:fa:5a:42:58:9b:d0:9d:e7:c4:a9:d6:c6:da:4f:4b:7c:
3e:c1:6e:28:a4:66:8c:15:a2:3e:1b:ce:99:d4:ce:61:d0:f3:
5f:e9:b4:a4:73:13:7f:4a:5c:15:e8:e4:7f:49:20:1c:80:59:
83:b3:c2:ee:ea:11:2c:79:7e:de:38:7b:43:f0:6d:26:21:f8:
b8:da:23:05:e4:d1:cf:43:88:2f:3c:57:45:c2:40:c9:95:e6:
aa:31:57:90:63:49:13:f0:e8:03:ea:8e:0f:d6:65:ed:dd:f1:
a2:72:93:21:74:ca:75:ef:5c:b1:08:a2:61:94:c5:ce:ef:12:
9f:3f:42:e7:85:4c:c5:4f:18:8e:f5:3b:f8:cb:e4:25:69:bb:
21:dc:82:d4:b5:93:76:26:b8:f1:e6:d6:7c:bd:06:5d:3d:5d:
25:c5:d1:f7:ae:64:09:5b:d4:a4:b0:ef:a8:0f:15:94:1d:b3:
86:c8:9f:e9:4b:41:0a:44:a8:0c:c9:b6:dd:6d:d9:c3:df:e3:
8a:cb:81:63:12:81:3a:aa:a4:66:84:44:b1:bb:9c:20:32:e1:
76:38:14:78:a4:0f:c6:96:f9:f0:09:5a:6c:59:0f:21:6e:d3:
83:76:dd:96:3a:92:b3:dc:a8:73:bc:2c:27:a0:71:db:46:79:
cb:f0:40:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:28:35 2025 by rpki-client