Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
File: F0ATLlBfeLrQES-RtVmGh5U1ysA.mft (raw, json)
Hash identifier: NiRgIIyjq7Tbw6t721/g3zKd0CS7bRBNPe12X0VvLNc=
Subject key identifier: 8F:43:CC:4C:1A:6F:74:D9:48:98:9C:28:FB:56:BC:34:06:4B:64:83
Authority key identifier: 17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
Certificate issuer: /CN=1740132e505f78bad0112f91b55986879535cac0
Certificate serial: 019653B7BD010237FD7CF2E26AF8DC1D5B2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
Manifest number: 09AB
Signing time: Sun 20 Apr 2025 15:01:12 +0000
Manifest this update: Sun 20 Apr 2025 15:01:12 +0000
Manifest next update: Mon 21 Apr 2025 15:01:12 +0000
Files and hashes: 1: F0ATLlBfeLrQES-RtVmGh5U1ysA.crl (hash: jkBo7dy3mqbbkbHfSgvKa6uTVdfKDiqZGxO7Jw1142s=)
2: oxrkuug8AeqnDXiePFRxFStRfUU.roa (hash: 162L3/TFgaGzm3cQaHpx46n6luZunWT9NHyefRNQMS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:bd:01:02:37:fd:7c:f2:e2:6a:f8:dc:1d:5b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1740132e505f78bad0112f91b55986879535cac0
Validity
Not Before: Apr 20 15:01:12 2025 GMT
Not After : Apr 21 15:01:12 2025 GMT
Subject: CN=8f43cc4c1a6f74d948989c28fb56bc34064b6483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:70:f0:1b:3e:c7:c5:0b:b0:0b:ca:2d:f6:
c9:b6:81:b4:e9:08:40:df:10:39:fa:35:62:2d:6a:
7c:5d:13:10:2f:f5:ec:08:6e:9c:6a:14:4b:c2:94:
3c:07:f4:72:48:65:e6:fc:9c:84:3d:f9:0d:70:c1:
c8:8a:85:40:7e:ae:aa:40:ec:cb:33:fa:e1:a4:d6:
cb:21:e0:11:97:e5:f3:80:be:c3:bd:39:6c:16:cb:
4e:4e:df:52:5d:47:ff:b2:46:da:1a:c4:5f:12:a7:
ac:8d:6c:67:3a:e7:37:33:bd:5a:9b:30:bc:e2:bf:
db:54:8b:86:97:b7:fa:a5:e5:ea:a9:55:d1:52:b8:
cb:dd:02:c6:f2:b2:b3:fa:c7:16:f7:0d:8f:39:80:
9b:3b:42:89:7e:72:27:c0:40:b7:6d:0b:d8:11:f0:
33:ed:67:87:20:49:45:7b:15:0b:53:a2:ff:c5:b0:
cc:d9:7f:1a:f9:d6:46:61:71:05:34:72:b7:01:37:
cd:a2:21:5e:c7:9c:33:e6:28:40:61:e5:cf:34:e8:
bf:77:a0:00:4d:32:73:9d:98:26:25:9c:f5:41:7d:
da:57:b1:dd:ed:4b:77:0b:93:f1:20:06:e5:50:ee:
c7:8f:fd:12:0d:8a:af:1e:05:27:36:3d:21:f1:45:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:43:CC:4C:1A:6F:74:D9:48:98:9C:28:FB:56:BC:34:06:4B:64:83
X509v3 Authority Key Identifier:
keyid:17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:88:67:0d:dd:ac:db:94:12:a7:ba:a1:af:76:e0:ca:ea:5b:
99:0d:1c:8b:d1:98:83:a1:38:9d:5e:e0:fc:dd:20:ca:8d:d9:
3f:90:a3:0f:d1:e6:83:4b:d3:85:be:85:d6:2b:b9:13:77:da:
77:f9:a9:d5:94:d9:95:90:ca:28:c4:8c:17:a0:f3:ec:b2:2b:
44:b3:86:f5:2f:2a:1b:4e:5c:ab:b2:90:0a:37:fb:4e:4a:97:
2e:56:d7:f2:b2:3d:71:57:38:71:6b:4a:31:ef:94:aa:3e:26:
75:c3:f8:ea:c4:a8:89:ac:60:ea:d9:fd:50:c7:ef:fa:3e:d7:
d0:4b:fc:7d:33:d5:2a:5f:c8:18:ac:0d:51:22:55:c2:c7:a6:
5b:77:e6:8c:ad:64:21:00:83:f1:17:50:dd:5d:91:77:da:17:
c3:46:9c:09:7c:b2:19:95:9f:bb:a7:66:74:37:9f:d6:de:9b:
c0:fc:4f:a0:05:ca:a6:0d:57:46:29:81:6a:9a:de:8b:fb:1e:
75:92:f3:83:76:40:a6:17:20:68:ac:9a:3d:e4:3d:0a:5b:18:
2a:92:15:69:50:7c:d5:15:86:20:a4:a5:d6:b8:a8:cf:30:fc:
72:fe:48:7b:52:ba:7a:b2:ac:5d:b2:13:2f:37:38:d2:d9:89:
05:9e:7a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:12 2025 by rpki-client