Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
File: mfL0sCJG5gTiN_N5RaOCv62hJ38.mft (raw, json)
Hash identifier: t+/EU62vDzmKF4vmlhvGrEhzfDafO/+eNb4ZM3eaL3U=
Subject key identifier: 8E:33:56:2B:D8:50:61:49:B1:0D:55:84:5A:74:CD:E4:60:9F:6C:C1
Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
Certificate issuer: /CN=99f2f4b02246e604e237f37945a382bfada1277f
Certificate serial: 0196556EA6F3921A0A0A1118075C4F660306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
Manifest number: 05E8
Signing time: Sun 20 Apr 2025 23:00:37 +0000
Manifest this update: Sun 20 Apr 2025 23:00:37 +0000
Manifest next update: Mon 21 Apr 2025 23:00:37 +0000
Files and hashes: 1: mfL0sCJG5gTiN_N5RaOCv62hJ38.crl (hash: 4FoXsnTTO2cJZbmg59cu38oC/OXWDR3SanlQ4zPOSo4=)
2: tD16yJgx6FslawER1Evjktr90DU.roa (hash: IgaqAI1HCcxs2x01fN4KAw3fM/ZJo5SCnC5NuJ1Z+9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:a6:f3:92:1a:0a:0a:11:18:07:5c:4f:66:03:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f
Validity
Not Before: Apr 20 23:00:37 2025 GMT
Not After : Apr 21 23:00:37 2025 GMT
Subject: CN=8e33562bd8506149b10d55845a74cde4609f6cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f0:7c:46:a1:a0:48:6b:25:f4:da:ef:88:c8:
ad:3b:c8:06:b7:c8:e8:8c:01:2f:8f:ce:06:60:41:
93:f1:fe:7a:66:07:70:77:fc:18:f7:da:5c:ce:0a:
ee:d3:60:3e:d3:cf:3f:37:8a:82:bd:58:41:82:40:
f5:15:83:c6:d0:b5:9e:66:43:65:27:e2:09:72:20:
3f:3f:13:33:ed:f1:15:01:7c:4b:7f:57:1f:0c:9e:
81:0a:f6:18:23:73:83:54:7c:e6:38:eb:70:de:f8:
53:33:55:fa:13:e5:59:64:62:cd:4e:30:09:1e:18:
04:ce:1c:00:d3:33:f6:ce:0a:90:49:36:d1:35:d2:
b1:16:fd:91:af:56:fa:e7:a9:e8:b6:5b:a3:01:1e:
b4:7b:84:2d:60:08:39:ce:38:1f:50:53:de:78:86:
ce:a8:32:07:d0:9c:bd:66:98:a6:99:12:6a:d2:90:
27:4a:25:52:11:75:f5:88:ea:e5:59:5b:fd:eb:71:
66:33:ab:a1:28:5d:df:fc:9e:fc:49:08:5a:0e:69:
92:de:ca:ac:41:1b:9b:d3:33:50:8d:5e:32:4a:66:
6a:82:ca:c7:c6:91:b4:ab:fa:a4:30:99:b9:59:85:
41:15:d0:31:6d:9c:62:f4:22:a0:b2:56:25:21:2f:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:33:56:2B:D8:50:61:49:B1:0D:55:84:5A:74:CD:E4:60:9F:6C:C1
X509v3 Authority Key Identifier:
keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fe:b6:76:d6:d7:45:92:49:63:c1:dd:c7:a8:b4:aa:13:06:
6a:e8:c6:7c:94:6c:86:80:05:89:39:9b:5f:1f:a6:98:2f:73:
d5:05:7a:89:87:b1:f8:aa:0d:3c:cd:b5:ff:7e:e2:45:cd:67:
d7:68:eb:9f:97:04:73:14:49:9c:86:df:08:62:6d:1e:d9:47:
55:0c:bd:dc:3d:f8:61:0f:77:0f:f6:f2:17:92:be:24:5d:7d:
23:f3:79:0e:ca:c1:1d:27:a2:e3:0a:8c:64:e6:b5:a7:cb:aa:
41:80:d6:f4:99:1e:6b:a9:b2:27:c4:f8:df:b4:6a:96:2d:b3:
2e:d5:7f:b8:57:06:25:7d:2a:a4:e0:5b:a8:44:97:7f:86:4c:
e8:df:ed:3a:2b:c6:70:92:36:48:eb:8e:4a:d6:ef:ed:4d:d8:
8b:f3:e7:b0:33:54:1b:d6:b4:fe:6c:25:9d:7d:1c:56:c7:fe:
21:fd:31:d3:2f:a4:d1:f3:eb:61:bd:f9:f3:b2:2a:07:b3:13:
28:b8:35:57:7f:b0:57:60:58:10:bc:97:24:c6:cf:e0:4b:5d:
34:bb:18:96:f3:f4:73:45:1e:96:e9:07:68:91:27:e7:a7:d1:
cf:fe:66:18:0b:e9:2e:85:57:98:0e:09:d9:3e:5c:65:ee:28:
30:b4:82:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:33 2025 by rpki-client