Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
File: _dcAK_Oi6s_IgdXhoCEQmMZplWw.mft (raw, json)
Hash identifier: 6YlfwViGR0/BmnSH2mkoO9T+fposbfUHTKZOnEN6w6c=
Subject key identifier: 8D:CB:15:B8:B5:B8:03:F9:1A:6A:E3:F9:E9:CF:5E:D2:35:F0:CA:AF
Authority key identifier: FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
Certificate issuer: /CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Certificate serial: 019512B583903FB8F23A0E054FAC2DB9F741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
Manifest number: 0E52
Signing time: Mon 17 Feb 2025 07:00:40 +0000
Manifest this update: Mon 17 Feb 2025 07:00:40 +0000
Manifest next update: Tue 18 Feb 2025 07:00:40 +0000
Files and hashes: 1: _dcAK_Oi6s_IgdXhoCEQmMZplWw.crl (hash: LqufhU+MRuXZJzBIRLvzCfBQIpO2nc5YOmA8exL99eo=)
2: uzHsVm3pK-eWySg6DxW1LNadfN4.roa (hash: f7Ekdfxt1w1Ik7dpXGT0WWQ4k0292INTL/KsMP+l94c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:b5:83:90:3f:b8:f2:3a:0e:05:4f:ac:2d:b9:f7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Validity
Not Before: Feb 17 07:00:40 2025 GMT
Not After : Feb 18 07:00:40 2025 GMT
Subject: CN=8dcb15b8b5b803f91a6ae3f9e9cf5ed235f0caaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:5e:8d:70:78:ca:b7:88:ef:6c:ce:f4:71:
96:ba:6d:fc:ed:5f:94:e2:37:3a:34:4e:43:3b:fe:
ad:1c:b4:f7:f9:90:ee:a2:46:c6:c5:8e:a2:b3:6b:
17:3c:7c:8b:d9:d0:27:52:0a:0c:93:d2:90:ff:ee:
e7:e5:5a:4c:0f:db:e1:49:d2:39:00:5a:e1:49:2a:
e2:d9:8a:f3:65:5d:97:82:55:67:7a:4c:64:18:2b:
33:82:b4:27:25:86:d5:07:a8:3d:3a:97:7d:10:2d:
9b:64:8a:f9:50:70:ba:cc:d4:b2:50:39:26:a7:ee:
30:32:44:0a:f7:6b:bf:c3:40:27:61:5c:65:e7:62:
53:3c:9d:b7:e5:cd:c2:11:8d:d7:1c:15:7c:ee:36:
4f:f9:d6:41:fa:53:48:61:9a:16:39:da:02:59:0a:
85:2b:ba:27:dc:86:13:91:af:0d:1c:36:e1:4f:cd:
dd:7f:cf:ec:e1:7b:ab:8b:5d:57:4f:a1:a6:cd:85:
76:75:33:9a:97:01:6a:b6:ec:74:10:fd:cf:a5:45:
07:ef:96:cb:52:62:89:36:d9:de:72:9c:db:cd:aa:
b2:56:76:7d:20:7b:d4:74:a2:57:1c:f2:9d:4a:cd:
21:cd:41:c5:69:da:e9:8f:4c:f6:a4:08:9b:14:b0:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CB:15:B8:B5:B8:03:F9:1A:6A:E3:F9:E9:CF:5E:D2:35:F0:CA:AF
X509v3 Authority Key Identifier:
keyid:FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c6:7d:7f:6c:6e:bb:c7:ee:b3:f3:9e:f8:40:b9:a2:85:13:
23:ab:7e:44:62:e1:d9:14:3e:43:ed:f9:59:f8:a4:64:60:eb:
1c:09:49:91:de:e8:d3:52:66:b3:a6:4b:2a:f0:7a:68:06:01:
e8:0e:fd:29:d4:a0:9a:d4:f2:f7:c1:44:fb:7c:95:20:44:81:
03:03:f5:84:e1:2f:ce:bd:a7:a0:ff:5e:d0:03:4e:fb:91:72:
5c:e0:58:d4:fe:45:c0:f5:a2:33:a9:1a:3c:c5:8a:4f:88:d6:
6a:f5:cd:e8:bb:ea:ec:91:5f:4a:c7:6a:bc:bd:54:a9:d0:69:
a7:2d:a5:a6:15:46:e1:39:f3:1d:c3:f1:5f:a4:fb:2e:17:2c:
47:9a:75:6f:14:f5:a0:67:36:32:28:81:7c:38:ee:85:74:d9:
87:6e:7a:46:6a:66:44:bb:4e:f2:0c:5c:3d:c0:b1:ae:1d:13:
ef:98:2e:98:c4:b7:3a:3b:e4:9f:48:ba:ca:72:c5:54:d8:41:
d7:a2:84:66:d4:d0:31:d5:2e:83:82:f7:bc:e4:a9:47:e5:3f:
ca:95:9a:6d:e8:43:37:d0:f8:cf:22:21:15:fe:88:e9:3d:dc:
94:5b:0c:d2:95:12:59:c0:92:da:cd:b9:c2:ef:c7:4e:6d:8e:
95:29:22:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:54 2025 by rpki-client