Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier: iKTDa59fUARXHUaErU7COKD1DKkkulSH+7NiXUSVUqQ=
Subject key identifier: 6E:E2:89:70:0C:68:BF:A0:BC:C1:3C:CE:1C:A1:11:97:46:08:BA:81
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 0196BF6EED92759683474F46D17EF613FB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number: 120D
Signing time: Sun 11 May 2025 13:00:40 +0000
Manifest this update: Sun 11 May 2025 13:00:40 +0000
Manifest next update: Mon 12 May 2025 13:00:40 +0000
Files and hashes: 1: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: BZjh4CoIUaAkZDdMbt6Z+FBw6e46/dGBikdpOTdmtFQ=)
2: EAKe9346ONHQ_VuM_WxVCj_cv4Y.roa (hash: 5H5/ZpQAnmY/nM8N1VtyRS6/84qLoSsU0G+AmpT2T/k=)
3: RBJ-L0gnLCM7Rv9f1a6uxn7Yu-0.roa (hash: 4xHToao8czKd/Xx3uSwWIpAVRfAfaES7tBaw71UFRvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:ed:92:75:96:83:47:4f:46:d1:7e:f6:13:fb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: May 11 13:00:40 2025 GMT
Not After : May 12 13:00:40 2025 GMT
Subject: CN=6ee289700c68bfa0bcc13cce1ca111974608ba81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:56:4b:54:1b:a9:55:ce:49:3f:24:fc:32:d6:
1b:af:7f:6c:1c:2d:82:11:85:4a:fb:a5:01:65:dc:
a1:5d:27:15:21:a5:85:58:c5:e5:47:0a:b5:1e:88:
72:bb:51:20:ff:e7:57:11:89:d7:42:a9:2b:cd:55:
26:c5:3f:30:ad:06:62:f7:50:f6:ba:35:a8:15:5f:
1d:82:85:f6:9f:d0:42:7c:d4:d1:38:c2:55:04:e0:
67:eb:7a:b4:f7:84:4d:1d:76:57:f1:3c:30:5f:12:
d9:ab:51:f6:78:41:42:4d:e0:6e:1c:42:63:32:92:
2c:cf:ba:92:f9:60:d4:c8:57:8b:61:17:5f:56:a2:
fe:ba:42:33:db:3d:e7:02:3b:43:ee:39:9d:6b:b0:
37:08:e2:5c:c3:a4:0b:89:e5:63:6d:0c:e3:97:9f:
ac:28:51:14:1d:1e:00:1b:9f:9c:ba:57:79:17:d4:
d5:0f:a2:9d:4c:b3:be:6d:ad:b6:d4:b4:8b:df:af:
66:f0:4b:d1:01:64:da:aa:16:89:79:a3:c1:84:fe:
36:d4:a7:e8:a9:b4:d1:5e:4d:9c:df:39:cd:58:37:
eb:2f:da:e4:4a:bf:a0:ba:d1:c1:28:9f:e0:67:a5:
3e:cb:ef:a7:b9:73:42:2b:b0:88:a0:3c:7b:84:7c:
2f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E2:89:70:0C:68:BF:A0:BC:C1:3C:CE:1C:A1:11:97:46:08:BA:81
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8e:29:21:d0:70:fe:a2:86:11:cf:6d:07:9d:2a:35:14:b4:
bc:9b:f5:29:88:bd:e6:58:00:26:61:78:ee:13:79:16:44:8f:
51:3f:ca:4d:22:3c:9b:c0:1d:a4:0d:62:d2:57:d0:15:e3:1a:
49:87:1f:53:a5:95:50:17:72:08:21:eb:17:e0:1f:d8:40:55:
f1:05:2f:84:cc:7e:16:f9:5f:21:2f:17:4c:4b:35:8b:4d:a5:
2a:d2:0c:69:14:3a:97:5e:79:46:78:65:33:6b:1f:4e:72:20:
d0:d2:4e:6d:43:ee:bc:1d:18:42:c9:aa:c8:3d:f7:be:89:ec:
8f:54:fe:ae:24:ca:ab:1b:16:57:6a:d7:f4:99:9a:ac:45:39:
be:10:d2:6d:c2:dc:ce:3f:c7:78:98:a4:e1:da:fd:23:b7:4f:
4f:a3:4f:5d:e4:f0:87:4b:6e:8f:6b:ac:a8:dc:74:fd:0b:a7:
93:04:f0:2c:ca:79:b8:33:9f:ae:4c:64:c1:4a:6f:70:23:d6:
66:45:cd:8e:67:f1:2c:ac:04:4f:5f:26:2b:80:5e:8a:4b:37:
ad:4b:df:37:e3:0d:58:ec:af:02:92:d4:42:9b:38:1b:58:f3:
89:e5:6c:f4:d2:05:27:54:79:4e:d2:01:0e:0d:02:e6:4e:87:
b4:40:6c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:05:18 2025 by rpki-client