Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
File: 0L1Mp_MxqirZEkCmWDoXbABeimM.mft (raw, json)
Hash identifier: F/7bi7V2MmXFIsbvOsij28T+EUIOi7qo6X2byxj2l3Y=
Subject key identifier: AB:97:18:32:1F:50:4D:82:41:57:34:B7:62:B5:08:89:45:30:84:17
Authority key identifier: D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
Certificate issuer: /CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Certificate serial: 0196AFC50EAD97E1533FDBFF295D5EBBC89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
Manifest number: 0AF7
Signing time: Thu 08 May 2025 12:00:49 +0000
Manifest this update: Thu 08 May 2025 12:00:49 +0000
Manifest next update: Fri 09 May 2025 12:00:49 +0000
Files and hashes: 1: 0L1Mp_MxqirZEkCmWDoXbABeimM.crl (hash: 6/9x7rHopfb/vUUaAwSX8lJxn2ZN2YDVzCLtcogwe/k=)
2: 1qLqqTllve4zCxVAYOzBHvpeKI4.roa (hash: vb9EDboxZKlgHYFjRAGPCvT6HrDSb4Ej+FgPnOTiZKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:c5:0e:ad:97:e1:53:3f:db:ff:29:5d:5e:bb:c8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Validity
Not Before: May 8 12:00:49 2025 GMT
Not After : May 9 12:00:49 2025 GMT
Subject: CN=ab9718321f504d82415734b762b5088945308417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:12:3d:b5:3b:7c:83:b9:70:e0:ca:90:2a:
2f:d0:77:06:b9:00:4f:c9:6b:f5:e5:e6:01:19:10:
63:33:df:e3:2f:ff:ed:c5:f0:1c:4f:ad:a5:95:24:
ab:86:2d:45:fd:82:7b:b1:ff:8b:c9:ea:56:58:54:
cb:2e:e0:95:f8:44:df:ef:d1:95:85:70:f8:6e:0e:
b7:d9:11:ed:7c:1d:a6:30:43:b5:da:ee:fb:46:82:
1c:0e:c6:b9:2d:7a:9e:53:e7:9b:5f:c2:9f:1f:57:
a8:a4:63:ee:d8:31:87:49:ed:d9:d5:cd:93:b1:9d:
39:71:47:5f:99:c5:ed:a8:9d:8d:1e:78:8f:63:77:
46:95:a7:fc:22:2e:e5:8f:bf:f6:26:02:34:44:6b:
d9:24:b4:26:42:d2:b6:ec:92:13:3b:44:45:a0:f2:
4c:76:18:25:18:ce:5f:d5:ab:e2:86:9f:ca:ff:e6:
e9:1b:9f:d7:75:91:f3:82:4e:80:df:4c:6a:30:4f:
21:e4:63:ad:77:d9:0b:57:4e:80:65:3d:a5:f4:4c:
ad:35:3b:a0:20:db:58:10:7d:e7:d5:25:13:99:a6:
98:5b:93:b5:86:b2:09:0e:64:71:ca:88:58:b2:26:
a4:e4:a6:82:07:66:9d:1c:83:04:cc:05:68:5f:63:
24:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:97:18:32:1F:50:4D:82:41:57:34:B7:62:B5:08:89:45:30:84:17
X509v3 Authority Key Identifier:
keyid:D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ae:9e:70:60:6b:c5:99:87:09:65:0c:af:77:0f:9b:11:d1:
51:3f:85:c7:9a:80:5c:d6:f4:03:84:04:67:2d:7c:4b:8b:0c:
dd:be:e3:af:61:8f:d2:f3:1f:07:27:f2:a4:4e:57:d0:58:31:
6c:85:8c:b5:da:68:82:15:e9:0f:6a:8a:d0:a9:a4:d3:f8:d8:
02:75:7a:1e:05:0f:59:52:16:ad:28:28:59:38:ef:80:1e:0f:
0c:f6:d5:3d:ac:0e:c5:20:5c:86:81:e6:a2:19:ce:f5:05:b7:
7e:6d:43:0d:22:9a:a1:71:e1:24:93:2a:fe:bc:38:86:91:36:
c6:71:76:df:e1:71:e3:0a:80:0b:f9:4e:a4:23:f8:75:4e:b1:
c4:22:09:60:5c:dc:c7:a2:0f:73:d6:9f:df:06:be:1f:91:d4:
b3:4c:ef:b6:ad:81:bb:57:1b:22:8c:32:3a:97:db:76:43:8d:
5d:2e:01:c9:f0:7f:a6:17:7f:04:b0:d8:24:94:b1:b1:56:b7:
f0:c4:62:2a:b0:29:34:8d:01:a2:a0:d4:33:38:1b:f9:2d:e4:
0d:d0:5d:d9:ff:3d:e4:c6:78:99:dc:50:a0:55:62:d0:e0:b0:
7b:b5:60:9f:22:aa:09:8e:dc:4e:43:1f:20:2d:12:69:30:2c:
10:56:b2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:43:38 2025 by rpki-client