Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier: Epx64argP+7jIxVH8S2XxBy5QV9VWr9DLSBordpm0Fk=
Subject key identifier: DA:27:58:3E:E4:8B:D6:89:07:4A:13:75:D3:E5:05:32:69:EF:D4:D2
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 0196771E98F7B4DD295706BC4708027491D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number: 0C8B
Signing time: Sun 27 Apr 2025 12:00:15 +0000
Manifest this update: Sun 27 Apr 2025 12:00:15 +0000
Manifest next update: Mon 28 Apr 2025 12:00:15 +0000
Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: bN+lfyeEk6PirtoWbXs6FCqDgEiT0lNON8dBkt/Cqf4=)
2: FC7m4zQkIo-WG8iUJPA7QdUwc2Q.roa (hash: qfDxcFq2nhIRONRYreU1JYZ6iv5WYCmTLK7iYYoio4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:98:f7:b4:dd:29:57:06:bc:47:08:02:74:91:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: Apr 27 12:00:15 2025 GMT
Not After : Apr 28 12:00:15 2025 GMT
Subject: CN=da27583ee48bd689074a1375d3e5053269efd4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d7:30:e0:a5:b6:85:17:a5:bd:9d:fd:2c:23:
39:6e:53:d2:c1:48:6a:a3:9e:74:26:30:b3:f7:b6:
cb:c5:ba:2d:1d:85:f8:5f:92:f1:7f:fe:03:52:01:
e5:6e:eb:79:40:57:84:98:77:a5:86:7c:bb:30:27:
3f:45:2d:84:53:58:f4:71:a2:7e:ab:ff:17:64:57:
52:82:70:67:fe:a5:45:ef:1c:32:60:b2:0f:24:81:
a7:26:40:74:75:a1:b1:99:4e:5e:e5:c1:00:af:32:
65:24:96:75:b1:62:d4:aa:f6:68:1d:88:5c:90:8d:
0c:93:28:c4:24:61:5c:07:08:f2:51:f7:6d:ec:7c:
a8:e3:59:88:e7:d2:dd:f2:0b:c2:a4:8a:f9:cd:21:
09:69:58:48:cc:89:49:9a:60:81:ec:3c:e9:09:4a:
43:76:04:6d:d6:e0:c8:4a:92:2a:e2:eb:61:5e:3a:
28:f4:a6:26:59:7b:5f:03:55:c2:58:44:48:ce:d6:
a1:5a:1d:51:0f:68:7f:dc:ef:42:e5:0a:46:37:ea:
f9:48:f9:a0:de:df:c9:d3:33:02:32:21:93:eb:34:
aa:02:1d:1e:7a:2c:62:87:b0:9f:b0:0d:15:d8:ee:
31:19:21:4c:30:73:6c:d3:d2:87:cb:2f:9a:ec:3b:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:27:58:3E:E4:8B:D6:89:07:4A:13:75:D3:E5:05:32:69:EF:D4:D2
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:53:3e:e3:88:93:20:47:ec:99:3e:02:7a:4a:7a:41:eb:e8:
5b:36:23:1d:0a:f0:2e:d6:26:fe:ed:3d:32:44:4c:77:3a:6d:
09:4e:36:ca:dc:75:a3:71:4c:d6:8d:a5:cc:aa:c2:55:61:0a:
27:fb:a1:cc:03:7f:d9:fd:02:bd:52:9d:18:67:65:f0:7c:67:
9c:0d:84:bc:6a:7d:a0:d9:2b:48:ad:f7:7b:a9:c4:13:b4:d3:
bc:7b:fe:30:d4:d2:a2:01:87:f3:ef:56:0f:42:c7:73:5b:88:
d4:c5:29:69:e9:27:3d:26:8e:a7:02:de:d0:c6:26:c4:38:46:
c4:c2:c4:2f:75:1b:f7:94:b0:3c:f0:5a:9f:d4:82:8f:72:82:
24:81:2f:4b:8a:c1:aa:f0:37:53:0b:48:22:6c:42:e3:65:b2:
d7:e2:1f:1b:77:76:97:1c:dd:34:8b:e6:93:98:1a:a1:3b:d8:
43:72:03:94:7e:19:f4:33:2d:c7:d6:90:bc:8f:64:35:ef:21:
10:c3:8f:62:43:79:1d:fa:7b:c4:cf:6c:00:27:40:38:61:9d:
76:93:30:0e:f9:f7:4f:c1:95:54:3f:fd:30:47:48:78:a7:d8:
7a:f2:43:8e:81:8d:42:f9:6f:f8:1c:cd:16:75:57:e3:2d:76:
fc:89:fc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:16:56 2025 by rpki-client