Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: BKu/BOCNchtCKgqt7oQ7AqKWG6BkHpLB9/xdyuESVxk=
Subject key identifier: 19:B5:00:A5:D9:E4:87:1F:14:E0:64:DA:BD:F1:61:5E:18:71:A6:AC
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 0196594B55AE0D773A818BD54844F2DE79B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 0260
Signing time: Mon 21 Apr 2025 17:00:31 +0000
Manifest this update: Mon 21 Apr 2025 17:00:31 +0000
Manifest next update: Tue 22 Apr 2025 17:00:31 +0000
Files and hashes: 1: fwI8WQwy5fbXMlIKzIdcXaYEMU0.roa (hash: bPDJhxbWV/nawvua5orm+AkfyQvA9xpKaA3uAdqYMPA=)
2: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: N1eOeeR/0mjSYJP5znoY0YnGd4DN6RBJBnMGsyh2amQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:55:ae:0d:77:3a:81:8b:d5:48:44:f2:de:79:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Apr 21 17:00:31 2025 GMT
Not After : Apr 22 17:00:31 2025 GMT
Subject: CN=19b500a5d9e4871f14e064dabdf1615e1871a6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:58:49:c6:6d:70:8a:18:c5:38:32:84:ba:b6:
9b:fb:05:b1:09:16:b3:65:77:e9:41:b9:41:e9:23:
68:e4:8b:6f:8c:a7:74:99:e3:80:5d:65:5a:13:4c:
78:46:6c:c6:09:53:8b:12:7c:75:ae:3d:5b:e4:6e:
b7:11:97:a2:53:84:f5:b1:49:0e:33:c5:72:0d:57:
b2:00:b1:8a:d9:fd:5b:5e:21:d3:2a:1f:1d:8d:2f:
f6:90:22:8e:1a:47:f2:b9:ba:64:e8:a4:8a:03:7b:
38:97:77:5c:4e:01:44:54:3c:0b:e8:49:c5:8a:07:
b5:97:c3:36:91:17:aa:c0:2a:cb:1e:a0:41:2f:27:
e4:87:78:02:99:a0:cb:68:f5:65:6c:6e:d3:a4:f3:
ad:07:d2:4c:aa:2c:a8:78:6c:08:d1:e2:ae:c2:26:
d4:5b:57:00:42:b5:42:46:0c:ca:ed:00:29:3b:9a:
26:5b:bc:2a:7e:9d:d7:b0:03:54:6b:0b:f4:38:90:
64:71:5d:25:bf:78:ef:0f:54:0d:cc:b5:02:1f:7f:
36:ba:2e:91:8d:ac:e6:61:6d:0e:19:af:a9:52:ad:
c3:bb:91:b2:36:02:ef:23:49:74:55:a7:a6:dc:38:
3e:3b:2e:e1:ae:8f:26:77:6c:21:bc:84:20:60:27:
40:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B5:00:A5:D9:E4:87:1F:14:E0:64:DA:BD:F1:61:5E:18:71:A6:AC
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:b9:47:9d:2c:cc:76:11:6c:18:e8:3f:24:70:03:47:0c:f4:
ae:71:13:56:49:31:6e:fc:e4:9f:24:9e:a6:22:81:5a:82:6b:
db:b6:50:4b:7f:66:5e:fd:d6:8b:f4:93:f8:a9:77:e0:f0:35:
db:4d:7f:58:fd:3a:25:da:f0:89:ea:2e:12:44:5c:09:fb:60:
ea:2e:6b:24:9c:47:d3:7a:a0:cb:6f:09:bc:f4:09:48:01:5e:
ad:c8:a2:dd:03:13:a2:1b:10:ec:2c:ac:47:1b:74:56:a0:4a:
3a:aa:b5:9a:eb:57:12:72:95:0f:00:85:51:c9:43:95:a2:e5:
3f:94:9c:0a:f1:38:9a:bc:35:25:52:79:ca:8c:99:5e:e2:df:
f0:2e:ae:31:36:70:f4:3e:5c:0d:f4:d0:70:ee:ac:c0:36:27:
4e:bb:cc:05:81:3f:7e:8a:4f:e4:22:fa:d5:ef:e6:42:c6:59:
fe:f3:cb:4d:c5:22:e7:5f:d2:7e:90:53:b4:3c:86:d4:49:40:
ca:66:ff:01:d0:30:6e:9c:b3:a1:57:27:48:c2:f3:4b:33:42:
16:df:e6:93:ad:b1:03:8e:14:e9:3e:e2:39:af:09:39:65:57:
ca:f1:53:d0:9b:f8:02:69:c3:ca:91:45:00:d5:94:ed:0e:cc:
35:32:95:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:00 2025 by rpki-client