Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
File: sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft (raw, json)
Hash identifier: PxP1DSnYDVLg0ePgjDYg6u70SzO1+ZiRFVFk9rr2vO4=
Subject key identifier: 01:0F:18:08:D8:DD:F0:82:9F:24:9E:E7:4D:70:E5:66:A0:8E:78:EC
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 01964EFEA0F1D611BEF6DF40CBC323832D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
Manifest number: 0BDF
Signing time: Sat 19 Apr 2025 17:00:32 +0000
Manifest this update: Sat 19 Apr 2025 17:00:32 +0000
Manifest next update: Sun 20 Apr 2025 17:00:32 +0000
Files and hashes: 1: WiIPyXHByzAssjj4VKSqXNq3hNo.roa (hash: zCz09ISW2vqCRWl6+kt0e/gaUd26cQmDKkxwLzxkeJQ=)
2: XLNp588BlhjTzq9wL8KooDNiDfQ.roa (hash: yqzj3pa+xK6sQ61wkjeNUDLd0sOcE9ePSDM9S9DIM0g=)
3: sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl (hash: x4ilvcDbxKVX20cLmnklOra4+IG1+ECDZNZMAFlwJJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:a0:f1:d6:11:be:f6:df:40:cb:c3:23:83:2d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Apr 19 17:00:32 2025 GMT
Not After : Apr 20 17:00:32 2025 GMT
Subject: CN=010f1808d8ddf0829f249ee74d70e566a08e78ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b4:38:b5:f2:91:7f:11:51:43:d5:f7:58:d1:
f3:93:99:7c:d6:b2:46:4d:51:01:80:e0:bf:8c:ba:
20:a2:77:99:ff:6d:e8:de:f5:4d:a8:fa:9c:33:48:
0d:da:fc:2b:ed:6a:2a:03:e5:6f:6d:d5:20:60:68:
36:d5:f3:74:3d:21:de:1d:55:13:50:8d:fa:9a:2d:
5c:13:4d:78:90:c4:82:1e:02:c8:44:c2:20:86:09:
09:00:33:29:10:09:5b:9b:7e:28:88:49:b6:b5:a0:
78:1e:29:30:be:a5:08:be:85:1b:05:f4:ca:c8:22:
b9:8c:ff:cf:d0:7d:a5:bd:9b:23:97:b5:1c:24:a9:
28:41:25:31:35:0b:cd:5e:8d:11:a2:43:85:21:2d:
99:15:2a:23:a1:78:b5:38:33:6d:1e:1a:5d:80:ac:
c4:63:b9:15:f6:d0:e7:a6:b0:c9:77:e9:5c:1a:e0:
e4:02:2e:1d:25:fe:9e:a8:d6:9c:9b:6b:61:6b:1a:
26:67:c9:aa:c2:0d:76:f6:c2:5e:49:58:91:b9:38:
90:bd:f1:8c:b1:1c:70:d9:9e:8d:35:4a:78:af:28:
08:db:1d:ed:21:de:d8:55:1d:44:1c:0f:b4:2f:3c:
4f:d7:1e:0e:dd:75:7e:5c:48:94:45:93:7a:52:ce:
0b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0F:18:08:D8:DD:F0:82:9F:24:9E:E7:4D:70:E5:66:A0:8E:78:EC
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:da:47:0f:83:3b:ae:1e:da:66:95:8a:30:1f:d2:d5:d6:c5:
4b:fa:f9:16:41:9d:3d:92:35:d2:5c:d4:ba:67:e1:88:1e:06:
bb:25:b4:ca:bd:26:5c:91:67:dd:25:e4:60:ff:3d:e2:a6:f2:
5a:03:c5:a6:06:18:ec:4e:4b:37:1d:ed:5f:f1:8f:f7:13:62:
de:56:00:2a:88:cd:3e:d5:e9:33:b7:c2:9e:8e:0d:27:07:9b:
99:62:4a:e8:9f:d8:a8:38:a8:f3:bc:47:e3:d6:1d:b7:b9:f8:
17:c1:fd:00:f8:10:0c:01:12:18:df:c9:56:31:d1:4f:14:69:
18:14:99:e3:78:b1:e3:d7:ca:0b:67:ca:ea:0f:b8:9c:04:19:
ad:8b:dc:fd:b4:1e:94:23:45:76:58:56:10:e5:33:a1:64:db:
ac:78:56:e0:0e:0b:02:21:98:eb:a8:2a:e4:99:dc:ff:0f:69:
3e:4d:9c:93:4d:ef:59:d4:84:5c:8e:cc:d3:04:00:36:f0:73:
2f:fe:ec:37:fa:96:43:e9:de:31:31:ed:63:2e:d3:65:a7:c6:
7b:b8:c0:8a:4e:f4:22:2b:2a:31:2f:9b:58:55:e0:ca:79:b1:
4c:4f:07:a5:24:a2:b7:54:8a:87:73:e6:ac:4c:c1:61:eb:c6:
c7:97:e9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:45 2025 by rpki-client