
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft
File: __8PpR5pOdAdyqK7PV3KptAEPaI.mft (raw, json)
Hash identifier: kwul2aIRMsEdIbWY8dFlfhZh38W8TJYFb8rDfd0rmwU=
Subject key identifier: DB:15:D0:C1:02:DB:A5:75:A3:DE:13:CC:66:86:C7:A3:CA:3C:16:F3
Authority key identifier: FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2
Certificate issuer: /CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2
Certificate serial: 0196759E620EACDA8ACD4C0148459010505E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 05:00:36 +0000
Manifest this update: Sun 27 Apr 2025 05:00:36 +0000
Manifest next update: Mon 28 Apr 2025 05:00:36 +0000
Files and hashes: 1: __8PpR5pOdAdyqK7PV3KptAEPaI.crl (hash: o/ooIIib016+7DnHM+mG6WyGz1J7YyNaFoBTW5Xlcno=)
2: q2RHTYlkcDgCjrfVNvYYh8gtuZ0.roa (hash: rnMDx8HFmMRUD1wSEEKi54fuapDGJDZJ6EgL5LNncSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:62:0e:ac:da:8a:cd:4c:01:48:45:90:10:50:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2
Validity
Not Before: Apr 27 05:00:36 2025 GMT
Not After : Apr 28 05:00:36 2025 GMT
Subject: CN=db15d0c102dba575a3de13cc6686c7a3ca3c16f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:ce:a3:ee:f0:a1:5b:61:b0:15:91:e3:8b:
81:0c:1b:73:a2:fb:36:1f:5a:15:81:44:24:1e:f7:
6f:10:40:b4:a6:fe:49:18:b3:62:e6:ac:aa:67:3a:
77:78:fa:2b:8e:f6:ee:6c:84:5e:7e:96:aa:37:36:
39:46:3b:62:76:c2:25:70:da:74:42:6b:43:d7:50:
66:7a:58:bd:cd:c8:e7:19:3e:a9:1b:e6:77:dc:d0:
0f:42:b2:ad:d5:c9:82:c2:3c:56:fa:b1:6f:73:3e:
e8:a3:fe:c4:fd:ae:5c:16:52:d2:bd:b7:9a:94:0a:
24:7f:81:34:30:0f:09:6f:bd:af:f4:57:dc:3d:dc:
5c:41:2a:ff:db:f3:0d:ad:33:04:5f:bd:d1:12:b0:
0a:d4:74:e7:d1:08:82:7b:c7:d6:77:cc:47:94:ea:
af:f5:bd:08:85:33:4e:f9:f8:9d:b4:26:57:f1:aa:
46:72:2b:6c:90:31:68:35:01:53:7b:79:ec:10:4b:
d6:8d:f3:ab:ba:ac:da:48:48:91:38:e7:cd:0e:7e:
3e:f6:6c:50:90:8d:dd:dc:4e:59:b7:e6:56:98:7b:
fd:88:8c:4f:ea:52:50:a9:ea:78:4c:e5:1f:e1:1c:
76:28:c2:c9:df:b8:30:7d:f1:32:a3:40:2b:df:26:
80:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:15:D0:C1:02:DB:A5:75:A3:DE:13:CC:66:86:C7:A3:CA:3C:16:F3
X509v3 Authority Key Identifier:
keyid:FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0d:eb:95:70:7a:28:d6:31:a5:07:e4:6c:46:5b:2e:86:8f:
c1:af:c6:e7:33:f3:f9:39:e9:cc:6f:30:84:16:af:07:d3:57:
73:57:aa:4f:2b:68:16:0a:58:75:4d:c0:6b:cb:6e:63:e2:c6:
f4:41:c0:a0:80:6c:96:60:6f:80:48:9c:50:f0:de:88:c1:87:
2f:b4:cd:5c:cb:d3:2b:64:15:b3:0a:35:66:78:f9:a8:24:34:
b9:20:10:67:e8:84:d9:9e:a1:30:ad:88:38:a3:7b:5c:ef:56:
5d:db:6e:47:be:72:7c:9c:1d:a1:97:80:00:0d:3b:93:40:13:
e6:c6:3e:8e:53:eb:c8:1b:27:bb:c5:6f:96:56:47:fa:50:74:
f2:a5:24:5c:af:77:fd:05:9f:19:6a:07:36:1e:a6:d5:35:7a:
ec:b9:18:43:2f:6a:16:ed:04:44:14:d1:6d:92:ce:ed:b8:57:
fd:02:ef:55:90:4d:42:33:9d:e5:42:4c:ce:72:65:43:71:27:
bb:86:40:4d:b4:b9:57:17:7c:7f:e2:40:45:46:2f:ce:01:23:
91:6a:35:71:f7:d2:22:17:e0:43:45:78:17:1b:c7:ed:fe:51:
e2:fa:42:01:16:9d:16:a8:dc:fe:60:16:88:b5:fc:8c:a9:17:
a8:09:ef:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:11 2025 by rpki-client