Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
File: C0U7QQ01hqYjepUe7zsD9MRBGPA.mft (raw, json)
Hash identifier: rxC3vtMtI5CTgY/QCy5zp0iksbTSOvW5py00/tD7FXo=
Subject key identifier: 3C:8D:AF:44:90:DE:A3:7C:86:F3:77:FF:ED:50:0A:1F:A7:21:F2:F3
Authority key identifier: 0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
Certificate issuer: /CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Certificate serial: 0196146B3DE908248B596ED66BFBC7F0BCD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
Manifest number: 081F
Signing time: Tue 08 Apr 2025 08:01:34 +0000
Manifest this update: Tue 08 Apr 2025 08:01:34 +0000
Manifest next update: Wed 09 Apr 2025 08:01:34 +0000
Files and hashes: 1: 6Nr2VmGKQ_jUJpF9yPeLEUnYhF4.roa (hash: /MpCkrj9yQfDhYflTljevFhsZA0Mv2nTgQM1DqiGD3A=)
2: C0U7QQ01hqYjepUe7zsD9MRBGPA.crl (hash: U/VezdWQ/f0/qpuGa3S+mLpVGOJEPQr4BRpXbAphS8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:6b:3d:e9:08:24:8b:59:6e:d6:6b:fb:c7:f0:bc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Validity
Not Before: Apr 8 08:01:34 2025 GMT
Not After : Apr 9 08:01:34 2025 GMT
Subject: CN=3c8daf4490dea37c86f377ffed500a1fa721f2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c9:1e:59:aa:42:30:12:97:6e:59:3f:ca:3b:
ac:ac:32:0e:fd:7f:88:1b:e7:c1:08:e9:43:80:e2:
2a:d7:05:48:94:b5:79:45:c8:14:1b:63:fa:34:e7:
44:b1:77:1e:74:f5:43:5a:47:36:fa:f4:b3:3d:60:
ef:8e:8c:27:c8:14:44:ba:aa:ed:2b:c1:18:50:ca:
11:77:7b:33:bc:8e:37:b8:e8:4f:44:54:94:fb:8a:
20:b8:69:f8:ec:cc:66:d0:0c:6b:0b:cf:04:f6:c6:
8b:a8:df:35:30:58:71:86:14:81:a1:3f:0f:1a:84:
5e:65:ac:ce:51:a1:46:87:69:fc:f9:1e:82:f9:d6:
77:8d:e8:ec:c8:e5:0d:58:b2:ff:12:31:42:d1:26:
4f:84:0b:91:c0:13:3f:13:31:f1:90:13:47:86:f8:
60:52:f4:ed:31:e0:0a:6e:32:ab:2a:08:05:c3:20:
0f:0b:81:77:e5:cb:79:46:6e:87:e6:37:32:d3:d7:
9d:23:f5:6c:a2:2e:51:d6:59:04:04:a2:cd:01:84:
d0:8c:a3:0f:f9:06:51:4b:1d:ef:66:a3:4c:f6:e5:
8b:88:91:29:59:39:0c:e4:17:d1:fd:27:f8:7e:99:
32:2b:a5:44:47:5d:a3:aa:01:23:bb:34:6c:b6:e2:
c0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8D:AF:44:90:DE:A3:7C:86:F3:77:FF:ED:50:0A:1F:A7:21:F2:F3
X509v3 Authority Key Identifier:
keyid:0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6e:1a:9c:5b:89:f6:06:20:a0:16:81:62:53:29:d9:98:a4:
f4:d4:aa:03:1c:ea:57:3b:0b:40:53:0b:0e:b8:65:9f:f5:82:
d2:ea:db:6b:dd:b2:7e:92:85:bf:1d:fe:49:35:30:e0:4b:c5:
c8:33:a1:8d:08:cf:66:82:f3:54:72:28:2e:69:df:fb:11:df:
f0:c9:f1:3c:e2:c5:ce:26:c0:1c:84:40:7b:2f:f4:6b:c1:66:
f0:7d:70:f1:c0:17:13:0b:74:f5:7f:ac:74:70:5e:b4:24:c9:
06:ce:ea:4a:dd:7d:02:4f:63:42:7f:fc:92:a5:19:7e:35:21:
8d:75:c1:16:d6:4a:57:da:e8:a6:1b:1d:f9:23:33:dc:e7:d2:
1a:0c:3b:38:1b:4e:c0:e5:c8:44:55:96:4d:47:1b:0c:58:80:
50:0f:0d:f2:63:83:e4:74:70:e1:4a:33:50:1e:35:a5:00:07:
87:e2:04:94:67:fd:0e:99:1a:04:aa:15:a9:d5:3a:60:f1:0d:
46:3a:91:34:88:1e:10:6c:7a:d5:92:95:a3:73:47:09:ff:4a:
08:f3:4c:34:b1:42:b0:01:42:16:57:e2:d2:73:7d:b0:8d:99:
e5:46:4d:d8:eb:05:3f:fe:95:51:a7:f5:da:7e:47:21:b8:6a:
8f:06:44:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:41:11 2025 by rpki-client