Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier: XByFqdB+mw4/DJXXgdRQ1k5BmtOrdpdHfJa0IBoVhOw=
Subject key identifier: 60:01:65:5E:EF:EA:B9:CA:96:95:27:C0:E7:C3:2E:A6:38:77:59:1C
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 01962ABC2697BB71375E373943C9D41AFAC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number: 11C0
Signing time: Sat 12 Apr 2025 16:01:35 +0000
Manifest this update: Sat 12 Apr 2025 16:01:35 +0000
Manifest next update: Sun 13 Apr 2025 16:01:35 +0000
Files and hashes: 1: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: afP4aVqvoZFzwspR0Lz6gbz0OnZLWzz+9ldZ3uqalmQ=)
2: EAKe9346ONHQ_VuM_WxVCj_cv4Y.roa (hash: 5H5/ZpQAnmY/nM8N1VtyRS6/84qLoSsU0G+AmpT2T/k=)
3: RBJ-L0gnLCM7Rv9f1a6uxn7Yu-0.roa (hash: 4xHToao8czKd/Xx3uSwWIpAVRfAfaES7tBaw71UFRvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:26:97:bb:71:37:5e:37:39:43:c9:d4:1a:fa:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: Apr 12 16:01:35 2025 GMT
Not After : Apr 13 16:01:35 2025 GMT
Subject: CN=6001655eefeab9ca969527c0e7c32ea63877591c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:42:83:dd:03:f9:f7:15:83:da:74:c0:92:
99:8d:2e:4f:22:7d:e3:b7:4b:cb:98:d8:50:41:ab:
fe:c0:35:73:25:49:b5:d3:df:92:ba:ea:ee:3c:08:
30:c1:ce:1b:c9:7a:db:76:9c:c3:a4:9e:ad:2b:dd:
6c:d0:53:66:c6:04:02:c8:d1:b2:1d:e9:0b:05:07:
be:7d:d0:0b:3f:61:c9:96:7f:18:63:1d:3a:61:ae:
ad:e7:b8:77:ce:8c:c1:0a:56:1d:0f:2e:64:78:92:
ca:bc:02:a8:0d:3d:67:bd:35:3f:f4:59:e9:40:f9:
b5:e0:7a:77:a7:c3:39:04:f6:07:1c:2d:b1:19:fb:
80:03:f7:02:5e:ad:59:87:af:40:5e:25:a2:c7:fb:
ef:01:31:3d:f3:a6:6e:be:28:c9:ed:bb:3a:bf:6c:
5f:0c:bd:b8:7f:9c:6d:5a:2f:1a:38:43:26:91:a0:
05:4a:04:73:02:1c:85:9c:55:ea:e5:66:85:a2:3a:
e2:f4:82:5d:81:55:44:3c:08:e0:74:bc:3e:6f:b7:
c2:44:58:1b:62:10:4a:33:2f:e1:70:5e:39:d1:86:
35:31:44:cb:3f:98:6a:78:62:4f:fb:90:8f:d9:7f:
a6:10:e7:82:cc:42:e4:fa:62:98:f1:5e:1b:a2:3c:
38:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:01:65:5E:EF:EA:B9:CA:96:95:27:C0:E7:C3:2E:A6:38:77:59:1C
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5d:14:f7:5b:09:80:e0:4b:94:62:90:14:b0:2d:47:31:7d:
f0:61:d3:32:27:1c:fb:0e:1b:cf:37:26:2c:25:90:c4:1f:02:
97:6d:f7:d4:33:8a:77:4f:9b:c1:36:50:5d:1f:0b:d8:16:34:
d5:b0:8a:ba:8b:22:99:49:35:46:82:01:52:48:9c:f9:26:8a:
fb:6f:7b:fb:4a:50:23:3b:45:11:7c:59:7d:f7:a1:3f:1f:4d:
70:8a:91:a0:8f:1d:6b:8d:bc:8b:06:6f:16:4f:df:78:9a:13:
ad:49:ac:c1:60:1d:a6:63:cb:9f:78:22:d9:24:1d:e1:d2:67:
cc:01:98:34:95:fb:ea:be:53:cc:a4:ca:de:74:98:d6:f0:cb:
ac:5d:bb:fa:92:c5:ce:26:53:80:67:4c:ec:14:f5:f7:6b:ea:
bf:32:1f:40:98:3f:65:ee:7e:80:47:b4:a7:a5:f0:fa:ae:84:
f9:c0:35:78:0b:dd:81:7d:d6:d2:08:eb:7a:43:4b:8e:db:dc:
ef:52:fb:a7:96:dd:1a:9d:70:28:6e:ef:8b:7d:54:84:06:53:
a2:e4:ae:75:07:88:41:05:e7:47:27:85:71:87:0b:5b:38:fd:
38:4d:61:9b:eb:f5:1d:73:d5:cf:9b:15:5d:e1:81:44:1f:f1:
06:55:f8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:24:04 2025 by rpki-client