Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
File: 1-LGChfQu1nwR2Pg99IixD8h_F78.mft (raw, json)
Hash identifier: b+WrFNsZqY8K1fLbDLZ9Zrgl291yx8y+auMyR9tj7wc=
Subject key identifier: 72:F3:9F:13:D4:4E:A0:D2:35:81:FB:51:65:A7:65:32:2F:69:73:9E
Authority key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
Certificate issuer: /CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Certificate serial: 0196778D0EC7AADF95F7D546BD48A8A87587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
Manifest number: 0BF8
Signing time: Sun 27 Apr 2025 14:00:55 +0000
Manifest this update: Sun 27 Apr 2025 14:00:55 +0000
Manifest next update: Mon 28 Apr 2025 14:00:55 +0000
Files and hashes: 1: 1-LGChfQu1nwR2Pg99IixD8h_F78.crl (hash: LnSGjeJQ7GAebcucIxHEPUhJ5G4LLGFWKrNWPzuK4vY=)
2: 8GgRYajAB5wJTdepPxBFH5fs1YY.roa (hash: FwRicgJ95Y18KNWZKntvQQc8pJZC+p4jYsaJu9/cGKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8d:0e:c7:aa:df:95:f7:d5:46:bd:48:a8:a8:75:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Validity
Not Before: Apr 27 14:00:55 2025 GMT
Not After : Apr 28 14:00:55 2025 GMT
Subject: CN=72f39f13d44ea0d23581fb5165a765322f69739e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f8:23:b2:e5:9c:e6:6f:9a:42:3a:f4:b8:ad:
30:45:07:ac:d1:25:c1:17:75:8d:df:aa:11:94:3f:
f4:4a:40:df:4d:9a:aa:a0:e5:14:57:12:f9:9f:92:
75:12:22:46:6d:13:bb:e3:d4:b0:4a:f4:3c:91:0d:
0d:b8:2f:c8:92:7d:9e:79:e6:58:c9:3b:bd:9b:1a:
c2:37:ec:f9:67:c5:07:3f:a3:9f:0e:05:57:d4:04:
48:97:ca:ac:36:ad:6e:49:75:d5:b2:6e:0b:12:74:
2b:dc:5f:2d:90:01:c3:71:1e:b3:44:6a:9e:2c:c5:
d7:de:72:5a:3b:d7:33:fe:5f:0d:1c:dd:e1:3a:81:
9a:65:ae:de:1d:bf:17:2a:b2:77:65:c9:fa:38:0f:
63:81:0b:76:05:da:aa:4a:0e:f4:06:e4:87:46:68:
56:b3:ee:6c:64:7b:fb:18:9a:26:3c:fc:84:6f:f0:
96:d3:3b:bb:b3:7d:0f:13:34:c4:4c:96:a9:e8:57:
a9:0b:68:5b:94:f9:53:84:d3:42:63:d7:25:76:df:
9d:31:d9:34:d9:11:97:de:9b:c8:a4:ec:19:2b:04:
6a:ee:a0:53:cf:17:f3:ea:d2:97:53:8e:36:be:e0:
d0:bc:c2:4a:61:3b:96:18:61:c9:98:4d:76:6f:1c:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F3:9F:13:D4:4E:A0:D2:35:81:FB:51:65:A7:65:32:2F:69:73:9E
X509v3 Authority Key Identifier:
keyid:F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:27:3e:f6:62:ab:53:a5:2b:f2:59:5e:72:b5:83:e3:07:c0:
66:ef:97:d6:72:a1:38:9a:27:6c:ac:87:42:e7:d6:a4:f3:ba:
b5:c2:eb:fc:2f:f8:de:53:15:cf:5d:6d:19:c5:95:e3:78:e6:
26:04:30:29:80:8a:4a:5b:5d:08:96:81:ee:a2:1a:77:ef:c6:
0f:d1:61:ff:20:7b:de:e4:40:ac:3b:0a:f7:89:89:8d:14:9a:
4d:8c:b3:2f:dc:88:7a:19:7a:fc:30:34:02:50:fe:6b:b7:16:
e4:19:1b:53:2b:cc:a6:ec:2f:28:f9:90:17:a6:52:d8:9d:b1:
c6:c4:cc:13:9d:6d:fd:bc:91:63:bc:d8:92:5a:85:dc:f5:d4:
39:6b:25:1f:26:87:4b:18:1d:bc:b9:5f:ad:af:ce:52:4a:ed:
37:cd:6c:e2:0a:ff:33:59:d3:4d:f7:a3:89:3f:a0:b0:fd:d1:
99:1e:80:86:06:8f:8c:e7:e4:1d:ba:ac:3c:38:30:b8:1e:b1:
0b:84:60:bc:c6:07:9b:ad:de:67:e1:b8:a6:67:ab:b1:8f:7c:
0e:3f:2a:1b:43:dd:44:90:92:ba:7c:8e:d7:0e:04:b1:6e:16:
fc:61:33:d6:9a:6b:2a:e4:bd:02:8d:4f:5e:a6:89:da:2a:0e:
5c:7d:ff:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:38:15 2025 by rpki-client