Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
File: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft (raw, json)
Hash identifier: kp8PkUMczTZUbdWxs3gIcrV2seTdqVF/UxWzKKW8Klk=
Subject key identifier: C1:12:0B:F5:1A:66:EE:C1:BE:CC:31:DB:31:71:5E:82:48:40:77:BC
Authority key identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
Certificate issuer: /CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Certificate serial: 019674FA17374EEE083BBBE64CF22DAC4838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
Manifest number: 0ED6
Signing time: Sun 27 Apr 2025 02:01:09 +0000
Manifest this update: Sun 27 Apr 2025 02:01:09 +0000
Manifest next update: Mon 28 Apr 2025 02:01:09 +0000
Files and hashes: 1: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl (hash: Vfr2U9rNeT8ar5rdZHLLeUKFbkl2aeVPKqyepS7X8Rs=)
2: Ut4z4tImR83ncGrwpXNPaCBz4dc.roa (hash: x3Tb8uXmHgRhBdCjWUywrl5EoWV8hOlCverEGcV2UXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:17:37:4e:ee:08:3b:bb:e6:4c:f2:2d:ac:48:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Validity
Not Before: Apr 27 02:01:09 2025 GMT
Not After : Apr 28 02:01:09 2025 GMT
Subject: CN=c1120bf51a66eec1becc31db31715e82484077bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5b:f5:b7:78:f4:78:70:6d:0d:c6:84:f9:7d:
e5:e9:96:46:71:cd:65:3a:bc:19:c0:96:ba:ce:27:
9c:69:2e:92:83:d0:97:29:a2:92:7c:c4:2b:d1:c7:
7e:1f:b4:3c:0f:e4:e1:fa:4d:1e:32:f7:e8:58:f6:
c5:2a:2f:89:a3:fe:50:aa:01:64:0a:4e:d8:6d:4a:
30:be:44:f0:3f:25:8f:70:19:76:19:29:ac:14:a2:
ee:d1:71:98:3e:ba:76:ac:df:81:6b:cd:76:51:74:
8c:ba:9f:60:be:5d:81:ea:eb:5e:63:6f:18:78:3b:
07:47:d9:da:9e:aa:50:a0:1a:ff:e1:0b:ed:63:88:
c6:cd:e1:9a:0c:ae:f1:bd:5f:ec:5a:c0:af:58:b5:
32:05:cb:08:33:53:6a:b2:bd:ec:a3:3c:c7:7f:48:
f3:e7:2a:5b:2c:97:9e:86:6a:3f:cf:cf:a5:d7:5c:
1f:53:5e:75:eb:ff:7a:33:02:af:67:aa:2d:a7:f1:
90:3f:76:d1:f3:d4:2b:64:ed:23:54:06:4c:b9:da:
89:e3:cb:ca:ac:bb:34:5e:b8:8d:05:62:c6:80:e3:
a7:ff:4c:27:00:e0:45:16:6f:26:80:a8:01:cc:94:
9b:40:ef:79:81:77:ce:5d:14:02:c0:bf:b0:c3:f0:
ba:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:12:0B:F5:1A:66:EE:C1:BE:CC:31:DB:31:71:5E:82:48:40:77:BC
X509v3 Authority Key Identifier:
keyid:D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:67:3b:7a:24:13:66:6e:17:27:19:d6:8f:7e:55:74:e9:39:
66:1e:7b:ff:a0:5b:a9:e6:14:f5:f4:6d:3c:7c:af:64:c4:1e:
d8:17:8f:e6:a6:01:34:97:93:1a:5e:02:5c:07:e6:15:14:7f:
d4:c9:5b:b2:c6:7f:ff:6a:6d:92:c2:dd:f4:ea:a3:8d:ad:09:
ca:4c:b6:f2:1a:62:b4:5d:1f:fa:fc:de:1b:f7:dd:a1:fe:85:
b2:2c:86:12:d3:8d:ac:95:96:6a:78:79:a3:c3:28:f7:5f:9c:
1c:8a:2b:48:7a:4e:43:7a:fe:5d:69:f2:dd:ef:5d:68:19:9e:
bf:92:ae:1d:0d:c9:9b:be:fc:bb:5a:51:f9:aa:0f:ea:0c:a7:
46:6d:91:05:df:96:55:ba:ae:9f:f4:5f:30:64:08:62:88:a8:
aa:5c:aa:c8:cd:6b:d5:59:db:38:b3:a0:ce:3d:f7:b3:b4:cc:
5f:24:bc:db:41:f0:21:b6:b9:0e:82:c0:55:82:e0:ec:da:78:
25:1f:35:b0:61:86:f9:08:4c:e5:d0:f5:32:0b:8b:51:ed:df:
c9:eb:cc:04:87:69:78:e0:e9:24:d7:25:fa:51:87:a6:7b:72:
d2:31:02:6c:03:6a:92:b4:04:7a:62:4e:7d:39:42:86:ae:1e:
0b:c6:b9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:54 2025 by rpki-client