Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File: 08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier: JLr/5vODM8nJ9uM5/tmRuPExf3zymQdquCSWeKdYpdk=
Subject key identifier: 3D:F1:79:B0:53:A9:89:8C:54:5B:6B:9B:F0:F3:98:30:58:14:0B:D5
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial: 019677FA89FB98388145E9F68DFFB23A46E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 16:00:30 +0000
Manifest this update: Sun 27 Apr 2025 16:00:30 +0000
Manifest next update: Mon 28 Apr 2025 16:00:30 +0000
Files and hashes: 1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: oUKZJ8siy6BMFA5Xn4JzKsITKMGgorBH/GH2qGGYBto=)
2: vhpsA1QTyqlbOgTgwwiSOvjLosU.roa (hash: oOzCVm5vsYLrY+U1GpoNLtBM7Fbrqb31l0clRbwWzyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:89:fb:98:38:81:45:e9:f6:8d:ff:b2:3a:46:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Validity
Not Before: Apr 27 16:00:30 2025 GMT
Not After : Apr 28 16:00:30 2025 GMT
Subject: CN=3df179b053a9898c545b6b9bf0f3983058140bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:54:b7:d9:99:e9:af:72:fc:da:54:b5:10:d6:
5d:7d:3e:cf:26:d1:43:b1:82:f1:42:ed:9c:f7:47:
03:4f:fc:dc:d4:1c:ff:e7:e2:5b:1b:7f:06:cf:b9:
8a:c4:4b:77:94:97:01:2e:d8:72:7b:21:93:8e:e1:
01:af:1b:0b:95:83:fd:08:a5:c8:65:c1:cb:3f:8a:
8b:1d:9b:1c:0b:e5:dd:73:1f:d6:6d:2d:a8:46:dd:
89:68:a3:41:a9:2e:05:84:de:a7:25:a5:b5:10:80:
0d:12:aa:1d:94:4d:c2:3d:a6:96:70:02:06:8c:b2:
b8:34:8c:63:67:98:6a:59:4d:6c:b2:b1:73:97:2a:
2d:c4:da:d7:48:70:a7:8f:ac:cd:74:44:f1:c6:48:
86:84:fa:ea:a7:6c:f7:dc:12:dc:f0:6d:b7:93:0f:
bc:91:12:90:c5:0d:62:6b:bb:1e:8f:40:5b:d3:dc:
88:e3:f1:3b:87:b2:01:08:ba:aa:c7:e6:0d:ef:8f:
67:a9:0a:b8:55:f4:c9:44:2f:43:4b:43:a4:e1:ba:
40:a2:b4:a7:d8:9f:68:32:d8:db:cc:2d:34:34:1b:
a2:e3:a4:f2:7b:33:1b:78:a7:df:0f:41:9d:4d:f2:
b1:6b:b3:09:e5:7e:4c:a6:06:55:48:f1:f2:c1:59:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F1:79:B0:53:A9:89:8C:54:5B:6B:9B:F0:F3:98:30:58:14:0B:D5
X509v3 Authority Key Identifier:
keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:54:b8:fe:27:5e:84:d7:dd:54:01:7c:7a:6f:79:29:a7:22:
87:2f:e4:86:5f:a4:69:9b:80:e1:68:11:d1:79:c6:6b:cb:84:
01:88:cc:a7:c1:b3:98:30:5a:a1:6d:0c:1d:a4:b6:58:f0:5e:
e7:73:07:0d:19:cd:f7:17:2f:e8:5a:50:06:c7:9a:27:f5:e6:
73:a3:cf:2c:21:43:c6:b9:dc:03:13:8f:a2:fe:c0:3b:b1:ac:
82:c7:d2:b7:25:3f:08:aa:d4:5c:a4:c0:df:1b:1e:38:1e:4a:
2f:02:ff:94:99:9a:5c:f6:00:76:45:4a:69:66:d7:dc:e1:d9:
19:29:36:ac:74:eb:df:95:8f:73:d0:ec:28:ab:3f:52:72:40:
d0:ec:b3:34:bb:76:18:c6:e3:e6:5b:05:01:1f:11:1d:f3:d7:
ae:d8:3d:76:fa:9e:92:63:da:00:4a:07:06:38:24:17:12:a3:
7e:f2:6e:33:24:1f:7c:a0:fc:08:e1:ef:0d:02:6e:eb:1e:76:
e6:f7:76:fa:b9:7e:32:13:b0:0e:a8:5b:d1:af:64:13:91:c0:
3c:bc:52:86:ea:96:aa:fe:d9:21:cc:3e:81:27:bf:62:cc:3c:
03:01:e4:38:f5:e1:5a:22:b5:c3:9b:5f:4c:81:17:9d:ab:01:
1e:a8:84:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:17:11 2025 by rpki-client