Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier: rdztt70fq/tJVeM6aOAB8Qzj0NJd9TZ4po900tQD+fk=
Subject key identifier: FB:8C:93:CF:F1:9C:73:2F:02:4F:03:58:14:50:7D:D7:09:71:8B:39
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial: 019673AFEB8C4A070AF9CB5D8B088327AE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number: 0B8D
Signing time: Sat 26 Apr 2025 20:00:31 +0000
Manifest this update: Sat 26 Apr 2025 20:00:31 +0000
Manifest next update: Sun 27 Apr 2025 20:00:31 +0000
Files and hashes: 1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: AZqGUgAWkkxN5icf3JtnzyV+G29hpW64RxL7/4XUGuM=)
2: 1-Mnf3JnGm30D3TVdL8D8i-JJTg.roa (hash: FQArZOtG/iI5+2OZ+rGhEkabMbeYZiFVJ69aFAVvKUM=)
3: ViACi2znHcxjvEoTWJabRySlSug.roa (hash: /lKDXYbMBEGiN9zYRBMEKiyvRO0eOc45ePzpVSUQyuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:af:eb:8c:4a:07:0a:f9:cb:5d:8b:08:83:27:ae:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Validity
Not Before: Apr 26 20:00:31 2025 GMT
Not After : Apr 27 20:00:31 2025 GMT
Subject: CN=fb8c93cff19c732f024f035814507dd709718b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d1:cb:eb:ea:3b:4a:2e:2d:d7:0f:02:3a:88:
8e:e1:04:00:f1:10:5a:ba:54:7f:01:ca:df:15:0b:
b9:83:4f:d6:7c:f7:5f:b2:f0:c6:35:85:89:df:e0:
17:bf:6b:97:43:8b:9e:ba:70:27:d5:f8:5a:90:1e:
d4:e6:94:e6:a7:ff:63:63:9e:70:e6:4e:51:b2:25:
51:8b:e4:53:ad:23:d2:f6:f7:2d:e9:7d:c1:d7:50:
27:18:e2:99:59:da:b2:d8:21:fc:94:ae:42:0a:fb:
f6:3e:68:d5:ee:35:a1:15:ec:bd:9a:dc:45:44:5f:
96:b2:4e:f8:b6:78:af:21:a8:6f:99:aa:2a:bd:0f:
be:b5:9e:b1:a5:f6:d8:50:b5:90:72:27:f4:da:42:
bb:9e:79:1f:a7:5b:e3:19:a1:16:73:47:44:a8:b7:
74:c3:ac:df:9c:5a:21:ab:a7:79:2e:94:42:35:0e:
3b:94:f9:77:e2:7d:57:09:6f:b8:d0:18:dc:45:6c:
ae:89:7e:93:39:28:31:52:73:1d:17:46:df:67:d7:
8e:ed:30:9b:ec:f8:ef:91:0c:37:2e:2a:9e:da:81:
3b:34:5c:cf:e8:5d:4e:f5:22:3e:ef:10:0b:3f:6f:
76:8e:ff:e3:10:48:46:41:0a:f8:01:19:a0:38:59:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8C:93:CF:F1:9C:73:2F:02:4F:03:58:14:50:7D:D7:09:71:8B:39
X509v3 Authority Key Identifier:
keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:11:f3:4a:31:33:2c:da:15:12:40:ac:14:fa:89:5c:66:7d:
52:70:2a:78:7e:b2:28:34:20:6e:48:4b:4b:71:ac:3c:40:97:
15:2d:1c:f9:30:cb:1c:66:32:82:fd:45:3c:84:95:bc:dc:9b:
f3:87:92:4f:f1:ad:21:9d:ee:cb:a9:6f:8c:e7:aa:ff:74:50:
8e:2f:a5:05:d8:3d:a5:a3:91:c5:69:45:9b:a1:f9:46:09:8d:
cb:44:9a:80:ea:19:ee:34:9d:a8:42:41:cb:d7:c0:63:a9:03:
ec:c3:51:40:ab:38:bd:f0:db:86:05:4d:2c:ae:45:9f:f9:65:
02:43:19:3a:9e:7a:70:5a:40:76:e6:d2:02:98:0a:83:2c:f1:
43:2e:be:1b:46:58:6e:7e:69:35:b1:8f:01:38:aa:10:07:4b:
43:c1:ca:7a:32:2d:98:6e:14:73:21:4a:f7:6b:ab:9c:f0:c8:
b1:bb:db:36:84:d8:a6:6e:5a:b7:4d:53:a7:cc:65:b4:69:03:
b1:1b:1d:cb:8e:7b:5c:fb:f0:e1:11:8d:03:e0:eb:81:d8:81:
9c:d0:f6:4a:91:c9:7e:60:3c:7f:0c:4c:50:83:65:20:a6:7e:
19:61:20:e7:db:25:6d:8e:dd:82:25:80:4e:dc:33:ec:b0:6b:
10:4d:76:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:49:57 2025 by rpki-client