Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
File: 0o_L31cryvk-FUTeEKF2yzARBrs.mft (raw, json)
Hash identifier: 5i2APIXR70/UB7chsnslnqggojkhj63frVvVB7vTxRI=
Subject key identifier: 7F:FC:48:57:79:59:3A:55:CC:92:A9:E2:E9:D0:5D:E5:75:1C:94:77
Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
Certificate issuer: /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Certificate serial: 019643D73B03209E9A66270C36AF98A74A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
Manifest number: 13F4
Signing time: Thu 17 Apr 2025 13:01:40 +0000
Manifest this update: Thu 17 Apr 2025 13:01:40 +0000
Manifest next update: Fri 18 Apr 2025 13:01:40 +0000
Files and hashes: 1: 0o_L31cryvk-FUTeEKF2yzARBrs.crl (hash: 22yBBhTxUkCVMNDiz2Y4w5TPdHoZdBUTNa3xm5YBx08=)
2: RoAvwASbb4l0ZFtVXgsI3PT0AVo.roa (hash: mZqoFIWYuSZ97LTT9lIF7CSJPGIZ96DKu7+NicnF+sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d7:3b:03:20:9e:9a:66:27:0c:36:af:98:a7:4a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Validity
Not Before: Apr 17 13:01:40 2025 GMT
Not After : Apr 18 13:01:40 2025 GMT
Subject: CN=7ffc485779593a55cc92a9e2e9d05de5751c9477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:65:6b:2b:73:48:ac:70:cd:54:d7:57:5b:
e7:47:82:1d:be:ac:21:8d:f8:65:f1:0c:e1:b0:4d:
e0:38:af:58:d3:92:6b:b4:7e:9a:67:80:4e:9d:1b:
7f:a2:58:32:67:07:70:60:89:e8:57:b8:91:a3:58:
bb:85:20:09:79:77:0e:0e:c9:c3:76:9d:a1:0d:61:
c3:62:95:71:bc:0a:07:1e:bd:83:a0:b5:d1:05:df:
e1:f3:d7:55:03:01:71:74:65:aa:60:65:20:5a:23:
6b:18:67:14:a9:2e:eb:18:97:36:e2:45:63:a1:60:
28:99:ad:7a:8a:5a:81:ac:ab:9a:b3:cf:7b:fc:48:
01:cc:aa:fb:e9:25:95:0a:7b:60:f4:b8:05:17:bb:
98:74:d6:9d:45:2b:1d:ac:76:b8:ff:02:22:94:b3:
5f:fb:33:74:78:31:de:cd:d3:8a:84:9c:52:a0:9f:
13:ba:ec:16:c9:10:8c:62:b3:00:1d:5d:10:23:18:
a3:b7:36:37:7d:c3:32:69:c4:e1:fe:d7:80:d4:96:
a2:40:01:79:7a:49:dd:b6:4a:ba:cb:e9:bc:12:f7:
97:f4:2f:6f:20:80:04:3d:2d:ed:57:3a:f5:d1:23:
fc:60:8d:de:c7:7d:16:4f:b8:35:54:52:dc:d0:3c:
d3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FC:48:57:79:59:3A:55:CC:92:A9:E2:E9:D0:5D:E5:75:1C:94:77
X509v3 Authority Key Identifier:
keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:ab:35:ae:c5:3c:b1:42:ff:54:b0:26:b9:d2:e0:bf:91:8d:
8f:09:c0:b9:ff:a4:c3:6e:6d:c0:c2:56:b2:99:41:44:aa:82:
86:93:7d:7c:d9:38:60:81:03:84:3b:d7:4e:3f:46:ce:1f:5f:
70:ce:c8:cd:f9:4c:ea:ec:89:9c:f7:5f:9e:ea:b2:13:f7:9c:
24:07:17:1f:dc:ca:d6:ec:f5:30:65:6f:61:dd:d2:f1:31:d4:
34:3d:60:52:01:7f:0d:a6:7c:95:2f:35:5a:7f:b1:ed:4e:58:
64:fd:eb:ef:a2:23:47:50:06:e2:38:5a:99:8c:20:98:5d:c1:
b2:c3:87:f2:b7:90:e8:ff:19:00:07:b1:c7:d1:97:23:08:71:
b0:72:ed:9a:6c:86:b6:15:e6:9e:84:88:78:3d:4f:2c:e6:0b:
78:6f:c1:f0:2d:06:d3:3f:77:8e:50:60:85:dc:44:3c:07:44:
00:1a:70:af:0f:17:b2:69:66:65:bc:4f:e4:6d:84:e7:59:31:
24:8b:bc:52:65:dd:e4:12:c5:dc:d6:cc:43:67:3e:7b:e2:83:
b0:69:0d:6e:4a:8f:6b:f4:95:a4:c0:69:19:93:08:d1:e4:9a:
2e:72:19:19:72:b1:db:e7:91:f0:03:d3:1d:d1:f5:f2:42:d5:
08:4e:21:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:45:42 2025 by rpki-client