Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
File: 08YXj7A0kFEwrwzhzSdRVPK1m3g.mft (raw, json)
Hash identifier: bCfUfhjiK0hd00pskZcezqr12NMydzV+xLjVT63zxYM=
Subject key identifier: 96:38:D7:DF:23:02:43:79:34:20:32:32:CF:B7:9D:78:FB:5A:98:FF
Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
Certificate issuer: /CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Certificate serial: 019653EE6402A8E64B3BFD9E5014F6625FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 16:00:54 +0000
Manifest this update: Sun 20 Apr 2025 16:00:54 +0000
Manifest next update: Mon 21 Apr 2025 16:00:54 +0000
Files and hashes: 1: 08YXj7A0kFEwrwzhzSdRVPK1m3g.crl (hash: YVVZP+Y1yzqMKDcXqFvCG+VMkPWEFv0FYeqG7PzEvR4=)
2: Z9dAkp6DWkibOyxuZSYF8JC0FP8.roa (hash: Di2cqBcEpf6hgxQLLA7v+y+JplI7ajbTFP4r/fEMeKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:64:02:a8:e6:4b:3b:fd:9e:50:14:f6:62:5f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Validity
Not Before: Apr 20 16:00:54 2025 GMT
Not After : Apr 21 16:00:54 2025 GMT
Subject: CN=9638d7df2302437934203232cfb79d78fb5a98ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:94:22:80:0d:31:05:6e:c0:ba:88:55:f4:97:
a9:17:42:19:6f:78:2e:e9:46:e8:c8:48:ec:26:52:
88:55:c6:25:9e:c8:0a:d3:84:c0:e2:42:17:d7:96:
fa:5e:47:fa:ab:72:c9:ff:5d:35:a6:47:58:01:0e:
b8:ba:8f:a8:5d:40:c5:57:9a:ed:78:ef:17:b5:5c:
d3:11:be:7e:29:75:45:3e:56:d6:6a:51:77:f9:9a:
ac:7b:c8:52:75:16:6e:64:cd:b4:3b:af:49:d8:74:
9d:2c:9d:ca:1a:19:27:a4:43:b0:cd:f7:8c:b3:1c:
ec:13:23:c3:0c:4f:28:c3:79:3f:34:75:b4:ec:b4:
84:4c:46:bb:cd:ee:73:2b:3a:15:cf:22:fb:1a:7d:
00:c9:2c:5e:97:e4:36:fd:0a:23:e6:2d:f1:4c:23:
9c:41:fa:d1:c8:70:a8:35:c8:0d:84:89:fe:3a:a7:
41:d5:12:89:d7:73:34:d8:e8:47:a5:87:dd:dd:b5:
be:a4:9c:2d:99:5e:b2:23:d6:67:9a:f1:eb:0b:9c:
88:cf:27:0a:ac:f2:a3:a8:5b:33:91:37:00:81:9a:
6a:24:94:65:e7:17:47:70:36:59:ee:f3:6c:3d:19:
c2:b0:6d:b6:51:8e:e7:1d:1d:a9:37:6a:fa:f3:06:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:38:D7:DF:23:02:43:79:34:20:32:32:CF:B7:9D:78:FB:5A:98:FF
X509v3 Authority Key Identifier:
keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ef:17:72:c7:24:2e:9e:43:73:f6:74:43:f4:ad:8b:6d:f9:
2f:61:f2:73:3f:07:1e:a3:af:32:30:5d:38:0a:a4:61:a8:30:
0f:e7:cb:cc:ca:92:db:2c:aa:9e:ca:3c:79:84:45:fd:bc:20:
be:3f:20:d9:e2:8e:80:1d:b5:c6:a0:1d:74:29:2c:c7:d5:4e:
72:fa:98:16:d0:c3:73:78:f7:d5:ae:be:d5:20:44:1b:d5:ea:
72:f5:c4:2d:94:8f:67:a5:7a:61:8a:bf:92:7f:b4:2e:4a:1c:
99:97:a3:dc:ff:e4:d1:c6:a1:e0:5c:33:a6:e6:c4:db:e7:b2:
2b:eb:fd:e8:b5:05:40:c0:2a:da:91:52:cc:56:20:87:14:a6:
f6:9b:61:a9:78:3f:c4:91:80:7e:15:a5:62:37:81:8c:4c:03:
e3:9d:a2:2a:aa:9b:a0:a0:97:d5:77:e8:07:01:c2:21:f9:e3:
b0:67:b9:a6:42:06:8b:f3:62:e7:80:c3:4b:30:2d:d6:4b:a1:
36:3b:16:62:34:3c:c1:72:27:cb:db:be:29:9a:56:50:6d:67:
7a:ed:4a:f0:c9:ba:e8:e8:69:e9:7e:8c:c0:cc:6c:66:5b:94:
25:30:4a:09:c3:ae:ae:f9:71:8c:1d:d2:60:42:8c:d3:54:44:
70:38:6c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:30:14 2025 by rpki-client