Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
File: 70Ku0OkbI9DNy_skrIObDb5qoEs.mft (raw, json)
Hash identifier: 0BHxzpZanNbykJ8KUHqIrgS28B4IUkCoXSeyyBSaPrg=
Subject key identifier: 27:8C:F1:96:01:B7:A9:69:78:25:BA:8F:6C:04:8F:E9:76:96:88:94
Authority key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
Certificate issuer: /CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Certificate serial: 019684DA88A0AEF2C69CFD4FF7927BD0E647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
Manifest number: 0A8C
Signing time: Wed 30 Apr 2025 04:00:36 +0000
Manifest this update: Wed 30 Apr 2025 04:00:36 +0000
Manifest next update: Thu 01 May 2025 04:00:36 +0000
Files and hashes: 1: 70Ku0OkbI9DNy_skrIObDb5qoEs.crl (hash: FAcFvosBPHcdBbjS3XD8JYDGU+JsmWt+MTzF3AQVxdg=)
2: FiLJrOB6VSbXcUW10ayq5u0-45c.roa (hash: SVzm6u7ARr2O1cZhcAUWJuayXj1RRfV/z3YIwyKiXZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:88:a0:ae:f2:c6:9c:fd:4f:f7:92:7b:d0:e6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Validity
Not Before: Apr 30 04:00:36 2025 GMT
Not After : May 1 04:00:36 2025 GMT
Subject: CN=278cf19601b7a9697825ba8f6c048fe976968894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:39:9a:f2:0f:33:77:83:35:cb:01:af:66:
e6:2e:40:cc:cc:99:17:7f:f8:8c:0b:51:51:97:44:
ed:60:63:1a:9b:1c:72:74:d0:d0:39:cd:d9:d7:b8:
65:8f:cf:91:fb:c6:14:64:01:f2:1d:7d:bb:4d:7b:
2d:9d:4f:da:34:0d:0d:8c:e6:7b:dc:d5:0c:4e:34:
d9:d7:96:2b:16:6e:92:f8:23:e0:fa:14:24:25:19:
bc:0c:d1:ee:34:d6:e2:e3:cf:01:d6:91:4c:bb:41:
5b:96:9c:7e:03:63:42:85:31:09:40:9a:17:67:e8:
ce:47:15:f1:99:67:e4:b3:da:1a:45:d2:c3:d9:95:
ec:e7:9a:df:53:b3:39:81:54:e5:03:27:ca:e2:0f:
bf:a9:58:84:ac:f5:87:c4:76:f6:24:09:15:40:b7:
de:ea:d0:d1:45:57:fe:61:4b:89:b4:3b:23:60:24:
22:46:0c:d4:80:eb:d6:dd:ac:9b:cf:f7:10:38:dd:
87:c8:86:86:34:11:05:10:21:3f:00:de:bb:42:fa:
04:2f:5e:3c:66:ff:f5:39:85:16:1e:0d:bd:e4:1b:
6f:f6:b5:53:b8:30:b3:fd:d4:fe:74:36:27:43:bb:
03:6a:d3:62:36:73:6a:7d:3f:e5:88:c1:1d:91:dc:
49:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8C:F1:96:01:B7:A9:69:78:25:BA:8F:6C:04:8F:E9:76:96:88:94
X509v3 Authority Key Identifier:
keyid:EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:b9:af:11:a0:06:ab:e0:fe:19:04:6f:b5:aa:78:18:dd:92:
ed:11:d4:a1:5b:36:5d:cf:72:53:a1:90:f5:e0:2d:2a:5c:25:
e5:50:8e:51:1d:d1:e0:83:1a:30:f5:07:c0:ed:51:bf:7a:ac:
e4:37:f4:eb:71:db:b8:33:e4:43:22:e3:ba:b7:0c:5b:b2:c2:
cb:e5:1c:2d:a6:6f:9d:c3:05:31:9f:88:8f:5e:ba:8c:6e:66:
fa:70:f6:b5:eb:15:18:ed:91:fc:c8:c4:a8:ad:a6:d6:92:a3:
0d:0f:92:44:bd:8e:a4:4e:a9:30:50:9f:ee:e8:c0:25:bd:e2:
11:ee:da:42:2b:3e:d6:7b:e6:61:90:f2:7a:b9:75:f2:69:40:
a0:72:76:c2:9b:65:f0:dd:57:c2:ac:66:21:f7:66:50:77:dd:
bb:6f:9c:3e:90:09:b7:d5:93:ee:94:da:9a:b0:03:c1:fc:9f:
0f:e0:3e:8b:95:ec:e0:09:32:77:96:c9:d5:47:56:9e:87:2d:
65:13:47:1a:55:35:20:a9:ef:5a:89:7f:ad:1c:93:c3:37:b4:
5e:18:d2:ed:d6:ec:29:81:28:a1:ce:78:68:d1:63:5e:dc:63:
e4:df:38:c1:9f:82:e4:65:f3:f0:e4:0c:ad:5f:c1:e4:d8:69:
db:aa:08:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:36:23 2025 by rpki-client