Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
File: X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft (raw, json)
Hash identifier: HshceTo5mdSmDFkvMdyeqjHCtYZiSzSaCAIyYs2Us7I=
Subject key identifier: 11:AC:FE:08:4C:5E:75:A1:32:E8:62:A8:83:70:BD:3E:EE:26:0B:48
Authority key identifier: 5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
Certificate issuer: /CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Certificate serial: 019683919DF15BE631B3DB20E30857478E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
Manifest number: 05C2
Signing time: Tue 29 Apr 2025 22:01:20 +0000
Manifest this update: Tue 29 Apr 2025 22:01:20 +0000
Manifest next update: Wed 30 Apr 2025 22:01:20 +0000
Files and hashes: 1: X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl (hash: okbkUWyucGY1dihHh08Yk5izxmDnreHNMIGP3pKON7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:9d:f1:5b:e6:31:b3:db:20:e3:08:57:47:8e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Validity
Not Before: Apr 29 22:01:20 2025 GMT
Not After : Apr 30 22:01:20 2025 GMT
Subject: CN=11acfe084c5e75a132e862a88370bd3eee260b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:18:ab:9c:96:e5:94:60:20:27:6a:3b:e6:55:
b0:97:f6:d1:b3:4b:85:4d:ed:70:72:a9:75:ea:85:
1f:67:6b:3f:06:3b:80:be:d8:51:09:5d:0b:91:14:
c3:f2:51:d8:49:1c:ff:5f:81:27:85:30:66:b0:c4:
df:13:60:49:b9:11:a4:ac:34:c6:54:23:bc:51:39:
8a:ac:6b:c0:35:35:19:f4:b6:8a:74:7a:7a:95:df:
65:e8:46:7e:7a:ac:0e:67:68:89:cd:e5:d0:bd:80:
50:fc:cb:59:c2:cc:72:8d:e3:ac:20:7c:26:e0:0a:
eb:25:88:8e:db:5d:34:c0:da:e9:a7:26:f3:9e:58:
9f:18:a0:7a:2a:14:c1:af:3c:94:86:1f:53:af:58:
fe:4b:a0:da:0a:05:44:51:4f:cc:ba:a5:9e:8c:fd:
52:9e:96:62:96:29:dc:77:52:fb:bd:de:0f:0d:78:
47:23:32:af:6a:c6:cf:d9:67:72:c2:81:17:41:70:
ba:64:32:a7:31:3c:7f:a1:21:c5:e1:a5:c3:a6:ad:
c4:88:e5:fe:89:77:ee:0b:9c:73:96:dc:08:ed:34:
7b:88:4b:15:56:d9:c0:ce:51:d5:2d:14:33:d5:2f:
98:4a:ae:9f:13:8c:29:c2:24:e8:ec:e0:c5:db:8b:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AC:FE:08:4C:5E:75:A1:32:E8:62:A8:83:70:BD:3E:EE:26:0B:48
X509v3 Authority Key Identifier:
keyid:5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:79:a1:c0:02:96:db:08:57:46:bd:c8:4e:3d:fa:96:6b:f3:
3a:9c:fa:40:bc:37:1d:3a:d0:b0:87:4a:79:45:1f:41:cc:aa:
09:53:3f:01:6b:13:32:d2:67:0e:15:28:29:e9:5c:97:f1:b3:
93:de:d0:80:ab:24:ac:28:c2:27:52:a3:e2:e2:8a:40:65:6a:
cd:79:7e:54:4b:be:86:e3:3a:1a:f1:b6:5e:98:1c:9f:8e:da:
ee:44:cf:0f:0d:f7:6f:23:62:f0:ed:71:79:4d:36:25:30:eb:
da:b4:9f:9d:d6:55:c4:06:d3:67:d0:52:e6:ad:45:aa:97:15:
77:04:a6:5f:c1:94:d2:5d:e3:ca:6d:43:ab:a5:5a:a5:4b:10:
fe:74:84:4b:e1:37:2d:c9:4a:82:6c:d3:23:8d:40:93:dd:55:
5a:5e:e0:23:74:65:4f:bf:bc:7f:b9:bb:32:ba:16:8d:49:71:
47:e8:56:7c:9b:b3:3e:cb:b2:68:63:3f:35:4c:5e:e2:e0:74:
dd:36:78:06:2b:6b:4b:cc:d8:b4:37:82:a4:48:c9:a6:9d:2f:
0e:d7:0b:2a:93:2b:72:99:41:96:c0:09:33:40:90:8f:35:af:
dd:30:b9:22:80:a4:c3:c0:a1:3d:dd:a2:d3:f6:37:7c:b8:14:
67:e2:3d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:26:43 2025 by rpki-client