Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
File: 0Mo8Cxlv3gunTBSHvcucX6BTZks.mft (raw, json)
Hash identifier: 53KPHJHkrYKK4oOfRx21pYtbWDZBqpTMxO7PC4TO9Vg=
Subject key identifier: 4D:FA:E9:9A:50:4E:64:D6:11:5C:F5:5C:1D:9A:64:56:5E:2D:3E:A7
Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
Certificate issuer: /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Certificate serial: 019683C7887DC58BDB54730B7A3E096ACA3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 23:00:13 +0000
Manifest this update: Tue 29 Apr 2025 23:00:13 +0000
Manifest next update: Wed 30 Apr 2025 23:00:13 +0000
Files and hashes: 1: 0Mo8Cxlv3gunTBSHvcucX6BTZks.crl (hash: Z1LreSV1fQlk+xJGYELznnKGR341kYswOMhQHp1/jyY=)
2: 5Iq99HGOQym0RGozEyZTnwgi5-c.roa (hash: 81JX76zEEyAwuma2A2j1xpYjvTQiYo/8wBvDbJx61DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:88:7d:c5:8b:db:54:73:0b:7a:3e:09:6a:ca:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Validity
Not Before: Apr 29 23:00:13 2025 GMT
Not After : Apr 30 23:00:13 2025 GMT
Subject: CN=4dfae99a504e64d6115cf55c1d9a64565e2d3ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:ed:e3:53:6c:30:a9:70:ac:7f:40:5e:2c:
16:76:9b:69:a4:e3:a6:93:17:d0:a0:cd:d0:52:74:
8b:59:2f:d3:a7:50:6d:f5:08:f5:08:31:37:8b:ee:
fb:36:bb:74:e7:85:85:84:80:ca:b3:7f:b7:0c:6a:
af:0f:78:a5:28:ab:57:c4:75:77:f5:87:1a:af:6e:
c2:19:05:c1:33:d8:18:5a:24:be:23:be:34:09:07:
60:84:39:e3:e0:73:b5:df:f4:de:59:9d:58:32:55:
6e:d2:34:37:6a:4a:ba:0f:cf:30:50:d6:41:bb:8d:
b8:08:64:9f:47:b9:bf:36:bf:12:dc:16:46:04:72:
23:42:9e:da:73:b4:7a:fb:64:94:90:4d:8f:a2:6c:
a2:8a:6e:02:7e:fa:cf:8f:96:53:95:a0:5d:d1:f0:
2e:11:9f:89:56:95:f7:4e:af:7a:e7:27:83:e9:9d:
34:78:8f:2c:34:21:5a:da:4b:b4:c3:a1:27:f4:99:
52:62:16:88:0c:9a:20:95:82:ca:11:80:96:3b:f0:
28:59:49:a6:72:8f:26:98:58:77:a1:01:00:68:9b:
24:40:3f:1f:3a:3e:df:d2:7e:ad:1c:b0:99:21:1f:
c4:d7:8e:e6:ec:ab:da:78:02:0a:72:53:48:08:b5:
7a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FA:E9:9A:50:4E:64:D6:11:5C:F5:5C:1D:9A:64:56:5E:2D:3E:A7
X509v3 Authority Key Identifier:
keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:95:29:36:f5:56:08:7e:21:62:2f:a8:13:1d:7e:b0:79:89:
bd:08:bd:c0:d8:25:f0:6a:25:6b:68:b1:97:e7:5a:51:e9:37:
e9:11:81:c8:51:9f:e0:7f:77:09:a7:cc:15:68:c4:aa:51:54:
47:a4:60:b5:f2:35:67:ba:41:24:d3:96:21:26:5b:88:92:b0:
75:6d:eb:a7:f8:da:d3:74:c5:a5:4c:84:9b:62:db:d3:7a:c4:
0b:bd:ba:7c:5d:07:e8:77:c6:c5:26:22:f4:50:5b:66:54:08:
e3:ab:29:52:60:f3:c9:13:48:8e:e0:73:35:d9:ca:84:c5:03:
cc:94:62:75:08:a9:60:42:f1:22:df:59:df:00:76:7d:c2:46:
1c:09:32:d1:6b:82:9b:fa:28:5d:ba:c0:46:95:4e:fd:8e:8b:
7a:42:a1:33:ff:d1:30:13:bb:db:5e:cb:50:3f:db:3b:f6:d8:
77:f8:9c:1f:dd:20:6a:5c:ee:78:e5:f1:ac:d9:4d:28:93:03:
a7:cb:ac:a7:d9:a1:bb:35:b2:44:db:08:aa:b5:76:27:87:9e:
0d:51:82:50:36:1b:47:6a:56:81:e8:f6:09:26:8e:28:c9:c2:
f0:cc:59:fe:e3:f3:e3:f9:89:69:d7:29:3c:a1:8c:fd:63:c8:
7c:84:4a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:50:11 2025 by rpki-client