Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json)
Hash identifier: 1vgFafylzbTxdbp4Z6M4ny6EdkGGvETOR2YRsZpO8Pw=
Subject key identifier: 0D:C7:AB:33:35:8D:1A:26:FF:55:62:70:48:23:17:4B:F4:93:0C:A2
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial: 019676B13CB287ED211DFA7DA34F5B01B6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
Manifest number: 0A5A
Signing time: Sun 27 Apr 2025 10:00:48 +0000
Manifest this update: Sun 27 Apr 2025 10:00:48 +0000
Manifest next update: Mon 28 Apr 2025 10:00:48 +0000
Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: E9B1AcUndju2l9+3hBuq7l1Sa5hz8XKkm1s5SJvQv+c=)
2: RcN3Kuq3ry-DnLR50I8ZgxWiZps.roa (hash: 21uJ31ZQvbuNpqex7iYKgjQtgSig9b6f7lgE5wHxtS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:3c:b2:87:ed:21:1d:fa:7d:a3:4f:5b:01:b6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Validity
Not Before: Apr 27 10:00:48 2025 GMT
Not After : Apr 28 10:00:48 2025 GMT
Subject: CN=0dc7ab33358d1a26ff5562704823174bf4930ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:c1:3a:45:b4:2e:cc:13:80:28:24:4c:b7:
24:f8:9a:ac:5a:36:18:42:6e:96:67:de:43:e8:79:
b3:c9:8c:59:1d:2a:68:5e:5a:0c:17:41:6e:91:f5:
28:ab:0d:1b:ed:a8:64:46:d3:b6:6d:51:f8:ba:b5:
f7:3e:6f:90:a1:bb:63:cc:6d:ff:65:ab:7c:4c:da:
86:e0:de:39:dc:94:dc:25:cd:d2:60:72:52:59:56:
41:f1:0b:f8:87:b1:78:8e:40:54:a7:4a:0a:85:13:
4b:0d:b1:35:b3:7d:52:16:40:f6:bf:61:b2:d4:22:
dc:ff:8c:59:1c:b2:38:6f:5f:bb:8e:97:c5:ae:95:
0a:b7:61:67:ae:d4:7c:ab:49:7b:1c:4f:46:12:85:
bb:27:79:31:7a:af:12:00:eb:8a:8b:b6:30:05:d5:
d7:7a:36:51:75:dc:26:26:e8:73:f9:d3:86:fc:45:
cb:4c:53:42:ee:5e:4a:f4:ea:88:2a:ac:fb:fc:d5:
e6:bc:b7:14:0a:f9:c5:13:8e:38:f2:8d:d0:75:04:
d0:fb:a7:e2:43:dd:99:3e:43:5f:fe:72:5c:80:0c:
82:9c:e3:45:11:aa:6e:a4:e6:68:00:39:ea:07:fb:
c7:a1:44:8b:45:e1:54:a1:77:29:a8:c4:6f:e9:7c:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C7:AB:33:35:8D:1A:26:FF:55:62:70:48:23:17:4B:F4:93:0C:A2
X509v3 Authority Key Identifier:
keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4f:24:0f:90:a4:e2:ff:f3:0b:1b:4b:8c:c1:0a:7b:ad:1e:
b1:c3:74:0c:d9:5b:9e:e9:c1:05:1e:15:5d:87:82:f6:23:e2:
89:fa:32:21:6e:06:7a:10:ed:b8:79:12:81:ff:f0:39:a5:e7:
49:16:cb:10:fc:72:46:f2:09:58:79:65:6f:c1:cd:a4:92:3b:
8f:3c:89:d9:48:e6:a4:e3:1e:5d:11:73:86:ca:f6:35:f1:00:
30:42:21:49:c5:de:35:5f:72:0e:2d:7e:2b:12:14:b8:9d:37:
fe:c7:f3:ec:2c:eb:fd:82:13:80:38:fd:99:da:70:c8:75:80:
c4:c5:b7:d1:9e:ff:da:2c:d7:90:74:95:28:48:d3:47:cc:0f:
b4:40:d2:f7:67:d8:f8:1d:8b:e0:ee:9b:9a:86:b0:6d:6b:a3:
37:18:f8:2a:67:99:ac:ca:30:86:6f:5e:55:e5:98:f0:3a:6a:
ed:d6:fd:78:15:ba:67:4d:a5:a7:6d:30:9e:99:21:0b:9b:ba:
f6:72:2d:aa:41:d8:34:43:a0:15:a5:77:4d:b2:88:df:44:43:
b5:3c:c8:b3:fc:d2:5e:0b:0a:95:b8:c0:21:66:51:c3:84:49:
c5:a0:a2:b3:ab:3e:3c:b9:12:0d:a7:9c:5a:d0:50:ab:77:fd:
bd:07:5e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:09:28 2025 by rpki-client