Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
File: DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json)
Hash identifier: tQ1Hdb6ciyVRg5K72vSF07tmvX2OOixcUNp7QwVohp0=
Subject key identifier: 5A:F6:25:2A:56:A6:6D:CC:0F:7B:42:2F:74:17:68:45:52:E3:16:A7
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial: 01963E0AF70D2348C54F9F3F6D3B741360D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
Manifest number: 0B8A
Signing time: Wed 16 Apr 2025 10:00:27 +0000
Manifest this update: Wed 16 Apr 2025 10:00:27 +0000
Manifest next update: Thu 17 Apr 2025 10:00:27 +0000
Files and hashes: 1: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: LDMsN2IPwjRI34OeqDsHwIvBY2eTVArYaUusBSOPk6M=)
2: JSDk17ahgjuw722aAK05JMcAXY0.roa (hash: /NFnbJGiq89G5CeYaHNRHk4PJoghq/D0jyLC3XejUq4=)
3: ziX8_hpTF8ziYiuxKjrOFhfqeQo.roa (hash: HyWFcNCrTB5jYAeqdAfWDrR8oFNvkYOvB8sslFQIfBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:0a:f7:0d:23:48:c5:4f:9f:3f:6d:3b:74:13:60:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Validity
Not Before: Apr 16 10:00:27 2025 GMT
Not After : Apr 17 10:00:27 2025 GMT
Subject: CN=5af6252a56a66dcc0f7b422f7417684552e316a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:02:d7:14:e3:61:be:6e:d4:71:df:b6:4c:
8b:c2:eb:ed:05:a3:04:e5:3a:f0:29:e9:2b:fb:f1:
42:21:3e:59:72:5e:e8:09:19:13:65:71:18:19:12:
0b:ad:d0:10:ea:ad:6a:be:b5:f0:f6:17:c2:a9:db:
b9:fc:4e:b4:f7:3c:51:69:37:20:76:d6:04:f2:4e:
0e:a8:c2:32:e2:8c:e7:2d:e3:30:3b:a2:c1:a4:28:
cb:92:ee:3b:63:29:1f:4a:4e:7c:8a:49:24:cd:48:
84:bc:61:ec:9d:f2:38:10:50:bd:3f:a1:f8:b3:9a:
46:13:07:90:ee:35:57:7e:9b:1f:f0:a1:bc:49:2a:
07:c1:4a:b3:39:59:90:72:5f:7c:ec:f2:3d:5f:45:
9d:05:e1:3a:84:eb:ea:d4:5e:c3:34:ae:94:72:64:
f9:f5:24:bc:a7:ae:9f:ee:1c:9b:6d:68:1b:10:82:
0f:01:cb:bf:3e:db:99:aa:cc:91:14:10:d8:cb:f1:
b8:44:50:08:c6:d3:33:46:27:a1:cd:95:7b:c6:4e:
4e:79:eb:67:9e:9a:d8:41:bf:0a:e5:1e:d5:10:05:
e8:74:ea:72:3b:cf:62:d6:99:a2:2e:7f:60:93:05:
ac:63:cc:b2:40:1b:e4:d2:c6:a7:34:89:9f:8b:b6:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F6:25:2A:56:A6:6D:CC:0F:7B:42:2F:74:17:68:45:52:E3:16:A7
X509v3 Authority Key Identifier:
keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c0:03:39:bf:32:16:9f:9a:63:a1:75:80:0c:d0:bf:34:a0:
34:f3:34:30:08:fe:72:f7:7a:0c:b5:5d:9e:97:59:c7:f6:d2:
b2:9c:49:b5:1b:d2:ff:6d:9f:0c:fe:a1:75:62:7a:d0:3c:6f:
3e:6a:cc:ac:da:8d:95:fc:7b:12:60:7b:e1:6e:ef:11:83:4a:
96:89:c6:ad:d8:3a:45:bc:85:de:af:69:94:55:35:6b:a0:d8:
bb:83:8c:7f:de:b8:b7:5d:c8:84:d7:f4:03:c8:a2:0c:74:35:
64:ee:1b:5a:92:13:06:52:b9:10:6c:cb:d4:a0:82:71:13:c6:
ad:39:78:55:f1:82:f0:b9:4f:93:f0:13:90:c4:5d:37:24:08:
55:8a:5c:d3:e7:98:15:f6:8f:28:b1:dc:a6:55:38:5c:68:76:
82:1d:40:29:e6:c5:80:1f:b2:1f:1b:ba:9e:0f:28:71:4f:d8:
fa:65:1e:e6:3b:39:34:7d:4b:11:cc:ce:54:e4:5e:eb:39:0e:
7d:11:20:98:a3:dc:fb:5d:fd:4b:da:59:2f:7a:18:e4:cb:b6:
39:60:9e:26:b8:ae:cb:2d:62:fd:2c:93:dc:60:94:49:85:0f:
b8:69:55:7c:b6:3c:60:57:b7:fc:fc:47:64:cd:60:3d:e0:41:
b9:25:de:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:49:59 2025 by rpki-client