Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
File: 08ixCjj4HGTiASB7_DVEwpcq9fM.mft (raw, json)
Hash identifier: oojYNKaTAs9oaurC9FSRU9QIlxw33q4hurH358EtrE4=
Subject key identifier: 06:A4:73:FE:01:97:71:39:21:98:94:48:B8:FF:4A:5E:DB:91:4F:C9
Authority key identifier: D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
Certificate issuer: /CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Certificate serial: 019675D513A3F4C270F5FAB66F31282C509C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
Manifest number: 0ECF
Signing time: Sun 27 Apr 2025 06:00:20 +0000
Manifest this update: Sun 27 Apr 2025 06:00:20 +0000
Manifest next update: Mon 28 Apr 2025 06:00:20 +0000
Files and hashes: 1: 08ixCjj4HGTiASB7_DVEwpcq9fM.crl (hash: CECJDFoGxjDznVYTi9Yh70EWrmFpj5P9wUwmjly+LeA=)
2: 0hYdVdTdrSs-d6BXtENWomMQM6A.roa (hash: Qi+45gX4AdRetJwFY+wBMXn8X8pOs16SCJ6qQzqdA+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:13:a3:f4:c2:70:f5:fa:b6:6f:31:28:2c:50:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Validity
Not Before: Apr 27 06:00:20 2025 GMT
Not After : Apr 28 06:00:20 2025 GMT
Subject: CN=06a473fe0197713921989448b8ff4a5edb914fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2b:00:2d:e6:aa:87:a7:68:c3:35:89:37:9c:
81:4d:5e:2c:d8:0e:43:71:7d:b7:5b:a8:75:c6:bc:
c7:6b:fe:90:45:e4:aa:b6:45:e3:54:c0:01:a8:80:
06:7b:67:a1:b5:1c:29:42:25:55:57:38:13:a7:1c:
ea:06:ab:8b:2c:f1:d5:ac:af:e9:23:51:24:32:e1:
0b:79:7a:20:b7:f9:ab:41:66:8a:e8:e9:c1:f2:ef:
ad:37:df:ab:f8:e8:98:8d:6b:c6:17:93:8b:e8:53:
ba:da:4b:16:a4:75:9a:48:00:70:0d:11:d6:f9:a3:
36:34:dd:16:03:3f:79:fa:93:d7:cd:36:42:e7:cc:
fc:c0:64:b3:f9:24:90:ae:fd:66:65:9c:c2:fd:a7:
d2:ff:97:51:0f:e9:b8:87:b1:bb:82:36:72:a4:8a:
ba:fb:98:d7:aa:36:fd:f0:5c:38:43:57:94:4c:9a:
d5:6b:0a:e4:c0:9a:79:a3:e5:0a:d0:56:e2:d0:24:
97:73:d5:93:fc:64:45:ea:89:9a:b5:9a:b4:cc:61:
85:8c:12:9e:be:5e:f6:d1:1e:2b:14:f0:cd:b7:b2:
a0:45:04:70:04:03:96:60:42:3d:6a:f0:3c:78:a5:
4b:2d:2b:f4:8f:86:60:bb:2d:7d:38:6e:65:d9:36:
e4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A4:73:FE:01:97:71:39:21:98:94:48:B8:FF:4A:5E:DB:91:4F:C9
X509v3 Authority Key Identifier:
keyid:D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:58:02:90:d6:a3:fd:59:da:6f:c0:82:f2:c1:70:3b:d6:dd:
fc:6a:05:7c:9b:41:b6:bc:00:3e:7a:3e:30:ca:16:df:6f:8e:
e2:c2:72:1a:01:84:e4:23:8c:db:19:00:94:ea:36:91:cb:5d:
08:d6:9f:57:4c:ca:a7:36:35:03:08:38:cb:05:a7:ea:d0:fe:
88:ce:df:d4:ee:ec:7a:7a:be:1e:ee:ae:27:e9:4b:8b:9a:23:
78:73:e0:c8:ee:8d:de:2b:a0:6c:6d:3b:8d:cb:6d:1e:47:8f:
c8:32:c6:1c:52:cc:34:ff:49:5e:70:12:74:cb:8e:a8:74:c1:
bb:28:b9:8d:80:9a:4c:84:cf:da:f3:60:e2:11:30:11:82:78:
e3:82:d8:a5:d7:53:24:01:02:1f:dc:eb:97:4e:71:43:fd:08:
08:fe:47:23:bc:cc:a0:52:b8:18:63:ca:f9:41:31:4c:bc:49:
7a:cb:6d:7d:c8:bc:ca:91:5c:20:c4:1f:86:ac:ef:1a:63:05:
45:b1:d2:e7:b8:ce:c1:05:b4:88:14:3c:51:39:96:79:1f:c7:
6b:bb:84:de:50:cf:52:24:f1:c6:a7:f8:f0:83:48:23:c6:9e:
ba:d6:f2:02:81:ee:7e:05:a1:df:81:1f:cd:6f:24:c9:e3:63:
de:e8:46:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:10:11 2025 by rpki-client