Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: oW5dFWts1HI9KsRYXizVYb4rWWhpgp/hLbksJxM7910=
Subject key identifier: 9A:D4:46:8C:DC:6E:70:82:8F:5A:DD:0B:99:EA:1D:45:54:8B:3E:DC
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 01969CE2EA062C6845B939BCE99E844B9B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 0283
Signing time: Sun 04 May 2025 20:00:38 +0000
Manifest this update: Sun 04 May 2025 20:00:38 +0000
Manifest next update: Mon 05 May 2025 20:00:38 +0000
Files and hashes: 1: fwI8WQwy5fbXMlIKzIdcXaYEMU0.roa (hash: bPDJhxbWV/nawvua5orm+AkfyQvA9xpKaA3uAdqYMPA=)
2: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: hnGLAA50pSd07vQiAEvHoU3c/y0XlJLx2iDVLS4nBLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:e2:ea:06:2c:68:45:b9:39:bc:e9:9e:84:4b:9b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: May 4 20:00:38 2025 GMT
Not After : May 5 20:00:38 2025 GMT
Subject: CN=9ad4468cdc6e70828f5add0b99ea1d45548b3edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:04:f0:2f:65:4a:fb:ed:3c:1c:1e:c1:a3:
cd:7e:f4:f5:fe:aa:b8:5b:c7:0f:8d:02:2e:e5:a8:
6f:b9:3c:2b:1c:d0:3e:b5:5b:a0:17:29:63:ad:fe:
75:f0:df:a0:28:db:38:ac:dc:a1:5d:44:ba:6f:3a:
65:dc:59:eb:d1:98:e2:8f:52:04:46:76:6e:d6:3e:
66:c0:28:0a:e9:45:96:ad:98:0e:1c:aa:48:ce:ae:
62:5a:e1:b3:de:92:87:d5:3a:5c:c9:21:25:ae:be:
af:11:61:55:bf:83:f2:b4:b8:27:55:ab:1d:b6:db:
d1:43:18:ee:6f:f8:11:f6:d7:60:0b:c4:bd:17:46:
11:0d:fb:04:34:58:0c:7d:40:fc:85:e7:26:bb:ba:
60:21:e0:bd:14:93:0e:04:cc:43:27:0d:58:b1:0e:
35:69:95:e2:0e:00:22:c4:89:e4:01:73:ff:ab:38:
5b:cd:a0:86:51:9a:16:cf:b5:86:9e:87:9c:67:fd:
41:7a:25:3e:02:81:05:bf:b4:50:6a:ea:bf:20:7e:
a1:8a:37:34:6f:1a:f5:d5:be:71:d1:c6:8f:f5:ca:
d5:b0:0a:ab:f1:10:3c:da:76:00:20:b1:1d:53:b4:
4f:9a:55:83:a2:41:74:d8:7d:4e:38:d5:6d:6c:62:
f5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D4:46:8C:DC:6E:70:82:8F:5A:DD:0B:99:EA:1D:45:54:8B:3E:DC
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:35:65:33:de:c7:88:43:f3:e2:7f:92:4e:1b:a6:39:a6:10:
18:58:e3:1b:9c:11:9e:2f:e1:76:d5:93:fc:49:75:3d:ce:d8:
53:7f:60:ce:33:2c:e7:96:89:da:e1:76:7f:95:9c:df:08:a2:
53:e6:af:3a:56:9a:b4:5c:28:8b:bb:ac:2e:bb:e3:5d:d6:19:
75:45:a3:4d:5a:ea:a5:29:15:80:3e:31:5b:d6:e5:09:96:dc:
eb:d6:d3:8d:0c:53:67:f4:2a:1f:f2:4d:72:ed:41:08:e4:50:
e0:d5:99:94:1d:a5:1c:9a:0e:95:77:fe:33:e9:7a:f3:e7:7c:
6e:9c:41:b3:45:40:b8:5b:28:0a:2d:55:98:2f:df:b1:a6:07:
5a:0b:dc:93:46:81:6b:3e:a5:ee:7a:81:21:65:ce:f9:e2:be:
4f:d8:df:89:c2:e9:89:57:9d:a5:b5:20:dc:3a:62:29:44:d3:
ed:b5:a3:7e:d7:d3:8c:f2:43:f5:71:98:e3:13:85:43:e4:5d:
56:f7:e9:de:60:3a:ca:a9:e9:2c:4d:26:7c:8c:5c:99:ea:6d:
d4:8c:6e:2e:b8:61:b5:e4:6b:24:ef:08:46:53:d6:6e:54:f0:
31:7e:3a:26:c1:c5:c9:37:61:ce:d3:36:c7:dc:b3:b5:57:ed:
4e:45:79:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:38:52 2025 by rpki-client