Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
File: RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft (raw, json)
Hash identifier: Hdh4jfRNeVJKph3Cdnzz/HPoI048h4flF0jl5R4vLrQ=
Subject key identifier: 87:C7:58:27:0F:58:C8:A6:92:EB:D8:A1:84:8D:3D:F8:3F:47:A8:A8
Authority key identifier: 44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
Certificate issuer: /CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Certificate serial: 019656B844712F466022925629A4FED4ECF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
Manifest number: 026E
Signing time: Mon 21 Apr 2025 05:00:38 +0000
Manifest this update: Mon 21 Apr 2025 05:00:38 +0000
Manifest next update: Tue 22 Apr 2025 05:00:38 +0000
Files and hashes: 1: RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl (hash: G6WtWVuQflmECVwJVVoBMUF2G661OjO9OgbNoPyOdUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:44:71:2f:46:60:22:92:56:29:a4:fe:d4:ec:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Validity
Not Before: Apr 21 05:00:38 2025 GMT
Not After : Apr 22 05:00:38 2025 GMT
Subject: CN=87c758270f58c8a692ebd8a1848d3df83f47a8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5c:f8:5e:7c:13:c8:d2:97:ea:94:82:a6:11:
85:a2:ec:11:e8:5e:4c:2e:a9:0a:2c:8e:68:3d:b7:
1c:10:28:51:4d:ec:a9:ac:ea:82:84:0a:36:df:50:
e5:f1:d4:56:89:59:cd:e9:58:4a:3b:1e:f1:2c:f3:
d6:24:25:6f:81:40:2e:d3:e1:ef:aa:89:65:3c:bd:
1d:8c:22:3c:11:cc:20:c7:d0:30:25:9b:17:d3:2d:
2b:f2:04:3c:df:6f:bc:2b:ee:54:28:e7:9e:16:7a:
10:96:85:c3:62:09:b8:0c:2c:88:a7:48:c3:1d:70:
e8:c3:45:94:24:5f:50:c6:7b:24:4d:ff:78:d8:75:
76:6a:1a:06:79:b2:51:8d:19:24:62:0b:11:03:ee:
58:88:36:94:4a:87:48:b2:2c:73:43:ba:dc:99:b3:
fe:7c:e3:73:5d:ff:bc:1b:1a:5e:83:ab:67:8c:be:
94:59:7a:d9:be:23:cc:64:92:6e:fe:65:18:df:da:
82:20:48:d0:d3:89:a6:e8:b9:be:a4:14:fb:3d:4c:
71:93:bc:33:2d:a4:6b:71:1b:69:ef:8f:40:e2:43:
9c:c3:ac:87:40:86:ae:11:68:cb:ab:8f:61:e9:34:
fe:50:2b:2d:69:a6:80:5a:ff:33:4f:df:80:0b:a9:
5e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C7:58:27:0F:58:C8:A6:92:EB:D8:A1:84:8D:3D:F8:3F:47:A8:A8
X509v3 Authority Key Identifier:
keyid:44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:80:fb:49:66:c3:b4:41:ea:9b:46:a0:74:0d:8b:6f:69:4e:
60:c4:51:cd:68:34:e3:4f:c2:9e:39:53:70:63:ee:17:8b:1d:
0b:70:33:d8:c3:78:e4:b2:69:a4:fc:d7:4f:32:be:72:ee:6c:
1c:8d:df:b4:2b:92:fb:72:dc:db:3e:a8:fa:c5:02:9a:07:ab:
d8:49:bf:42:14:af:9a:88:6c:ca:29:59:40:72:3c:b8:8a:9b:
44:39:64:4f:65:d5:24:52:d6:1e:d3:1b:27:17:e8:9c:2b:36:
99:28:9b:48:1f:95:58:08:46:fb:89:9d:ac:c8:60:2d:d7:c0:
a4:e5:a9:b3:f7:99:ca:4f:a9:19:5b:8f:ea:d9:55:47:e7:56:
f8:da:39:99:00:f2:f0:60:a7:cb:3b:af:ae:77:86:27:ff:7d:
de:21:2c:52:0c:2f:a2:ef:c3:be:37:47:13:de:37:4d:3c:cd:
be:33:45:3d:72:b4:ff:c0:3b:ef:30:44:a4:1c:6e:22:e1:ec:
ed:18:a5:39:af:ea:d9:3d:f8:af:84:d1:28:00:78:e2:fc:fc:
33:1a:0f:47:25:21:3e:c4:46:a1:19:3a:ba:55:0e:5e:28:42:
b1:14:b4:21:e7:64:0c:cf:3e:b3:62:af:39:ed:2e:2f:65:54:
af:64:e8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:25 2025 by rpki-client