Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json)
Hash identifier: D1EOguIa6drOuaTPfQ5kICNFGrzWsPOuWt67DxOQmB8=
Subject key identifier: 90:A6:32:6B:EB:57:34:35:F5:D2:F8:48:41:19:9E:93:04:5B:0A:FA
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial: 019674C2DA0BF68270830AF5475B6D05C5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
Manifest number: 10C4
Signing time: Sun 27 Apr 2025 01:00:48 +0000
Manifest this update: Sun 27 Apr 2025 01:00:48 +0000
Manifest next update: Mon 28 Apr 2025 01:00:48 +0000
Files and hashes: 1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: FgbF/S0ZX1Mz1jJXvu3FEsEbj5qPfF3TbNCFKysBIJM=)
2: O7dVmdulXoSGFdWUdpvv3bkJxU8.roa (hash: hmlWALQMbQbIcNvaSImT+aYBz0m3Sm9TMeYp/ubqBkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:da:0b:f6:82:70:83:0a:f5:47:5b:6d:05:c5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Validity
Not Before: Apr 27 01:00:48 2025 GMT
Not After : Apr 28 01:00:48 2025 GMT
Subject: CN=90a6326beb573435f5d2f84841199e93045b0afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:73:25:e3:42:c4:91:1f:a2:7a:7a:4c:f0:
bd:8e:c2:83:d0:79:e7:b1:60:2d:fb:79:8c:3b:08:
32:6b:1a:17:5f:ba:f5:73:af:eb:20:13:9e:d5:19:
32:58:e7:9a:e9:35:6d:f9:04:69:e9:84:f2:eb:a6:
12:4a:6a:31:6b:c6:15:98:6e:cc:b5:df:f1:f0:a1:
93:74:d6:f7:32:b5:ad:7b:a2:95:5b:8a:07:d3:f5:
90:f9:28:af:d4:4e:33:1f:77:58:99:38:1a:ee:bd:
4d:44:50:c3:a0:a8:3c:35:b3:68:cf:b7:61:0c:a6:
55:70:2c:36:e8:52:59:bd:32:a9:0a:99:90:db:3f:
cf:39:46:20:0e:7b:c5:b3:60:ba:e2:67:c3:7a:7c:
81:43:1b:20:65:e5:69:54:72:3a:33:39:a2:fd:4e:
06:53:10:a0:39:e8:80:02:4f:a4:2a:44:ab:1a:51:
72:1b:1d:b9:e9:03:e1:5d:7e:b0:54:b8:46:15:d4:
1c:8a:03:4e:16:f2:e0:62:e5:65:d8:ab:cb:87:4c:
c0:ab:5b:bc:17:f1:33:af:13:59:df:55:2a:17:f6:
b7:4f:4d:77:75:69:c5:3b:ce:1f:67:3b:36:0e:35:
b9:6a:31:9a:c6:27:2a:66:90:55:43:84:42:b3:ce:
6f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A6:32:6B:EB:57:34:35:F5:D2:F8:48:41:19:9E:93:04:5B:0A:FA
X509v3 Authority Key Identifier:
keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:92:4c:91:0b:91:8f:ec:c8:31:18:fc:14:04:36:ad:93:2e:
5c:e5:c6:b4:27:2b:cf:a3:16:31:e5:b0:62:0d:c3:24:91:64:
8d:13:17:24:bd:a0:9e:2d:41:36:a6:21:ea:d1:77:8b:e2:4d:
ca:b3:31:6e:2d:65:2d:38:d2:9f:08:60:58:ee:8b:22:d7:ac:
27:74:b4:7a:6d:f4:ae:0c:42:2b:8f:9f:64:a1:43:c3:89:cf:
42:34:b3:38:d5:1f:51:56:33:e3:d2:3a:d8:f9:89:df:1b:7e:
75:92:87:cc:b3:b2:3c:4a:28:86:92:25:92:eb:5d:a0:20:13:
21:4e:e1:ae:3f:57:0f:0f:30:a9:0b:13:b4:34:3d:c9:cd:f5:
26:b2:8b:fa:99:c1:51:99:ec:ad:e7:91:ef:de:60:9d:72:f4:
8a:5e:06:be:6b:13:8f:f5:8d:75:e3:6a:cc:f8:5c:99:00:20:
ff:9a:b9:c6:39:58:cc:16:13:87:a5:c5:81:f7:9b:b2:92:04:
fa:86:8f:34:e3:77:e5:ab:7b:ab:5e:79:1f:6f:7f:8e:a0:42:
05:75:2e:74:24:c9:06:cf:a9:c6:5b:11:fc:a8:ce:02:c1:17:
4b:be:a8:6f:c0:ed:72:38:f1:cb:e3:1e:40:26:d6:18:bd:46:
ba:60:4b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:31 2025 by rpki-client