Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier: GW5oqJkppEN6ANdkAPD9Tdyhpb+bA+beICQ7OpjAuXQ=
Subject key identifier: 3D:D9:77:44:BD:09:85:8E:D2:FB:00:8A:04:99:68:F7:80:5B:D4:10
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 019654256D295123823D443D36924D48E3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number: 096A
Signing time: Sun 20 Apr 2025 17:01:00 +0000
Manifest this update: Sun 20 Apr 2025 17:01:00 +0000
Manifest next update: Mon 21 Apr 2025 17:01:00 +0000
Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: Wu52Kgt3KtaOMK9rM9vyQA5QrWiaGQTgKymoxKmOFVE=)
2: xPUzYHJ2p6sBXOjKUulEgLqlcBc.roa (hash: ygZqht59F65fKs2o1JfQZNtwvL5DudVBMCJ5Le5stTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:6d:29:51:23:82:3d:44:3d:36:92:4d:48:e3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: Apr 20 17:01:00 2025 GMT
Not After : Apr 21 17:01:00 2025 GMT
Subject: CN=3dd97744bd09858ed2fb008a049968f7805bd410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c6:1b:6e:74:d9:d6:d4:b2:a3:8d:33:ce:3f:
71:5d:72:77:f5:6e:9a:88:e3:26:9f:93:7f:8f:84:
02:76:57:56:c5:ce:52:3c:e6:8e:8a:52:7b:97:cb:
ba:c6:aa:6b:04:12:29:7a:2a:ad:ae:ca:12:0d:75:
f2:c5:1c:c2:8b:28:e9:f1:b3:7a:72:4f:f1:ed:fd:
2a:f1:14:97:33:bb:d6:64:3c:34:e5:68:40:a5:3a:
a6:cd:e4:42:99:49:c0:eb:10:7a:12:97:db:d4:7b:
5c:e4:53:8a:6d:87:de:39:fe:96:74:1f:9c:d6:58:
c6:c4:27:64:c1:e7:5c:f5:f4:67:47:99:95:83:1f:
30:a7:37:79:b9:f0:5f:35:dc:7d:bf:27:9c:0f:5f:
48:ad:b7:f8:57:4e:a4:fa:f2:f0:eb:dd:34:b2:ae:
9a:c3:0b:90:3b:19:e7:1b:ca:6f:10:ac:7e:2d:43:
26:44:12:23:57:95:8e:ca:c4:70:2a:e5:24:fc:eb:
c5:46:d6:e7:a9:5d:a5:85:26:fc:05:04:df:5f:0d:
e0:cd:d3:40:af:65:ab:5e:b3:15:ae:a0:7f:e2:81:
c4:cc:02:5d:2c:45:a0:d4:5a:41:d9:c9:29:89:16:
49:47:33:5a:41:4c:a8:3c:b2:47:ca:3e:f5:87:e4:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D9:77:44:BD:09:85:8E:D2:FB:00:8A:04:99:68:F7:80:5B:D4:10
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7e:49:95:71:9e:82:98:9c:fe:50:f9:dc:3e:73:82:c7:16:
f8:bf:6f:30:d6:03:8d:3c:61:f7:3d:98:a4:d6:dd:2c:0e:c4:
af:c5:15:ad:c3:f2:f5:a5:5a:bd:3a:22:fd:df:ae:fc:6c:53:
3c:e4:24:9e:9c:7e:b7:1a:f0:97:b6:d8:82:84:9f:ad:5a:d6:
75:9e:40:fb:72:86:72:04:38:f9:4c:dd:f8:b3:e7:ae:d5:3b:
2c:08:fa:20:99:d9:21:b4:3c:cc:cd:f9:2e:ca:46:e6:14:9f:
91:2c:3b:0b:9a:e0:89:61:1e:be:20:9a:1d:62:b9:73:aa:5b:
cd:03:3d:b2:b4:da:c9:d6:a7:56:02:f8:30:70:ef:73:2c:6a:
b3:83:b7:d7:ec:ee:ab:a2:88:2e:57:30:42:1a:20:34:6e:e3:
75:75:64:d6:30:1c:3b:1c:19:9e:a8:99:18:24:29:73:ff:c4:
54:8a:b3:34:cf:16:b1:83:cb:af:0e:0a:1e:52:97:6f:98:1f:
0f:4f:76:c7:71:08:62:fc:56:8c:17:b9:1a:be:d9:70:55:57:
90:2e:eb:26:d2:44:55:26:ca:05:dd:a0:7f:06:f2:5b:35:2e:
06:cb:30:98:55:7c:a0:b6:e0:c2:62:10:71:be:7b:02:14:84:
a3:a2:66:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:52 2025 by rpki-client