Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier: 8diE2T7K7jBMmzluoxW+TV+346ui8uyvCEOw3W03xYg=
Subject key identifier: 12:D5:E5:9F:90:63:9F:01:41:57:04:7E:FC:AC:BA:1A:FD:06:D6:F7
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 0196127CCE801A67F070F0AE3C425B9FE5AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number: 14D8
Signing time: Mon 07 Apr 2025 23:01:31 +0000
Manifest this update: Mon 07 Apr 2025 23:01:31 +0000
Manifest next update: Tue 08 Apr 2025 23:01:31 +0000
Files and hashes: 1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: bf2F1cWtvZVpGW1ptvghoxmDyL8WzmtkcA42sk637zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:7c:ce:80:1a:67:f0:70:f0:ae:3c:42:5b:9f:e5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: Apr 7 23:01:31 2025 GMT
Not After : Apr 8 23:01:31 2025 GMT
Subject: CN=12d5e59f90639f014157047efcacba1afd06d6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f4:ab:3a:89:ee:83:db:09:01:4e:bd:21:37:
89:f7:25:95:bd:d5:fb:e3:35:3b:2c:19:5c:bf:70:
3d:34:54:81:10:59:aa:b7:c1:98:20:d0:3c:bc:d2:
4a:34:38:c8:8b:49:b0:e2:0e:8b:b2:00:51:4a:4b:
86:dd:9f:d2:af:be:b4:73:67:21:b8:28:e3:7d:ca:
45:f1:98:58:44:2e:89:aa:a8:51:75:03:4a:c4:07:
c3:10:07:50:1e:39:51:ab:93:61:09:93:f8:8b:eb:
23:6a:a3:b9:86:7a:0c:6b:f4:d2:df:dc:59:7b:91:
13:3a:d4:1e:aa:63:c9:c9:5b:9b:63:94:0e:33:9e:
2e:24:e1:39:3a:94:77:2b:b0:2f:80:50:85:00:c4:
b2:d2:9c:ca:81:2c:51:eb:07:a7:5f:13:50:4c:4b:
80:de:66:66:43:eb:c6:03:c0:01:0c:ab:cc:7f:95:
d5:86:56:a7:e4:45:f1:7c:61:94:2f:d7:ce:b9:11:
30:30:79:27:dc:4b:1d:b0:6c:dc:4b:05:ce:45:45:
62:48:56:4b:ac:da:f1:6e:72:85:ad:fe:38:9e:37:
a1:f2:b6:b0:28:82:4d:4e:5b:0e:1e:31:96:c4:a2:
51:a2:e3:94:5e:29:a0:21:5c:45:30:68:73:1b:a5:
6c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D5:E5:9F:90:63:9F:01:41:57:04:7E:FC:AC:BA:1A:FD:06:D6:F7
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:29:59:4f:22:81:63:5b:6c:4a:fc:ba:f3:84:a1:d7:93:59:
b2:49:23:5c:67:3a:fd:e6:d6:17:3f:5d:c5:10:94:99:c6:e7:
62:43:55:c7:88:71:65:e4:d6:8c:d3:94:2f:80:b5:c9:ec:e9:
28:94:dd:01:30:5c:6f:1c:01:1d:45:60:10:c2:21:a0:e0:17:
54:41:78:36:15:d2:23:d3:92:74:0f:94:80:af:f0:b3:18:16:
19:13:b2:14:8f:be:99:f8:28:e6:48:64:bf:da:c0:75:1a:89:
aa:7d:5a:b7:86:93:0f:da:a0:08:47:f1:a1:dd:a0:c4:7b:ae:
48:55:4f:98:92:72:48:7d:29:d2:af:e0:1e:35:89:ef:ff:dc:
14:0c:f7:5b:b9:f8:1b:32:86:21:f7:9d:35:08:ae:a1:1b:16:
93:2f:05:2d:63:d2:b4:8f:39:4e:21:47:27:8c:5f:99:92:1a:
98:05:a1:41:64:ef:f8:7c:87:56:ab:7c:44:37:5d:e3:6f:5d:
bf:7c:04:c0:07:cb:f5:78:6e:27:97:59:61:61:59:22:e3:31:
d2:4b:27:d6:b8:da:b7:83:b8:7a:af:78:66:5e:6c:a1:32:c4:
b2:39:88:a3:ac:72:e8:89:23:56:1c:d6:69:d8:9f:7c:ce:80:
78:93:80:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:37 2025 by rpki-client