Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
File: 86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json)
Hash identifier: Hgm5dn2n9GN/KB/Ybk9cttJHKn/yTtPLiyDq1zqRT64=
Subject key identifier: D2:13:DE:B9:92:DD:FA:04:C2:A6:F0:B4:A6:73:9E:95:45:D3:C7:DE
Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Certificate serial: 0196A843861AA38162001C04617C0EFB0304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
Manifest number: 1528
Signing time: Wed 07 May 2025 01:01:59 +0000
Manifest this update: Wed 07 May 2025 01:01:59 +0000
Manifest next update: Thu 08 May 2025 01:01:59 +0000
Files and hashes: 1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: Rs8Uuz1DQlOIZszINmOaloJeObZSwOD0OPBxUCIREmg=)
2: Pr7YGGLPe8s_S4LRz9ziv5ucbAw.roa (hash: sx9n+qGnhP0I6sp10kmNLeGSUg0Fv6GPJl7WmFjWTnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:43:86:1a:a3:81:62:00:1c:04:61:7c:0e:fb:03:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009
Validity
Not Before: May 7 01:01:59 2025 GMT
Not After : May 8 01:01:59 2025 GMT
Subject: CN=d213deb992ddfa04c2a6f0b4a6739e9545d3c7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:de:a3:e7:37:d1:f7:79:50:14:1e:9f:00:
e5:55:28:d6:22:e7:7c:4a:51:63:3d:53:89:01:ce:
3d:7c:88:0f:a7:7e:59:e8:c9:a4:34:4c:00:98:13:
f6:73:63:a8:33:bd:e0:ba:ee:ab:5a:b3:dd:5f:f0:
bb:db:fa:b1:66:48:0c:61:2b:dd:b6:d3:08:5f:69:
bd:88:63:b4:35:78:61:a3:a3:a6:c3:89:5e:98:8e:
72:de:45:9b:46:7d:2d:33:0f:59:aa:0e:03:e7:07:
10:c1:71:b5:06:86:ff:60:a1:28:d9:f2:4a:64:d8:
ca:ac:bd:95:31:5d:55:8f:7c:0d:7f:71:66:c6:4d:
5b:36:d1:83:fc:83:f2:8b:96:f8:1a:29:74:ef:de:
97:6c:e4:c3:72:e5:f4:80:c8:1c:d7:50:e2:dc:44:
f3:1e:c7:e3:71:df:87:7f:74:7d:9d:40:ef:f5:48:
5a:b6:39:58:40:09:6f:54:cb:28:29:b9:af:2c:6b:
a6:f3:1f:fb:1b:a7:46:10:17:2d:19:f2:05:15:27:
aa:96:1e:05:15:72:d3:d1:9c:fa:9b:c0:fa:a0:47:
93:c6:07:e5:d3:b4:ef:da:e8:af:35:c2:ae:12:a1:
60:83:4c:02:62:eb:50:50:c6:16:4f:8a:9c:90:bf:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:13:DE:B9:92:DD:FA:04:C2:A6:F0:B4:A6:73:9E:95:45:D3:C7:DE
X509v3 Authority Key Identifier:
keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:39:cc:8f:a2:f3:e3:da:50:9d:c6:e6:d5:a1:cc:1e:cb:c4:
b8:c5:e6:c1:1d:fd:7e:50:8f:4a:ef:1f:66:11:db:c7:a7:e8:
19:fc:83:ee:1e:27:21:23:1a:e4:37:3e:21:49:5b:4f:aa:f7:
85:d4:cb:ad:a5:08:3a:f9:0d:07:99:48:dd:ae:bd:b6:e3:88:
a1:ae:8e:62:4e:a9:e3:57:4b:56:8b:f6:09:0a:a4:7e:0a:f0:
b9:38:85:2a:0a:8a:f1:6f:83:f3:07:3f:b3:56:77:56:cc:12:
7c:a2:1f:ed:8b:9c:14:f4:21:89:8f:af:d5:57:4c:eb:c7:6c:
24:9c:2b:c0:f3:4b:df:5d:86:1d:7d:48:32:c1:7b:e2:ed:5c:
31:b8:ad:15:9d:b1:17:d1:74:80:f3:97:14:92:4d:de:f9:48:
9e:e5:18:fa:59:60:65:7f:48:5f:83:84:fb:18:b3:24:31:b8:
71:1a:f7:1e:a3:24:b9:4c:79:40:48:67:bd:0a:2a:a4:6a:61:
49:b5:66:15:25:c0:48:c4:0f:d2:2c:11:2a:e8:df:00:d5:98:
a1:e3:c9:2d:d5:82:33:ca:65:79:18:bc:e2:98:f8:e4:98:7b:
21:90:d0:21:12:20:1b:7d:91:38:e1:f8:fa:77:56:61:cb:a1:
d7:aa:85:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:33:11 2025 by rpki-client