Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
File: 1K5pV43Ol3ozqindV8oZD6aHd_o.mft (raw, json)
Hash identifier: K5Ethe2dOwrA4sB3n/qEvcQNyoyK/V9c1t5rTuZZe1w=
Subject key identifier: 26:DE:52:EC:72:08:E9:86:74:41:C7:23:5D:23:93:3E:F5:65:50:DB
Authority key identifier: D4:AE:69:57:8D:CE:97:7A:33:AA:29:DD:57:CA:19:0F:A6:87:77:FA
Certificate issuer: /CN=d4ae69578dce977a33aa29dd57ca190fa68777fa
Certificate serial: 01967FB3F04DA5BC5BB9AC6CC70AAADEDA36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K5pV43Ol3ozqindV8oZD6aHd_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
Manifest number: 0B8A
Signing time: Tue 29 Apr 2025 04:00:20 +0000
Manifest this update: Tue 29 Apr 2025 04:00:20 +0000
Manifest next update: Wed 30 Apr 2025 04:00:20 +0000
Files and hashes: 1: 1K5pV43Ol3ozqindV8oZD6aHd_o.crl (hash: 350kdVQ3T9f2UyD2bgQcb+irA2DipI8wyqr5eBWF+jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K5pV43Ol3ozqindV8oZD6aHd_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b3:f0:4d:a5:bc:5b:b9:ac:6c:c7:0a:aa:de:da:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ae69578dce977a33aa29dd57ca190fa68777fa
Validity
Not Before: Apr 29 04:00:20 2025 GMT
Not After : Apr 30 04:00:20 2025 GMT
Subject: CN=26de52ec7208e9867441c7235d23933ef56550db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:98:51:d7:c1:78:72:55:aa:7c:33:fa:84:
ca:73:4c:0a:51:99:5f:10:cb:1d:66:96:b9:18:35:
72:36:3d:18:31:7c:6a:45:61:6a:21:b9:18:72:3e:
19:77:f6:44:3b:eb:cd:c9:2a:58:ac:f3:03:cb:cf:
c9:73:f0:4d:b9:a0:7b:09:00:0c:02:c0:4d:15:1d:
55:b4:31:8e:27:8c:f5:12:29:e9:6c:55:49:30:29:
2f:cd:a1:05:d4:c0:f8:8b:12:a8:c8:fb:ed:49:f8:
50:ac:b0:52:19:54:5c:93:b3:7e:f5:f5:d7:8d:b4:
1d:0d:38:d7:e3:3c:5c:21:c6:ce:ab:10:41:35:19:
7d:b0:71:73:97:b7:38:0e:fb:e7:d4:c5:c6:c5:98:
40:f2:4c:57:e4:ef:43:a9:8a:54:20:7b:ba:a3:c5:
1c:cd:db:4a:e8:79:9a:33:9c:a6:75:8d:72:fb:e4:
3e:ba:33:f4:e3:56:16:f9:3c:a5:68:2b:36:53:9d:
d3:17:fc:90:e4:f7:e6:62:38:26:e0:e9:ad:3a:9b:
d2:60:72:7a:3f:9c:0a:25:62:4b:de:a0:be:80:85:
2d:22:2b:1f:25:db:6e:5d:94:59:0a:8f:d5:25:3b:
32:ae:65:c0:f4:37:bc:17:7e:bf:fe:83:15:1a:f5:
28:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DE:52:EC:72:08:E9:86:74:41:C7:23:5D:23:93:3E:F5:65:50:DB
X509v3 Authority Key Identifier:
keyid:D4:AE:69:57:8D:CE:97:7A:33:AA:29:DD:57:CA:19:0F:A6:87:77:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K5pV43Ol3ozqindV8oZD6aHd_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9b:f5:b3:d1:82:d8:2c:ea:03:c0:43:9d:69:d5:97:8e:7a:
d5:8d:13:0e:4c:ef:96:4c:bd:75:d4:64:84:d5:c0:2c:e1:f3:
81:8e:95:a6:d0:a7:8d:94:2d:dc:4a:cc:28:16:16:09:84:f6:
d2:2a:cc:8d:8a:24:68:4f:43:0b:fc:27:91:1b:11:b0:95:4a:
df:60:78:f0:42:90:a8:1e:f8:50:ea:84:98:60:50:77:92:ea:
f6:b6:19:ad:70:d4:e1:f5:5f:c8:f8:d6:b0:e9:be:ee:9d:f3:
1e:f0:3b:fb:94:51:ed:b2:d2:8e:21:83:c7:1d:59:7a:5b:19:
f5:38:12:a5:75:b6:14:92:98:55:f5:c2:7f:5d:be:fb:c1:27:
98:9e:9f:d9:ab:55:46:cb:02:48:1d:4c:94:fc:22:ab:6c:8f:
4e:63:2e:05:0f:4c:da:44:d8:df:e0:0c:e4:0f:5e:6c:d6:a5:
b7:a4:df:89:a1:ba:15:e8:ac:51:89:af:da:50:49:67:c0:ba:
77:99:02:0d:46:5e:c2:1b:2d:cb:c5:52:d6:e2:e6:59:1d:c7:
33:38:e3:c9:74:4f:1d:17:37:52:f2:5c:21:66:c2:7b:48:1f:
bc:94:e5:19:5a:e6:c7:d7:65:14:47:5c:70:43:55:21:22:08:
9b:5b:a3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:17:21 2025 by rpki-client