Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
File: AoDVqrjuctqjUocfunLspFGnDtw.mft (raw, json)
Hash identifier: eEbumwB93EPD5w+qw1RkUHF9sEFv2neb+5uf3hbtG10=
Subject key identifier: 10:C8:B5:05:DB:A4:70:09:A6:81:28:B6:B2:D6:8E:AC:87:13:D9:4D
Authority key identifier: 02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
Certificate issuer: /CN=0280d5aab8ee72daa352871fba72eca451a70edc
Certificate serial: 01958F983B17508BD84AA71EC1364D381C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
Manifest number: 0751
Signing time: Thu 13 Mar 2025 13:01:13 +0000
Manifest this update: Thu 13 Mar 2025 13:01:13 +0000
Manifest next update: Fri 14 Mar 2025 13:01:13 +0000
Files and hashes: 1: AoDVqrjuctqjUocfunLspFGnDtw.crl (hash: pylHdPZxP1zXINsleaXArkD2OpErNRqc27cyqPU02sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:3b:17:50:8b:d8:4a:a7:1e:c1:36:4d:38:1c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0280d5aab8ee72daa352871fba72eca451a70edc
Validity
Not Before: Mar 13 13:01:13 2025 GMT
Not After : Mar 14 13:01:13 2025 GMT
Subject: CN=10c8b505dba47009a68128b6b2d68eac8713d94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:c9:23:de:e7:f4:00:ec:70:92:fc:eb:ef:
80:f0:03:40:00:2b:af:51:a1:0b:31:97:a2:b5:b0:
9c:20:75:63:7f:04:96:d9:32:4b:fe:56:78:0e:91:
ca:48:d3:ce:ff:2b:b1:f8:c9:a0:a4:f9:ca:38:c9:
33:67:d4:ec:e9:d0:fc:1c:92:7d:5d:0d:78:e7:b9:
c5:8d:e4:61:c5:54:03:8f:36:cf:bc:d5:77:72:c2:
1d:42:a1:56:33:7a:a1:41:a2:ec:0b:0c:9c:c1:d0:
2e:60:0e:ba:d5:5e:a0:5f:dd:53:a7:ac:f1:f7:5d:
bf:b5:90:fc:4a:cc:60:d7:f6:cf:e2:26:79:0b:6a:
60:84:b6:81:a2:7a:db:cf:61:03:bb:f8:74:5c:1e:
da:35:6b:d4:88:4d:f0:c8:e5:ae:42:b1:c7:78:65:
5a:90:81:0e:2f:a5:5b:6b:b1:42:0d:6a:5c:5d:05:
05:f8:b3:c6:6d:d9:70:80:a4:dd:8d:a1:80:6b:a2:
c2:ec:f8:76:69:ab:d9:b9:0f:4c:38:6d:83:da:2d:
c8:2e:f5:ca:66:04:46:d4:fe:e7:9c:88:0e:1f:b6:
5b:d7:bf:02:00:df:44:06:d6:94:27:eb:f8:de:ba:
fd:f7:88:fc:8f:83:98:8c:de:0a:3f:df:da:45:51:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C8:B5:05:DB:A4:70:09:A6:81:28:B6:B2:D6:8E:AC:87:13:D9:4D
X509v3 Authority Key Identifier:
keyid:02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a1:3b:e8:47:5a:e1:75:fa:d8:52:38:d4:b3:5e:b3:4c:3c:
62:1f:77:e2:1d:9c:64:89:4a:7f:cb:eb:76:cc:1f:ea:72:46:
94:f6:09:ab:45:4c:27:7d:9d:e4:af:d9:70:9d:4e:d2:9d:02:
67:a4:ec:af:e4:83:99:fd:16:ef:46:2b:24:a2:ee:7f:85:51:
5d:0f:5e:c4:a1:85:69:91:5f:8b:24:85:0e:01:71:30:bb:2a:
4a:dc:38:95:7b:4e:f2:9b:52:66:30:ed:bb:08:a5:ea:4c:cd:
a1:f1:52:d4:fb:a5:47:10:6f:22:bb:14:53:37:75:7e:ac:41:
cf:95:51:e3:8a:50:b7:78:74:1a:24:3c:31:1e:4e:16:08:9a:
3c:de:b1:7c:0a:6c:35:0b:f5:78:f8:0a:21:7f:c6:95:de:62:
11:f4:40:9e:ff:45:2b:bd:e7:5d:c1:4a:ae:6d:d9:39:76:0e:
77:a3:c2:70:cd:51:b9:e7:c6:e6:a4:53:05:19:f3:54:ff:e5:
b3:ba:5c:06:e2:c4:ec:d3:13:99:75:53:dc:c0:96:3c:68:5e:
6b:56:fd:25:53:a8:64:d4:b3:b8:40:10:88:f2:7f:19:d6:0d:
08:64:54:12:5f:3a:a8:36:79:72:e8:2d:db:0d:05:ff:aa:74:
e5:b4:fa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:37:05 2025 by rpki-client