Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
File: 0uQqWD-iUbQyz8HcqL00HVBmC5U.mft (raw, json)
Hash identifier: qA0IzDLXVja+6NeVASsTygoDMBx/vl06Dbs8NQM57ds=
Subject key identifier: 90:74:89:60:42:FE:DF:43:BC:64:4A:35:46:EB:11:90:A1:3D:4C:F0
Authority key identifier: D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
Certificate issuer: /CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Certificate serial: 01967679C2296BBB0979E8E64EF8E3A61F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
Manifest number: 0C5D
Signing time: Sun 27 Apr 2025 09:00:12 +0000
Manifest this update: Sun 27 Apr 2025 09:00:12 +0000
Manifest next update: Mon 28 Apr 2025 09:00:12 +0000
Files and hashes: 1: 0uQqWD-iUbQyz8HcqL00HVBmC5U.crl (hash: XgWXJBtdFz/ZXe4hZG4SPkGeHqHp9KWnGlN7d5VdStY=)
2: 30clEHSQ2FtWcxS6WRrlfziweF0.roa (hash: kMEVQBcSv51miHKtL16mTfHOOekvOtrPK9PKsU+A9fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:c2:29:6b:bb:09:79:e8:e6:4e:f8:e3:a6:1f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Validity
Not Before: Apr 27 09:00:12 2025 GMT
Not After : Apr 28 09:00:12 2025 GMT
Subject: CN=9074896042fedf43bc644a3546eb1190a13d4cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bb:57:4e:a8:c7:39:1a:c2:5c:8d:b6:f1:07:
dc:85:52:eb:3b:7d:51:07:3a:35:4c:21:a1:01:8c:
62:46:9d:55:b8:90:90:8d:82:f3:b3:8c:6e:71:d7:
aa:ba:f3:1c:08:ba:a9:a0:ee:35:7e:a7:ea:9e:5c:
7b:44:60:14:24:4d:85:ae:e1:92:58:ea:29:f4:81:
1d:c8:08:aa:2f:10:12:35:ca:d4:c6:33:25:a8:80:
83:73:72:33:11:6a:c9:c3:4d:9d:78:51:e5:39:8e:
53:73:c7:1b:76:20:9c:57:72:f0:b5:54:3a:76:89:
91:01:85:ce:54:39:4d:76:a4:59:f0:ae:4e:0c:96:
6e:31:81:30:0f:5b:57:8e:75:7c:26:17:42:5f:e1:
2a:d8:a2:bb:85:ba:63:06:06:5c:2f:8b:76:ff:ec:
44:fa:2c:16:59:68:e8:22:18:e5:a3:c9:f1:ec:b8:
d5:36:4f:b5:70:da:e5:b6:f6:a6:00:96:5b:bf:f8:
d9:d4:fa:a8:26:17:53:76:67:fd:bf:29:ef:7d:cc:
77:64:d5:12:87:7b:0c:48:e5:0c:e0:7c:f3:b4:92:
6e:d5:2a:67:db:67:2e:2e:7d:86:13:6b:3d:6d:db:
a9:b6:61:7e:0c:55:20:2f:f7:57:9e:b0:ca:cd:58:
bd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:74:89:60:42:FE:DF:43:BC:64:4A:35:46:EB:11:90:A1:3D:4C:F0
X509v3 Authority Key Identifier:
keyid:D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7b:57:52:dc:8c:de:6c:17:c0:9c:45:cc:f3:30:23:54:59:
45:bc:a1:6d:4a:63:a8:04:e5:e0:34:66:ce:95:ea:21:cd:7f:
69:d8:d6:e7:5b:79:9e:c4:a4:1f:25:65:b3:05:a7:32:48:a2:
cd:76:93:56:6a:19:7e:8e:eb:50:5c:a4:a8:60:c3:e7:5b:f2:
3c:ad:d1:7c:93:1c:f9:42:67:72:50:39:ab:52:d8:79:4c:bd:
64:a2:58:7f:45:29:28:0f:cb:35:64:5a:7a:f3:96:3e:c3:4c:
06:28:22:a0:96:20:d4:f8:97:dc:27:f1:a5:84:48:ee:eb:b5:
ce:41:85:93:4f:39:75:72:e1:0d:3a:2b:0a:7d:7b:af:c7:b2:
bb:17:6d:d1:d7:d6:4c:9c:82:0b:95:ee:fa:55:42:a1:b9:2a:
d0:2f:73:20:77:30:a7:83:b5:75:03:1b:69:a7:c5:6b:2f:77:
e1:fe:89:28:22:22:2e:22:3e:de:a2:ed:8a:43:75:66:94:2b:
2c:25:a0:f8:34:b9:b4:3e:a7:56:84:f6:52:f3:0f:86:b3:44:
4e:b7:05:57:a7:43:3f:0a:87:9a:6f:39:38:eb:2e:cb:be:8a:
cf:60:32:6d:f4:e1:04:79:5d:54:bc:be:b1:ad:a4:91:5e:d3:
41:b8:7b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:18:22 2025 by rpki-client