Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json)
Hash identifier: 8RkIyp0BL1tsixMT8FbuZAWV+DaSehzNwx1/RMBReoY=
Subject key identifier: CB:30:1D:5A:3A:45:92:78:A1:6E:25:7A:88:D7:37:58:4E:11:11:C9
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 01965538969D62CF2F51B935205F15AE80E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
Manifest number: 0F83
Signing time: Sun 20 Apr 2025 22:01:33 +0000
Manifest this update: Sun 20 Apr 2025 22:01:33 +0000
Manifest next update: Mon 21 Apr 2025 22:01:33 +0000
Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: /4lQTKCwj5wOr/DX9IqK/3UosZ4NGufnkrmkhC35XYE=)
2: sdcv864WQrJBi5xKuVwuLH2j6Tk.roa (hash: eFYC5loUXzRtmrgy7poaf0InOUtNFCrHQGg1kdVt86Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:96:9d:62:cf:2f:51:b9:35:20:5f:15:ae:80:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Apr 20 22:01:33 2025 GMT
Not After : Apr 21 22:01:33 2025 GMT
Subject: CN=cb301d5a3a459278a16e257a88d737584e1111c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8b:60:20:1f:c4:ac:60:e9:68:f7:7d:8f:b3:
59:f6:3d:9e:2e:71:bb:75:6a:67:49:5d:68:8d:83:
c4:fe:cc:a6:78:2b:fa:3c:34:99:24:42:2f:4a:53:
89:74:a5:ed:c6:2c:66:85:0c:17:62:5c:13:01:d3:
cf:90:6e:0f:69:bd:6c:5c:20:62:de:00:94:8a:32:
6a:ec:87:69:d6:78:38:7c:0c:51:07:2d:45:2a:66:
dd:73:41:a7:ed:4d:1d:a5:dc:41:77:2d:66:74:cc:
69:13:a8:d6:b3:94:9b:c5:44:fc:dc:80:47:04:2e:
f8:0b:74:b1:5a:13:64:20:5b:ce:fa:20:f1:9e:51:
f2:8d:25:60:bd:6d:ae:b9:50:68:d9:0c:4b:02:8a:
d4:37:06:5c:01:df:f0:6f:39:aa:11:1c:85:65:ba:
52:4b:fa:0f:16:18:9b:55:02:84:88:fa:e6:ca:6c:
a1:c2:30:a2:8d:ca:51:9c:2a:46:02:cb:d9:dc:03:
89:40:f2:55:86:fe:de:69:93:63:00:4e:b7:28:04:
90:e7:cf:26:a3:bc:e6:9e:74:db:69:47:3d:24:b1:
ef:a7:a0:5e:b6:37:84:93:ec:85:19:da:a3:e9:6d:
6e:8a:f8:8c:a4:88:ca:01:5f:50:d1:11:3a:82:52:
99:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:30:1D:5A:3A:45:92:78:A1:6E:25:7A:88:D7:37:58:4E:11:11:C9
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b9:ab:0b:84:bf:9b:05:18:7b:79:d1:f2:dd:37:d7:1b:14:
fe:8b:5b:e4:4e:cb:82:77:02:1c:e2:4a:f2:67:7a:a0:0c:d3:
1a:49:cc:d4:a6:5e:e2:10:bd:bb:a2:85:59:4a:de:a1:af:13:
52:22:0e:2e:e9:4d:bd:ce:62:27:9d:34:f4:29:d2:6b:95:a1:
77:35:b8:c8:d2:ae:e7:df:8c:81:f5:97:bc:9c:37:69:bf:c1:
3d:c6:be:08:81:85:ce:a1:05:5e:08:fb:dc:30:22:b9:e7:42:
88:47:f2:bf:41:28:ac:57:b2:fa:b4:9e:0d:e5:25:7a:92:fe:
da:84:16:f8:48:18:6d:f1:27:8c:ea:3e:b9:9d:ad:11:f3:5b:
18:e5:7f:f4:2b:3f:19:c3:7e:c7:9e:23:82:95:d7:82:66:38:
3a:a7:ae:36:cf:0c:71:71:78:15:57:9a:be:52:0f:10:ad:0a:
4a:e2:11:85:1d:74:ea:c0:cc:62:0a:17:97:f8:cb:a3:44:98:
f2:3c:c6:ea:10:88:97:a6:ba:c4:5d:58:8e:94:1e:17:13:9a:
2a:76:31:6d:1a:ae:e8:d5:aa:0a:8b:5a:89:aa:a8:c1:cd:0b:
93:1e:d8:d4:13:e2:b3:bb:60:f9:ea:e1:01:34:39:fe:26:24:
ba:10:dc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:16 2025 by rpki-client