Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
File: 81TlIOe7fhP1Ms7PBagtK3l5UqI.mft (raw, json)
Hash identifier: ouibe4ZhHLeWqnfHdnw8WjK6xhYJY1LzelfDSdKpfoE=
Subject key identifier: CA:04:E9:19:18:1E:07:8E:22:49:4F:EA:0D:41:15:29:06:F2:D4:C2
Authority key identifier: F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
Certificate issuer: /CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Certificate serial: 0196B258DAD7CA9F5523947657744DEAE3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
Manifest number: 0A86
Signing time: Fri 09 May 2025 00:01:29 +0000
Manifest this update: Fri 09 May 2025 00:01:29 +0000
Manifest next update: Sat 10 May 2025 00:01:29 +0000
Files and hashes: 1: 81TlIOe7fhP1Ms7PBagtK3l5UqI.crl (hash: t7vcsQ/S9scx8HYidr6tRsXu5xqIH7aYLCLTVIDlf70=)
2: 9R7qE2JixKC-vbV8JeqORUi7upg.roa (hash: qMwpouu0cneK+WPX+gDmDCVwU3yx/zaa1DbEZEykJcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:58:da:d7:ca:9f:55:23:94:76:57:74:4d:ea:e3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Validity
Not Before: May 9 00:01:29 2025 GMT
Not After : May 10 00:01:29 2025 GMT
Subject: CN=ca04e919181e078e22494fea0d41152906f2d4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:f2:24:62:9e:7b:17:3c:d7:d8:35:e7:f7:
64:1e:4c:dc:74:81:35:cf:17:18:01:cc:0a:bb:7f:
30:4f:4a:68:71:df:74:b7:fa:75:3b:10:f6:97:ed:
d1:61:8f:3b:db:79:28:24:27:a6:8d:2d:ba:a3:30:
26:b9:af:c8:b0:a0:6d:0c:8b:9e:15:0c:eb:f6:8f:
90:69:9b:ad:32:30:f3:3e:46:19:b6:e2:49:b6:36:
3f:28:66:13:9e:aa:33:9f:c1:7f:35:94:8a:79:ae:
ff:67:a4:05:67:de:a2:31:ad:1c:84:c2:22:c4:f3:
5a:d8:17:ac:d9:a0:e2:d0:fc:09:cc:07:7e:0b:f7:
63:8f:67:b9:1e:b1:19:c5:32:cd:e8:1f:45:e3:eb:
40:6c:a1:a6:2f:a9:50:59:6b:48:4f:aa:4d:47:ec:
49:0e:8a:83:a1:4c:48:72:53:b3:4a:5a:0e:ad:63:
7c:a0:cd:e7:2c:d9:7f:3b:ba:f7:a9:b1:0a:a5:97:
0e:ac:b5:ed:ab:39:d3:88:9c:9b:03:cb:ef:3b:75:
47:ad:bd:9d:4c:50:43:b6:76:21:31:02:be:91:e6:
0c:ea:42:df:83:52:f4:c2:a2:69:ba:82:69:35:33:
04:8b:a7:90:b3:25:4d:47:31:97:f9:b6:81:49:13:
8a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:04:E9:19:18:1E:07:8E:22:49:4F:EA:0D:41:15:29:06:F2:D4:C2
X509v3 Authority Key Identifier:
keyid:F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:92:70:72:61:89:62:ac:6a:eb:d2:10:d4:6b:bb:eb:d8:28:
ce:60:2f:ce:09:3c:de:2a:b1:aa:54:b5:c6:15:95:89:48:45:
58:0c:26:51:c0:63:4f:c4:84:d5:ea:dc:03:e9:ae:82:01:40:
7b:5b:0f:07:a4:df:3a:0f:3b:b2:61:21:57:cd:fd:83:57:44:
6b:0f:31:a6:c5:b9:5d:46:f7:07:7e:81:f1:ce:0f:63:91:14:
8a:18:88:f4:93:f0:ce:9c:a2:e7:be:d6:85:9f:91:a2:79:46:
cf:37:ef:d2:a4:88:7a:7d:e8:a0:2c:ed:0e:5e:76:5c:ae:a5:
d1:a8:4d:2e:f6:d1:3d:63:e1:95:dd:d8:cc:29:29:91:b4:13:
62:00:c0:7e:15:f8:96:8c:1e:27:57:e2:93:33:50:fb:f6:15:
3b:32:05:e8:d5:0b:d0:46:f5:b2:23:a5:87:79:57:93:c0:1a:
2c:a5:ec:45:5d:b4:04:5b:8b:03:e9:9e:ea:32:33:be:42:ad:
a5:34:90:5a:11:d2:8c:42:e5:ee:f9:c6:b6:58:37:59:b2:b6:
02:04:ee:14:8e:94:96:71:df:ee:c7:8e:d3:bb:12:b8:28:7b:
c7:b6:d3:b5:d0:70:41:5c:78:4b:72:75:ef:c3:ca:7f:47:a0:
ca:53:2e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:57:45 2025 by rpki-client