Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
File: hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft (raw, json)
Hash identifier: E9JOyUM3w8fZfvSndiFHjmjQmc8KmM9C+s7J72Buli0=
Subject key identifier: 86:98:64:85:AF:89:DB:BB:81:F6:0A:5C:42:6E:64:5D:42:D0:93:3F
Authority key identifier: 85:BC:B8:1D:CD:3F:29:31:8F:40:3B:84:81:BE:44:EC:1F:F5:50:2E
Certificate issuer: /CN=85bcb81dcd3f29318f403b8481be44ec1ff5502e
Certificate serial: 019653B6EAFA45CBF969EDD82000285EDEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 15:00:18 +0000
Manifest this update: Sun 20 Apr 2025 15:00:18 +0000
Manifest next update: Mon 21 Apr 2025 15:00:18 +0000
Files and hashes: 1: hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl (hash: 3pjhflC1Qks/wJ0GF5t7IC719Nt3qZHOV8TFBxvexO8=)
2: zES562T2jGbv7XzrHC02CT1oz_k.roa (hash: UbLmo0xCkOQvRcwSPHG5xE6YElRiJFtnaVmOwj9fHBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b6:ea:fa:45:cb:f9:69:ed:d8:20:00:28:5e:de:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85bcb81dcd3f29318f403b8481be44ec1ff5502e
Validity
Not Before: Apr 20 15:00:18 2025 GMT
Not After : Apr 21 15:00:18 2025 GMT
Subject: CN=86986485af89dbbb81f60a5c426e645d42d0933f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:cf:3d:ca:ae:4d:b5:1e:42:03:57:44:76:
e4:d3:40:8e:3a:91:ca:c2:4c:6a:57:1f:3b:8c:81:
3f:4d:df:be:f6:33:d0:62:ec:9a:4b:af:25:5e:f9:
b4:b0:ce:64:51:e9:ec:9a:fe:a5:a4:cf:b9:1c:2c:
13:63:31:4a:fd:b5:f0:93:be:e5:df:e0:8d:de:68:
84:87:da:84:ff:66:97:fa:00:d2:d7:e5:53:85:ab:
14:80:7a:11:af:74:3e:52:ef:89:92:5c:c4:94:72:
db:28:39:f0:60:f4:7b:30:d7:d0:ff:1d:9f:77:91:
82:ae:a5:40:18:b5:3a:48:7b:9c:c9:bd:0c:5f:06:
55:d4:8d:9c:64:f6:68:fb:33:b0:61:d8:d2:75:bf:
ff:15:ca:ff:ba:0b:e0:02:88:9c:e7:d2:5d:ec:ee:
13:6e:d9:45:1c:ad:73:84:dc:be:f3:22:4d:cc:ac:
dd:42:68:d1:4b:f6:14:79:51:08:67:51:5c:09:5a:
08:40:e5:b5:5d:07:bc:e8:e6:7b:40:44:24:03:04:
e1:62:d1:5c:54:86:1e:84:af:59:db:9a:76:fb:55:
54:3a:d0:f5:d2:75:4f:9a:aa:44:8f:20:5e:0d:41:
c0:af:16:32:2b:81:70:31:3d:14:9f:1e:ca:c7:04:
ae:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:98:64:85:AF:89:DB:BB:81:F6:0A:5C:42:6E:64:5D:42:D0:93:3F
X509v3 Authority Key Identifier:
keyid:85:BC:B8:1D:CD:3F:29:31:8F:40:3B:84:81:BE:44:EC:1F:F5:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f7:91:4e:54:e5:32:bd:f8:d6:1e:16:fb:a2:dd:3d:02:58:
25:00:fa:4b:e9:23:e4:f4:ca:ea:d9:50:fc:f7:18:46:6a:23:
d0:be:22:5c:e5:02:cf:b0:2d:28:e4:6f:99:d1:71:70:2b:a8:
66:f2:49:dd:83:3c:21:a1:f6:e8:c7:a8:68:fa:15:f2:07:cb:
e7:3f:94:7d:60:7f:2c:e1:7c:71:2f:0e:ce:8e:7b:82:e8:90:
b2:7e:a3:c0:c4:50:c9:b2:6a:8a:60:ce:d2:73:1b:aa:ee:e7:
f6:75:c8:de:22:9d:dd:e6:6b:88:b6:15:ca:9c:3f:16:9a:6d:
13:ce:31:61:0d:61:16:a1:8a:b7:56:33:0d:21:f1:e9:36:5b:
24:2c:59:82:7c:0d:a0:68:47:ad:a6:c6:8f:fc:d2:c8:7b:d3:
7f:a0:89:7b:7c:a6:29:a3:d7:b9:19:5e:6c:99:4c:ee:e5:b9:
8a:56:e8:a0:45:b7:5a:43:df:d5:f9:ec:09:42:0c:7e:48:0f:
e6:cd:f3:0c:a5:b5:f6:6a:28:fc:12:80:a2:16:78:b5:4f:6c:
cb:12:89:e0:88:0c:65:85:04:8c:96:ca:71:e5:20:c4:73:79:
96:4e:84:40:51:9c:e7:6f:9e:17:d7:9b:fc:f0:ad:3b:aa:8e:
3b:22:13:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:10:35 2025 by rpki-client