Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
File: C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft (raw, json)
Hash identifier: m9OZNyGLs8YOJjQgjlBSZ0UxdVr3UBVRh2PvFDPHX2M=
Subject key identifier: 83:70:CA:7D:58:95:D8:F6:53:68:C7:B5:76:36:ED:53:BB:34:B9:AE
Authority key identifier: 0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
Certificate issuer: /CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Certificate serial: 01961DA4D401027A5269BBC721E8DC2B4A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
Manifest number: 050F
Signing time: Thu 10 Apr 2025 03:01:03 +0000
Manifest this update: Thu 10 Apr 2025 03:01:03 +0000
Manifest next update: Fri 11 Apr 2025 03:01:03 +0000
Files and hashes: 1: C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl (hash: OIf14ruADCpskeeueNFwAR+ZT869FFiHpkAm+3k2InA=)
2: dy6V06G8CC2FK34EGVuxtzegKH4.roa (hash: gPhDzrN8RIm6TShQaGb5YzX92bCG0Thu0kMn08thu4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1d:a4:d4:01:02:7a:52:69:bb:c7:21:e8:dc:2b:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Validity
Not Before: Apr 10 03:01:03 2025 GMT
Not After : Apr 11 03:01:03 2025 GMT
Subject: CN=8370ca7d5895d8f65368c7b57636ed53bb34b9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:c2:0f:ef:c3:f7:ad:ae:af:48:20:fa:24:
6c:ac:1e:e5:91:fb:75:59:7a:36:b9:ab:33:b3:2e:
31:18:15:09:31:20:bb:08:bf:f9:af:fb:ca:9f:26:
bf:e6:41:8f:2d:26:48:9c:79:1f:4e:08:78:f3:8f:
8d:1b:d4:0f:03:30:37:aa:78:b8:78:94:9b:8e:a1:
79:c2:cf:74:d5:b4:1d:f2:81:4d:ea:a5:b1:2c:11:
76:24:ee:46:6c:93:c7:e3:a9:c1:b5:99:7d:15:57:
17:d6:a3:ed:3e:3d:61:50:04:48:43:56:f1:25:b1:
a3:b9:6c:31:db:48:64:39:08:11:fb:7f:a7:75:96:
8f:40:31:e4:c5:8e:8b:10:30:a7:c4:b1:ed:59:76:
3f:07:a5:46:4f:62:43:81:1b:97:a8:41:c3:ed:c0:
30:c6:6f:7e:ca:ef:9a:e1:44:c6:35:d2:35:e8:81:
76:68:f8:59:39:b3:31:cf:ea:df:12:55:c3:76:ac:
cf:12:37:92:b9:5f:23:31:36:7b:b4:d2:74:43:d7:
ef:4a:0a:19:9d:2b:5e:d1:f3:b2:98:4d:ce:f3:3c:
38:8a:00:83:2d:1b:e1:0a:4a:8b:16:9e:8b:36:94:
6d:a7:33:54:c3:b2:0d:16:5d:0f:1f:bc:4e:1e:7e:
59:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:70:CA:7D:58:95:D8:F6:53:68:C7:B5:76:36:ED:53:BB:34:B9:AE
X509v3 Authority Key Identifier:
keyid:0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:73:2d:9a:ee:9e:5e:77:0c:53:e0:1d:9b:83:6d:91:12:f1:
1f:a7:f1:5c:b3:a8:6a:a1:78:06:45:49:d1:04:d7:06:88:74:
04:74:43:7c:60:ea:fd:8b:c9:13:a0:3b:d8:e2:81:f2:d0:cc:
ae:3b:91:63:b7:c1:a0:86:c2:4b:4e:d0:04:d6:b2:63:20:a5:
cc:31:6e:9a:49:42:54:e4:c7:2e:0f:88:cd:61:f5:4a:c1:1a:
24:a4:aa:d8:69:72:bd:61:0a:4c:d5:6f:a7:25:25:b7:06:30:
f9:64:83:d6:5a:3e:77:00:f3:a3:00:0c:9d:69:f4:0c:2d:eb:
21:6a:95:1c:a5:de:fe:55:5c:ec:10:54:3c:39:06:37:92:23:
b3:1f:fe:95:57:d9:91:84:54:e4:f5:0b:bb:15:1e:03:a0:e9:
4a:0a:53:d6:4c:61:94:72:7f:94:62:bd:9a:e8:cb:94:32:1f:
4b:ee:3e:3f:09:8c:6f:24:6f:ed:79:28:72:0f:a8:ab:b9:82:
b1:f2:fa:dd:ca:0f:a8:43:32:c4:fc:f2:e2:15:10:78:57:4c:
49:3c:7e:fa:00:cd:e4:54:74:2b:98:9c:13:10:9f:b2:1f:23:
1e:ab:89:22:6c:a9:2a:a3:ca:aa:a0:2c:4f:10:34:2c:b3:59:
c3:32:f7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:47:29 2025 by rpki-client