Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
File: sffQCUrcmNmwMnIOgePbWqdYHHQ.mft (raw, json)
Hash identifier: aSZmBoASFbvDaSlALitTRJjUf8YXYBF7ktn3EQi7pYw=
Subject key identifier: E0:45:E1:35:BC:00:C7:91:F4:1E:4D:44:AB:06:9C:14:53:C9:A6:32
Authority key identifier: B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
Certificate issuer: /CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
Certificate serial: 0196549304F29D9DCE9EE3434715DB95F380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
Manifest number: 0A85
Signing time: Sun 20 Apr 2025 19:00:43 +0000
Manifest this update: Sun 20 Apr 2025 19:00:43 +0000
Manifest next update: Mon 21 Apr 2025 19:00:43 +0000
Files and hashes: 1: sffQCUrcmNmwMnIOgePbWqdYHHQ.crl (hash: 80uXUuzg5j2DMY+9qd9BvEGcytTGpdh1xuQdfHTukYM=)
2: tkngR5wwQ6qh3iGid8LqkeZO0Sg.roa (hash: XAoboSbFoG6N+OZ4mfDqaXa/N9sFsWbZUGbRzqL5oH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:04:f2:9d:9d:ce:9e:e3:43:47:15:db:95:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
Validity
Not Before: Apr 20 19:00:43 2025 GMT
Not After : Apr 21 19:00:43 2025 GMT
Subject: CN=e045e135bc00c791f41e4d44ab069c1453c9a632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:ce:de:8c:bd:89:b9:90:5e:3e:a1:32:14:
ac:5b:94:e4:30:49:22:28:74:86:34:55:db:26:0e:
ec:ff:30:82:46:a6:27:93:50:e7:77:21:b5:ac:83:
6f:cc:77:df:3e:e8:88:77:99:9c:e9:e3:88:a3:05:
db:3e:5c:a4:a5:e5:72:52:96:a7:30:b4:5b:c5:7e:
81:76:52:bc:df:e1:b8:0f:7f:dc:ed:63:b7:9b:b4:
c2:7f:b8:9f:f6:d6:aa:f7:34:02:83:b5:5f:ae:04:
f7:fe:12:69:82:68:59:78:d3:89:f5:c5:e0:5e:fd:
1e:23:8d:31:78:46:ef:9c:b1:74:03:27:c3:10:6d:
01:55:8e:46:75:61:d5:d7:b8:e9:fd:79:ad:a0:ca:
af:a8:44:ee:40:31:ac:60:a3:88:7a:47:17:1e:2d:
85:4b:48:c2:ef:91:9d:3e:ed:6e:4e:83:0e:fb:14:
2c:50:54:ae:91:e4:0d:b8:7a:32:0c:23:07:01:35:
24:bb:4c:f9:4c:d2:0d:29:f7:2e:d6:2c:c9:99:fb:
11:3a:3c:d8:8d:43:23:a1:14:48:b6:db:98:28:5f:
5c:a6:60:67:ba:58:eb:1c:2a:8c:c2:2e:9a:be:2a:
c7:dc:b8:23:ae:07:1c:a9:04:6e:57:37:2a:8a:75:
16:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:45:E1:35:BC:00:C7:91:F4:1E:4D:44:AB:06:9C:14:53:C9:A6:32
X509v3 Authority Key Identifier:
keyid:B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d7:42:7e:7b:1a:d6:6e:59:6d:01:cd:86:81:d6:b3:ca:65:
87:75:0c:2f:7f:f3:57:f7:b2:29:99:1d:b2:21:d1:26:0d:8e:
1d:f8:20:46:06:13:9f:85:82:18:e5:f8:8b:18:6d:73:27:89:
26:f6:be:45:b8:5b:b6:b8:16:2a:66:2a:f4:c8:e8:90:3d:50:
2e:5c:b6:ba:a9:42:5e:af:fb:28:43:77:08:22:0f:db:f9:7f:
4b:e9:4f:37:ad:aa:27:d0:35:44:3d:36:9c:17:38:94:cc:d1:
ad:83:0f:e1:36:26:7d:0a:53:21:45:4d:cf:08:fb:90:08:a1:
63:e5:b0:68:83:8b:13:11:ae:6a:a1:32:03:41:2e:6e:cd:bc:
4c:6c:a7:1c:ae:89:ca:98:6e:9d:21:37:c3:62:4b:8d:0a:56:
a8:88:08:9d:3c:5b:38:c2:6f:a7:01:8a:04:4c:a5:a6:e2:a0:
5a:63:d6:3c:4e:a7:c1:88:60:d5:b6:f6:42:6c:0a:23:84:21:
7d:e9:35:7a:ec:5c:8c:3b:6f:aa:52:d8:f0:8e:f1:33:7f:f6:
68:c8:52:f2:a8:38:e6:b0:98:d1:a7:67:70:58:a5:86:27:53:
ee:58:f2:ff:48:02:26:b5:3d:f9:84:1d:7d:7e:97:da:03:49:
cf:02:5c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:13 2025 by rpki-client