Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
File: 83UsEPGw0HtfSOV539FONycT-0c.mft (raw, json)
Hash identifier: PuZhr5D/i5PcYSakba3AX3SqFaiodnnhC+plXYGE0GA=
Subject key identifier: B4:CE:07:49:DA:E0:F8:AF:8D:7C:DE:17:E0:3F:AB:44:B4:5B:1C:B3
Authority key identifier: F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47
Certificate issuer: /CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47
Certificate serial: 019656EF007CBAF8F9D983ADD0573E66354A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
Manifest number: 083A
Signing time: Mon 21 Apr 2025 06:00:25 +0000
Manifest this update: Mon 21 Apr 2025 06:00:25 +0000
Manifest next update: Tue 22 Apr 2025 06:00:25 +0000
Files and hashes: 1: 83UsEPGw0HtfSOV539FONycT-0c.crl (hash: wor4EjIeH/UQ7B+NoxeaxyAWtMW6Dk2YSfh3CqZIDO8=)
2: kDhp1dHjDBAXX9BsUPItX2dtNTc.roa (hash: PynDqUC0SP3COf4tmeohMx6MacUGS0U4TVEP+3iExHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:00:7c:ba:f8:f9:d9:83:ad:d0:57:3e:66:35:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47
Validity
Not Before: Apr 21 06:00:25 2025 GMT
Not After : Apr 22 06:00:25 2025 GMT
Subject: CN=b4ce0749dae0f8af8d7cde17e03fab44b45b1cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:37:86:9b:d9:79:11:e5:35:41:e5:70:8e:9b:
c0:98:1a:22:a0:92:73:b0:02:fa:bf:3a:db:89:4a:
a9:1f:47:5c:c1:8b:78:f8:d5:43:d5:89:93:90:7d:
e7:60:55:6c:30:af:e8:75:2d:f7:37:ee:7a:ee:a3:
43:52:40:31:0d:5f:6b:fc:37:5d:de:9c:6d:1d:3f:
68:d7:9e:c3:c7:44:21:30:1f:b3:f3:26:55:e5:82:
6f:4b:5e:bb:da:35:9f:fc:73:dd:aa:d8:8e:5c:11:
ab:d3:7b:b8:7f:57:82:b3:67:2e:f8:be:a9:17:c9:
1d:4a:52:3c:93:00:8b:d1:43:94:11:67:b6:24:50:
c3:37:20:02:ae:ee:8f:32:b2:3e:93:43:42:e9:e5:
a4:23:75:f8:9c:5c:b7:ae:4b:64:2f:d3:2e:8c:b5:
71:63:19:fe:72:2a:ee:38:5c:a8:0d:d7:ab:61:73:
cf:b4:0a:e3:42:77:c9:9c:69:2d:06:e3:5c:65:58:
73:17:75:3f:51:a6:c0:01:45:04:1e:2b:45:05:73:
66:d1:6f:e1:d4:5b:97:51:bc:94:0a:c3:1f:3c:46:
14:a3:43:85:84:57:21:80:59:3f:b6:8c:c2:6b:e5:
1c:9f:95:ca:e7:33:ce:ee:4f:23:25:57:f9:55:72:
9d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CE:07:49:DA:E0:F8:AF:8D:7C:DE:17:E0:3F:AB:44:B4:5B:1C:B3
X509v3 Authority Key Identifier:
keyid:F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4c:50:af:fc:aa:ae:a8:38:33:d7:de:0a:36:c5:89:0e:48:
69:d7:bb:b7:94:db:e6:38:65:cf:35:79:95:47:e4:d0:7a:1f:
78:82:83:e2:a7:8e:3a:c3:93:c3:e5:da:3b:66:95:c2:66:ef:
e5:82:6a:b2:a1:03:c3:4c:ad:64:7c:8d:de:9b:19:a3:9e:18:
94:44:8d:66:9d:2b:d7:d9:21:84:49:d6:47:96:b7:82:73:41:
2e:ab:4d:5d:be:29:da:53:e2:70:39:b6:f9:fe:da:ab:d3:a6:
a0:61:92:7b:8b:b0:ea:9e:bc:f5:41:1f:1c:38:23:ce:a0:69:
93:1a:bb:2f:a7:b9:b4:10:8f:b6:3b:54:db:15:6c:ae:73:fd:
69:64:3b:17:8b:c3:f9:ec:65:9e:55:9f:3c:bc:cf:87:08:68:
eb:13:98:89:24:9a:8e:0c:2d:e3:ee:8e:a7:0a:57:f8:a3:71:
be:cd:c3:b3:e2:50:28:9b:50:ba:66:7e:99:f5:7e:32:17:fa:
0f:2f:7f:4b:f0:ad:26:8b:3f:83:14:26:44:cc:b6:13:63:69:
ca:a5:e0:23:c0:36:ef:5f:0a:5c:45:15:26:a5:83:35:c8:c4:
a2:2c:80:5e:c1:f9:ae:a3:e9:a2:05:29:26:2e:b9:1b:fe:7c:
ac:0f:ea:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:19:55 2025 by rpki-client