Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier: EStrHx0duTuhu76sYFqJy5llTeuwJLeJOrhJBHJ9jcw=
Subject key identifier: CD:79:B8:19:A1:74:77:F6:C0:89:A6:64:36:85:B9:37:AD:FA:31:BE
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 0196A2ADBB02B1CB2704052D1641D91D14F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number: 0BC8
Signing time: Mon 05 May 2025 23:00:16 +0000
Manifest this update: Mon 05 May 2025 23:00:16 +0000
Manifest next update: Tue 06 May 2025 23:00:16 +0000
Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: ZE5XhQoui1sPgrECdD+gkaga6WSKydYHxJ2wBZk4OR0=)
2: QFnY02YmfQGJ4URcdKc-UJCZjYo.roa (hash: cz0+d02fJHBBngQvBEuS7ucPucnAX57nkrsYbr2NfQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ad:bb:02:b1:cb:27:04:05:2d:16:41:d9:1d:14:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: May 5 23:00:16 2025 GMT
Not After : May 6 23:00:16 2025 GMT
Subject: CN=cd79b819a17477f6c089a6643685b937adfa31be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:24:e6:b9:ee:1b:59:ae:ed:ef:42:74:07:4e:
5b:70:6e:c9:98:af:b4:4d:bf:5f:6b:73:8e:66:bf:
22:72:3e:33:d0:4f:ae:0a:01:c2:e1:4e:34:5a:ee:
5f:34:d2:c7:63:0a:df:e7:33:e9:f0:bd:40:ec:71:
eb:5e:06:c0:d0:8a:21:8d:4f:ce:f7:5a:16:20:bc:
9c:b7:5e:10:2f:bc:21:99:1c:96:be:98:bf:46:ef:
d7:23:1d:a4:bc:98:87:2b:ad:d7:34:25:65:d6:13:
6b:e3:e2:e4:79:dc:f6:fd:c1:27:80:97:0e:a0:69:
44:71:dd:00:0f:5e:60:20:40:3c:f3:30:b7:b9:1a:
78:ef:ba:d5:1f:3b:67:cb:69:a4:5d:27:4c:29:3d:
54:e5:ea:fe:d6:5f:2f:ac:c9:91:9f:60:89:b2:f1:
27:25:bb:58:b3:56:d9:dc:e7:44:4c:e6:63:0e:51:
a3:d2:f1:49:4d:d8:80:9d:8e:a7:0b:64:d3:1b:2a:
6b:b2:8c:38:85:88:e9:82:94:14:5f:99:88:39:b1:
6b:69:23:13:5f:27:e1:90:d0:6d:05:ff:f6:58:bd:
1d:69:a5:ae:ac:59:aa:3f:62:42:ba:e6:ef:bd:42:
d9:98:b8:45:db:ad:ac:af:47:7f:cb:0d:18:b9:62:
60:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:79:B8:19:A1:74:77:F6:C0:89:A6:64:36:85:B9:37:AD:FA:31:BE
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c3:8b:f3:dc:66:f3:83:2e:17:d1:82:8a:e0:45:05:42:fc:
b7:c1:72:52:94:5d:43:91:e5:c2:50:93:32:b8:56:e7:ba:48:
df:6d:37:3b:2d:09:80:8e:f7:19:fd:f1:d8:43:23:4f:af:29:
ab:fb:ac:50:a9:0a:ba:0a:d0:ee:3b:c9:08:93:60:8c:25:64:
bd:77:84:72:87:74:f1:8e:85:b3:79:7d:a7:83:f7:a7:b9:a3:
ea:71:21:e7:ad:34:d5:69:5f:55:7c:f8:ec:6c:70:6c:fa:90:
d2:fd:0c:60:0a:8d:65:16:e0:c6:0b:de:6f:8f:c2:da:f4:37:
0f:24:c6:c5:cc:b4:ec:93:3a:4f:36:9a:30:d3:9a:85:ce:15:
d4:00:e4:8c:17:a9:6e:d0:3b:e8:21:58:f5:5c:3c:21:19:9a:
be:4c:c3:c6:1d:4a:6b:72:2e:16:1d:1a:88:55:55:68:20:e2:
d8:20:c8:44:18:23:4b:6f:9f:be:65:87:06:92:26:bc:ce:48:
e3:29:66:2d:37:0d:41:a1:ae:8f:84:4b:e7:b0:cb:bb:25:44:
c0:ff:28:3a:52:d8:06:18:fe:6e:99:0f:f5:f0:cf:36:25:a7:
12:30:73:aa:1b:4e:51:6e:e9:0e:03:49:ad:38:50:e2:56:41:
68:a1:9d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:50:41 2025 by rpki-client