Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
File: 87qQxx60ywFpyUhD5ccv13dQGQY.mft (raw, json)
Hash identifier: eWiY1tEeed5DE78Nmk2NGb4T9JKeSINJfuUOwij6kx8=
Subject key identifier: 04:66:88:3D:62:3D:AD:41:8F:D7:49:69:9A:25:6C:EF:3B:AC:8A:E2
Authority key identifier: F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
Certificate issuer: /CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Certificate serial: 01967ED88E5534B0DDA548EE84432D00008F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
Manifest number: 136B
Signing time: Tue 29 Apr 2025 00:00:43 +0000
Manifest this update: Tue 29 Apr 2025 00:00:43 +0000
Manifest next update: Wed 30 Apr 2025 00:00:43 +0000
Files and hashes: 1: 87qQxx60ywFpyUhD5ccv13dQGQY.crl (hash: 5H15QIOpwNJziGa1LmUOJ4mHclHLWGdSH6c+yLIG3wc=)
2: JysSz_R1K3TNaznJ02DbQNBve_s.roa (hash: BaOSaAFh8MSaQI0AxI9H+YSRs1439Nfg5CR//S5kRHM=)
3: cPSt1cBK1yUkGNEnPd-jB0H0f98.roa (hash: 6XTiW18fxhFDL+0aNweHaTDamcOXmMJdNCPIYbjuHV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:8e:55:34:b0:dd:a5:48:ee:84:43:2d:00:00:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Validity
Not Before: Apr 29 00:00:43 2025 GMT
Not After : Apr 30 00:00:43 2025 GMT
Subject: CN=0466883d623dad418fd749699a256cef3bac8ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:ca:cb:77:ed:ad:ca:d1:d9:80:35:99:dc:
ba:56:5a:52:64:39:ca:ce:cc:81:ee:96:4f:7d:60:
19:0d:3e:be:05:ca:44:bf:e9:e5:d7:1b:91:4f:b6:
f7:2f:89:05:11:46:aa:4f:59:1c:0a:72:2b:68:97:
0b:41:00:99:0f:6c:59:52:02:17:65:3a:79:dc:f6:
fd:33:55:9e:c7:86:fd:b3:12:b8:13:32:79:a6:35:
94:6d:41:93:fb:1c:33:af:be:0c:f7:19:98:83:44:
6f:8d:3d:d0:2f:96:2f:02:cc:a0:6a:22:41:44:6e:
21:a2:f1:c3:fc:27:be:e4:62:72:71:fd:5f:0a:36:
2c:f1:24:6e:a0:70:77:f6:cf:e0:10:bd:33:4e:2f:
5c:d2:eb:bb:3e:00:c6:96:5a:67:8d:45:06:e5:4a:
12:43:b3:cd:17:19:dd:e1:d9:dc:67:f5:d4:5a:bd:
65:f5:6d:95:f0:67:19:44:7c:96:75:01:44:7f:06:
3d:82:4f:b4:9a:b5:18:30:31:27:8a:5c:a8:8d:26:
f9:a6:47:84:c0:77:26:54:c3:9f:b8:bf:d6:f1:5f:
ca:43:b7:d0:36:7b:6c:7e:4a:4c:cc:66:7b:c9:01:
f0:2d:5f:62:ec:13:83:66:e0:fd:20:0e:c1:81:1a:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:66:88:3D:62:3D:AD:41:8F:D7:49:69:9A:25:6C:EF:3B:AC:8A:E2
X509v3 Authority Key Identifier:
keyid:F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:87:c5:4a:fa:88:67:39:a9:8a:5a:fe:11:db:61:f5:f9:51:
a4:48:30:fd:cd:1f:92:08:fc:80:63:4a:c0:db:34:14:18:2c:
ed:38:1a:f7:5e:5a:36:ce:23:e1:bb:91:d6:8f:df:92:d4:e7:
c0:d0:ac:50:10:da:92:23:94:6a:84:99:ec:f6:30:15:63:0d:
ff:63:84:6f:47:44:9f:69:66:88:86:ad:26:d0:ee:64:4c:2e:
0f:ef:cb:bf:b0:47:36:58:26:55:7f:eb:60:31:70:3f:5a:3c:
f7:aa:f9:d8:c1:78:8c:2d:64:3d:4c:87:cd:42:52:83:3c:23:
bf:a2:64:20:85:3b:ea:ff:80:5b:17:c8:c4:78:5c:f6:a0:11:
c0:c2:71:7c:21:53:92:6e:0c:d8:90:43:4a:18:b0:e5:a0:bb:
81:07:8e:b9:96:35:c3:fb:14:95:6b:6b:dd:bc:d4:29:2c:eb:
71:20:1a:91:d0:fa:d6:67:82:fc:f0:b5:1f:eb:e3:f9:cb:65:
99:58:c8:f3:9b:b1:3b:f4:ff:80:4e:96:76:65:4f:96:26:c7:
14:4a:9d:65:a2:dc:77:41:57:cd:b8:bd:05:ca:3b:96:7c:cb:
ba:12:5a:04:c9:8a:11:9b:92:95:7d:19:b9:aa:ce:99:16:dd:
06:30:5b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:14:54 2025 by rpki-client