Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
File: U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json)
Hash identifier: FverXseor65jFKXTo+38jPqOBg8mqSH21U9RDGGP35s=
Subject key identifier: 29:0E:FF:CA:CA:AE:A2:FB:5F:1C:80:33:BB:89:4D:E2:44:EB:7E:18
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Certificate serial: 0196767A3B7B3FD27A282786C24C1CF10B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
Manifest number: 0F0C
Signing time: Sun 27 Apr 2025 09:00:44 +0000
Manifest this update: Sun 27 Apr 2025 09:00:44 +0000
Manifest next update: Mon 28 Apr 2025 09:00:44 +0000
Files and hashes: 1: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: T/0ce9ewAB7zbCc1iH2mu3xcaQeFrcFE4zCxSK0CREw=)
2: XOqVL4Qlgd2qj_R2o35sDNSHJkw.roa (hash: Vhjo7o5u3C511AphXSnY5EBALpIpM0HGnrEGYenlVkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:3b:7b:3f:d2:7a:28:27:86:c2:4c:1c:f1:0b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Validity
Not Before: Apr 27 09:00:44 2025 GMT
Not After : Apr 28 09:00:44 2025 GMT
Subject: CN=290effcacaaea2fb5f1c8033bb894de244eb7e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:ba:0d:2e:cd:9a:c9:35:2f:9e:0e:13:dc:
ff:83:22:20:34:db:17:33:e0:a7:4b:e2:09:e6:91:
5b:6d:1c:52:03:55:17:77:4d:b7:b4:a1:33:40:30:
51:48:e5:bc:a3:86:80:ff:29:a9:a9:76:f1:5f:31:
13:8b:a3:35:d6:aa:e1:56:e9:23:58:d4:69:10:bd:
59:c2:21:cb:3c:21:23:2b:28:9c:f0:e9:40:3d:db:
c6:41:da:c7:9f:1b:63:ef:a1:04:fe:1f:d8:e2:83:
c3:c5:b3:77:09:39:a5:46:ec:7f:6c:b2:64:65:6f:
97:50:98:66:39:39:8a:ac:43:a3:89:8d:7c:b0:ef:
95:65:dd:59:92:7a:13:63:8b:6e:ff:da:49:26:ab:
85:35:e8:f2:42:5f:ad:95:c1:e5:0b:e7:9f:9a:3c:
e3:f4:2c:e6:71:19:bf:8e:b1:15:52:ca:1c:fc:d3:
fc:64:b0:14:b7:ad:fc:61:d5:67:ec:34:9c:12:2b:
a8:c8:c4:84:88:cd:8d:91:d9:dd:a3:04:1f:97:3d:
50:9c:0b:04:49:da:ec:aa:92:27:af:62:11:1e:10:
f3:7c:9e:f7:76:d6:d1:04:e4:2a:f8:7a:a3:03:b4:
e1:ea:6a:30:7e:6a:59:94:a1:56:a9:b5:35:88:ad:
d8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0E:FF:CA:CA:AE:A2:FB:5F:1C:80:33:BB:89:4D:E2:44:EB:7E:18
X509v3 Authority Key Identifier:
keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a2:3b:a4:de:55:c8:58:27:16:0a:35:3d:8c:9f:2b:15:72:
92:ab:06:61:20:9f:e2:01:f8:a0:20:6e:0d:fd:38:6f:95:58:
60:26:1f:cc:be:7e:a4:f6:c5:71:10:6c:87:bc:70:89:a3:c5:
04:7d:53:22:80:e4:4e:b7:08:f1:2f:0f:9f:1e:31:91:53:fe:
ef:c1:aa:49:62:4c:4d:db:c1:a9:c4:f9:bc:cf:82:e2:33:8a:
c0:b2:d5:16:a4:8b:d7:b1:8c:ab:e0:d2:83:c9:cf:12:08:9b:
15:fe:dc:2a:e7:b2:8a:62:46:31:d4:19:f2:21:1e:aa:9f:cc:
a8:8e:89:4a:8b:47:65:8b:b3:a1:0c:c2:be:2a:24:c2:3f:c5:
a1:1e:23:b1:a0:65:6f:e1:6c:22:14:8e:1d:c6:17:58:22:b4:
2b:92:90:ca:f3:40:81:88:1d:32:92:f2:51:4b:d6:93:27:b5:
b8:e8:3e:39:1d:10:55:e1:ee:ba:6d:ac:1a:71:4d:11:ac:b9:
c9:db:be:8e:4c:3f:ee:ba:d7:68:da:4a:61:50:78:35:50:6f:
4d:0e:fb:96:de:41:74:e1:4a:a9:60:86:b9:2b:53:51:b9:0c:
07:8a:18:f2:2b:b3:71:84:ab:37:9c:8c:b8:4e:b7:2b:45:36:
7f:d8:c0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:57:56 2025 by rpki-client