Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
File: 0nuHf4mTQSab7GfG46CoiLp66Y0.mft (raw, json)
Hash identifier: A5kjvyDchaSGnD+LbpKHbQQ6KwjB1ijtV53vFrfx7NQ=
Subject key identifier: 5C:68:C3:24:ED:1B:5D:54:F1:B7:0B:90:C4:98:E7:93:DE:D9:B2:95
Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
Certificate issuer: /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Certificate serial: 019674F9AEF2AF1865FE202C00A2B15B0CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
Manifest number: 0913
Signing time: Sun 27 Apr 2025 02:00:42 +0000
Manifest this update: Sun 27 Apr 2025 02:00:42 +0000
Manifest next update: Mon 28 Apr 2025 02:00:42 +0000
Files and hashes: 1: 0nuHf4mTQSab7GfG46CoiLp66Y0.crl (hash: yxXnsS5LxfMnOdzZzHRlr2GgnmUfssPbbhL5Bk8hc/M=)
2: PdXLVimBA8zILWLashg1LUqBqm8.roa (hash: IrtzMysR6KSQR0SZiM1b2jUK5M57dKBFlK4qFH4B+Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:ae:f2:af:18:65:fe:20:2c:00:a2:b1:5b:0c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Validity
Not Before: Apr 27 02:00:42 2025 GMT
Not After : Apr 28 02:00:42 2025 GMT
Subject: CN=5c68c324ed1b5d54f1b70b90c498e793ded9b295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1d:e7:b8:37:a8:a8:f0:1a:f4:b4:a4:bf:81:
6e:84:b8:cb:82:67:00:f3:83:a9:27:e5:16:37:c9:
47:82:0f:fb:eb:2b:08:fc:4b:1a:a8:47:46:04:53:
b3:36:4c:7c:55:18:24:35:3e:34:b8:35:c4:b6:7f:
7f:05:d2:3b:d0:c5:a0:f7:c8:3c:b3:e8:17:8f:4a:
f0:2d:95:89:83:5e:1f:90:59:f1:30:47:e5:ac:ed:
22:1d:3d:ba:d2:ab:e4:35:0a:34:1f:19:d8:c8:bf:
d1:ab:be:83:93:de:1c:02:39:cc:1c:88:fb:f4:b3:
e9:1b:cf:70:28:10:4b:bd:94:55:88:b1:3a:33:33:
1d:b3:4a:8f:fc:9b:f5:0f:d5:5b:45:34:e8:23:87:
b8:d0:23:40:ff:4c:59:c1:70:d1:7f:fc:65:42:ab:
c2:ca:e4:1e:9d:69:20:06:81:9f:d9:3e:3a:9a:74:
df:69:b5:27:8a:d9:16:9e:49:3f:f5:8f:be:65:7f:
bc:f8:06:0e:9f:78:89:6d:b4:da:a3:74:f9:60:49:
03:0c:c8:8c:8a:2a:f4:a7:7c:74:af:b6:18:aa:80:
5f:04:e2:fe:47:97:05:e1:ea:f8:18:2b:70:b9:dd:
c9:b3:56:4f:15:26:81:62:dc:1e:21:35:b6:90:03:
e2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:68:C3:24:ED:1B:5D:54:F1:B7:0B:90:C4:98:E7:93:DE:D9:B2:95
X509v3 Authority Key Identifier:
keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e5:ce:35:36:f5:6a:d5:65:a9:b0:10:55:35:2f:e6:99:bc:
ab:ad:05:0b:96:fe:fa:67:da:95:74:40:5d:18:8c:0a:aa:5b:
b5:69:fb:a5:bf:72:c3:e2:12:5b:cf:80:8b:ae:0f:9b:8b:7d:
2b:61:e4:08:c7:39:89:4e:6d:c3:9d:16:3b:70:d1:c4:64:fa:
8d:fa:d1:ce:8b:72:60:c2:dd:6e:60:5e:a4:d4:6c:4a:71:2f:
f7:bc:93:57:4c:4c:ae:90:fa:00:57:be:20:c6:d3:80:0a:93:
f3:74:d5:9f:6b:ef:d8:c2:56:39:81:89:fb:a4:fa:f0:c1:64:
1c:5c:67:e7:d7:68:10:d3:0b:ba:3d:71:d7:a8:eb:32:be:b0:
f9:7b:68:3e:2d:3c:ca:b2:ed:05:a5:4d:20:5a:98:71:02:3e:
01:37:0c:94:39:4c:9b:cc:19:16:82:85:50:ea:70:73:2b:63:
c0:0e:f3:7c:a0:fb:9e:b1:f7:71:73:dd:6e:32:c9:42:3b:df:
12:85:32:4c:72:d3:48:58:71:5a:27:7d:8a:15:01:da:43:44:
ba:9e:c6:2d:da:05:7d:9b:10:af:4c:a3:3a:a0:f0:21:5c:0a:
af:c1:4c:b5:50:49:a7:24:1d:53:91:5c:d5:b2:6f:dc:09:95:
82:43:89:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:18:19 2025 by rpki-client