Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
File: EXdPipmODyrxj3UnnjJlSBNpRIg.mft (raw, json)
Hash identifier: b0GPLYxzbKyjfPDr5JoC0i+mb1f0k7hM82bNDrUl4O4=
Subject key identifier: B0:F8:DD:E7:E3:28:99:24:08:E4:86:30:02:88:01:47:0B:5C:B4:D3
Authority key identifier: 11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
Certificate issuer: /CN=11774f8a998e0f2af18f75279e32654813694488
Certificate serial: 0196C3B9B75DDF4A7418DD1C148B7602DEAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
Manifest number: 037B
Signing time: Mon 12 May 2025 09:00:50 +0000
Manifest this update: Mon 12 May 2025 09:00:50 +0000
Manifest next update: Tue 13 May 2025 09:00:50 +0000
Files and hashes: 1: EXdPipmODyrxj3UnnjJlSBNpRIg.crl (hash: dsodFPQ5G+eVGYpCQs+TNSmVg3vJ9vO+QNyT2NWTr/I=)
2: lEOnyeTSrhVKx1TLByVlPzDKz8w.roa (hash: n8RWZqmzmommBj8oDYR9O53K32j7DKyp4tQyqLf5eY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:b7:5d:df:4a:74:18:dd:1c:14:8b:76:02:de:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11774f8a998e0f2af18f75279e32654813694488
Validity
Not Before: May 12 09:00:50 2025 GMT
Not After : May 13 09:00:50 2025 GMT
Subject: CN=b0f8dde7e328992408e48630028801470b5cb4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:4c:22:29:d3:fe:a1:f3:35:b2:ba:3a:52:
2f:ae:41:e4:d8:5f:4f:79:9f:3c:ec:56:9a:c8:3e:
23:5f:f3:da:97:77:92:ec:fa:4b:ca:a7:2c:19:d3:
31:7b:47:19:80:e4:c2:68:58:32:73:30:92:f1:e4:
fd:09:7d:5b:48:7b:ec:06:57:60:69:c9:ef:1d:a7:
27:52:dd:35:30:64:e4:4a:bb:ba:a8:d0:fd:e0:b0:
37:bf:42:f5:96:17:f4:de:58:03:5d:ea:fc:18:02:
0c:96:a6:69:e5:39:98:37:5f:85:c7:89:ff:d5:97:
2c:49:15:fb:78:7b:23:5d:e1:03:2f:9f:86:bb:58:
46:b1:38:51:8c:af:fd:75:f7:89:05:8e:7c:5d:ed:
3b:21:1a:7a:11:bf:48:42:94:0f:f4:55:ff:2e:95:
05:25:1c:13:a9:79:ea:30:3d:94:4c:9e:26:36:fc:
00:c2:55:65:79:ff:5e:89:7e:5e:03:9a:5a:a0:44:
4e:4d:64:c7:6b:44:61:33:ec:83:10:db:c7:3d:08:
b5:29:f7:23:fd:48:98:90:d4:ef:52:94:e4:a4:a1:
43:93:4f:c1:87:c6:3c:a1:cb:9c:f1:d0:b5:59:9e:
ff:3e:ee:79:ea:61:d6:ad:54:ff:1f:0f:60:f9:cc:
bf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F8:DD:E7:E3:28:99:24:08:E4:86:30:02:88:01:47:0B:5C:B4:D3
X509v3 Authority Key Identifier:
keyid:11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bd:40:1f:b7:d2:5b:4a:c8:04:fb:c6:3d:a1:56:d6:26:78:
57:61:d8:61:df:ee:fa:b6:b0:d7:bb:8e:d0:3e:f9:61:22:05:
d0:65:08:7c:e2:4f:a1:ca:86:cd:f7:62:50:4b:4b:4d:1b:af:
3d:ca:1b:46:6b:8c:e3:5e:e8:ff:d6:54:78:b4:3b:4c:58:8b:
d1:72:78:1d:d9:3d:8f:ae:40:4d:6d:5f:93:9b:45:41:c7:d9:
2e:9e:f2:2f:18:9c:55:65:00:6e:5c:49:b5:0f:b7:09:35:42:
77:0e:87:55:83:d2:f8:01:22:e8:e4:53:e1:82:aa:6b:9c:5e:
ae:a8:47:d9:98:f5:5d:de:6f:b8:d6:f7:87:11:14:3d:8e:49:
fe:3f:18:bd:29:6e:d5:10:dc:93:79:5d:78:78:95:94:6e:d4:
ec:58:16:f7:1a:cf:80:93:14:5f:00:55:6c:16:d4:68:12:33:
6b:0a:ac:24:cf:4a:49:8b:f9:2a:d9:f8:e0:41:1b:89:c7:13:
c7:a4:4d:f9:f1:95:0c:bd:c4:74:57:65:2c:c0:88:43:c2:bf:
d1:aa:f8:c8:e2:66:48:11:a3:78:b4:af:37:71:c2:fb:27:28:
60:cd:ee:40:f0:b5:94:5d:09:80:71:08:96:e5:b9:5f:0e:27:
7d:b6:be:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:03:45 2025 by rpki-client