Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
File: 8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft (raw, json)
Hash identifier: jHHsLqezY+rVqSvDsuPvKqF6eriL2xmtSoaeniOuGwo=
Subject key identifier: ED:A1:9F:9F:74:96:8A:CB:78:6E:29:71:C0:CE:C0:07:6E:EC:42:6B
Authority key identifier: F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80
Certificate issuer: /CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
Certificate serial: 019655A5349EEBEF6CF8F20588512DEF9F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
Manifest number: 09DE
Signing time: Mon 21 Apr 2025 00:00:12 +0000
Manifest this update: Mon 21 Apr 2025 00:00:12 +0000
Manifest next update: Tue 22 Apr 2025 00:00:12 +0000
Files and hashes: 1: 8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl (hash: NGxO7SrHWwjtQLV+5jRVNa/67VvlRhG3OOdCHncGceM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:34:9e:eb:ef:6c:f8:f2:05:88:51:2d:ef:9f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
Validity
Not Before: Apr 21 00:00:12 2025 GMT
Not After : Apr 22 00:00:12 2025 GMT
Subject: CN=eda19f9f74968acb786e2971c0cec0076eec426b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e2:1b:48:fb:43:5e:6f:80:5b:59:f0:de:8e:
70:73:1f:13:58:dc:1b:0c:cc:b6:93:c0:8b:cd:f2:
80:d6:b7:ac:bd:af:dd:7f:84:2b:dc:2c:99:84:0a:
a3:1f:f5:24:38:c4:c7:2f:df:c1:8a:27:5b:82:29:
61:d0:5e:b6:82:92:67:9d:15:45:90:c9:03:c7:79:
f1:cd:bd:00:0f:04:34:ad:9b:53:94:da:09:d9:1f:
b9:88:46:41:b9:14:25:34:df:bd:21:2e:1a:a6:32:
9c:f4:3e:c9:b7:48:5d:c1:8f:bc:0e:42:03:bf:4f:
94:fc:3c:aa:67:ac:aa:f5:8c:74:cd:7f:83:38:e4:
65:34:53:4f:2a:c1:f6:af:86:fe:9b:d4:9a:b3:8d:
e7:78:93:0d:24:da:76:b9:e3:d9:a2:ec:77:6c:fb:
9d:f6:a3:f3:ee:d5:9d:fb:bf:8d:2e:1f:0e:c7:39:
73:6b:6c:44:73:df:72:61:37:00:98:df:bb:20:2b:
06:92:5f:b1:f0:e8:91:20:1e:47:b6:e8:c3:c8:fe:
a4:42:6a:e8:6c:dd:e3:0b:8a:9d:c5:78:40:04:0a:
a0:5f:b9:f8:26:33:92:de:65:14:86:5a:7a:23:a3:
b2:7f:11:da:fa:9c:98:b5:5e:e9:92:26:bf:71:5f:
47:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A1:9F:9F:74:96:8A:CB:78:6E:29:71:C0:CE:C0:07:6E:EC:42:6B
X509v3 Authority Key Identifier:
keyid:F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3d:31:c1:8d:8f:46:d0:ca:6e:8b:6f:09:fd:55:74:bc:84:
cc:9e:52:57:1f:9a:ae:4c:b2:71:8e:b4:88:39:0b:a8:d4:74:
88:75:e6:57:5b:e5:25:3c:2f:63:43:32:2e:a0:d2:b0:1a:85:
70:87:14:17:3f:a8:47:f2:b8:85:31:ad:65:92:7a:f6:7c:b7:
ee:2b:20:48:ba:c0:5e:5f:9b:2b:e3:c9:0d:58:e4:95:13:ae:
32:54:d1:c5:22:d8:e7:44:11:63:13:49:7a:6e:ca:ef:57:84:
94:28:98:43:4d:7f:2a:04:53:33:66:c6:0b:a7:b3:e2:30:b2:
2d:98:f5:27:e0:ba:ee:65:20:48:f0:33:28:c9:b6:49:60:4e:
b2:7a:1e:56:f3:38:98:35:51:fa:6f:0a:0f:1a:c6:b6:10:00:
30:39:06:39:70:e6:bb:da:1b:f5:b9:57:6c:be:f6:67:f1:51:
ab:f0:74:50:89:10:cb:c0:ae:27:11:1e:92:fd:87:0f:c0:bc:
c8:c4:35:b5:34:e6:59:7c:af:c5:e5:6b:a5:98:3e:0c:66:77:
df:ce:09:0a:73:82:2f:a6:5f:03:81:24:b1:f4:ce:2d:a3:09:
d2:d8:e0:d6:81:92:5f:87:9e:4f:3b:65:f0:75:4b:3a:22:3d:
01:a4:4e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:58:00 2025 by rpki-client