Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft
File: R8VBw62lOmIHxADI-fOkhurrubA.mft (raw, json)
Hash identifier: J64KFLvlvCrsPZZ+EL0K0j3Ri61RjbDb2AzuK5ta5qo=
Subject key identifier: C0:37:21:F8:23:3C:AA:8D:8F:85:1E:BD:03:EA:46:0B:B4:99:EF:91
Authority key identifier: 47:C5:41:C3:AD:A5:3A:62:07:C4:00:C8:F9:F3:A4:86:EA:EB:B9:B0
Certificate issuer: /CN=47c541c3ada53a6207c400c8f9f3a486eaebb9b0
Certificate serial: 019687DC0F918B20618D156A5ABDA46653A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8VBw62lOmIHxADI-fOkhurrubA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft
Manifest number: 01B2
Signing time: Wed 30 Apr 2025 18:01:08 +0000
Manifest this update: Wed 30 Apr 2025 18:01:08 +0000
Manifest next update: Thu 01 May 2025 18:01:08 +0000
Files and hashes: 1: R8VBw62lOmIHxADI-fOkhurrubA.crl (hash: jL5UaRvlsMqPW8GuJ8LYwPah+szT0nXIe+Kg3N0Ofic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8VBw62lOmIHxADI-fOkhurrubA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:dc:0f:91:8b:20:61:8d:15:6a:5a:bd:a4:66:53:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c541c3ada53a6207c400c8f9f3a486eaebb9b0
Validity
Not Before: Apr 30 18:01:08 2025 GMT
Not After : May 1 18:01:08 2025 GMT
Subject: CN=c03721f8233caa8d8f851ebd03ea460bb499ef91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dc:59:f0:02:e3:4f:55:14:df:39:a8:16:d2:
ed:14:3f:07:12:67:76:9c:18:1d:14:6f:7c:60:0c:
f2:f7:98:0f:59:12:86:db:af:49:ff:9b:b1:c3:2a:
11:00:c1:52:55:a2:79:e9:b4:0a:74:ce:db:7e:0d:
29:2d:cd:d8:47:f0:c8:4c:47:17:ce:98:25:6d:d8:
79:fe:a8:aa:39:5a:03:17:66:2b:27:0f:7b:01:4a:
39:3d:35:9a:11:be:d3:bb:a6:fd:db:a6:57:53:91:
53:ac:c8:70:22:91:d8:43:0c:ce:1c:e4:63:f1:2a:
43:f7:c5:12:51:27:99:9b:ca:79:c7:b6:28:8b:7d:
1e:e6:94:29:fa:8d:83:76:d3:0f:f8:b7:74:68:22:
11:e5:56:05:df:ca:a0:85:d7:24:0a:62:d6:5e:4a:
27:9a:24:69:97:0a:1c:34:31:e8:94:86:d7:fa:68:
dc:08:f0:5e:48:49:30:68:05:a0:07:08:4f:97:48:
79:9f:6c:5b:cc:74:b4:78:81:48:67:aa:6a:10:63:
e3:65:11:ab:0e:b8:3f:42:3f:b8:cb:32:e7:0e:2d:
e5:a0:05:88:3e:1e:79:60:f2:ac:c7:3e:21:21:3c:
9f:9b:ff:5c:96:20:78:eb:85:45:48:f9:70:1e:d1:
98:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:37:21:F8:23:3C:AA:8D:8F:85:1E:BD:03:EA:46:0B:B4:99:EF:91
X509v3 Authority Key Identifier:
keyid:47:C5:41:C3:AD:A5:3A:62:07:C4:00:C8:F9:F3:A4:86:EA:EB:B9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8VBw62lOmIHxADI-fOkhurrubA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:83:ea:76:c6:ba:27:c7:19:97:e9:10:c0:b9:c4:04:36:19:
57:6e:ed:2b:53:25:f3:1a:82:5e:e5:e4:44:08:9e:f5:a0:2c:
ef:5d:89:cf:d0:dc:f5:9f:38:6b:6c:ee:c7:73:ec:43:04:39:
0a:4c:0e:2b:fa:36:c0:a7:30:7e:12:88:68:dd:0e:39:e2:46:
c8:d4:93:67:f0:c4:96:69:6b:1d:3b:79:05:2e:33:de:94:f1:
bc:cb:72:f9:c7:30:10:95:d9:3e:26:de:35:40:db:0f:c6:5c:
c8:74:28:d6:43:26:d9:df:db:2e:77:92:75:e9:03:1d:0a:aa:
73:2c:8d:e9:c5:21:de:3e:bf:38:f6:e6:57:cd:e0:c0:eb:ed:
02:89:05:82:b7:be:be:4f:e2:8a:98:70:0c:33:37:ed:8e:c8:
d6:c6:0d:07:aa:2b:54:31:c1:17:7d:fa:44:ae:91:45:d0:84:
9b:dd:63:83:cc:68:a2:c2:1a:f7:1b:0b:4e:dd:c8:00:bd:05:
2b:bb:30:3e:3a:e7:48:45:1e:01:c3:b4:de:44:b0:ef:d3:9d:
ac:8e:55:38:bb:4f:67:56:91:f1:44:57:7b:50:38:4c:2b:ed:
84:44:5b:5a:29:d9:a4:5d:26:04:bd:88:87:0a:61:53:fe:ba:
23:78:94:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:26:30 2025 by rpki-client