Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/v0K4S67twsRj3jf6TRRiR_PhS6E.mft
File: v0K4S67twsRj3jf6TRRiR_PhS6E.mft (raw, json)
Hash identifier: 6Al1XuNt/Z6nuxJIl2QMvVi3ylUw6y+IRzjd2Yc49U8=
Subject key identifier: B4:5F:CD:E8:0F:49:DC:24:C0:E8:1B:AD:84:24:C8:15:D5:1D:71:1F
Authority key identifier: BF:42:B8:4B:AE:ED:C2:C4:63:DE:37:FA:4D:14:62:47:F3:E1:4B:A1
Certificate issuer: /CN=bf42b84baeedc2c463de37fa4d146247f3e14ba1
Certificate serial: 0196C0139B20947A9893887873474374FD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0K4S67twsRj3jf6TRRiR_PhS6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/v0K4S67twsRj3jf6TRRiR_PhS6E.mft
Manifest number: 072C
Signing time: Sun 11 May 2025 16:00:32 +0000
Manifest this update: Sun 11 May 2025 16:00:32 +0000
Manifest next update: Mon 12 May 2025 16:00:32 +0000
Files and hashes: 1: v0K4S67twsRj3jf6TRRiR_PhS6E.crl (hash: sSVoULrTzBbQ6cF6rYLgJ/pqxvQ4xYL+mLr5r/F24So=)
2: z3cpAcwzNwvV9AKvmRvNJG_LZnE.roa (hash: 7Vpbgk+uh3xjUDJDPkW52/aM1co/xcHFVzxeA+KZtTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/v0K4S67twsRj3jf6TRRiR_PhS6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/v0K4S67twsRj3jf6TRRiR_PhS6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0K4S67twsRj3jf6TRRiR_PhS6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:9b:20:94:7a:98:93:88:78:73:47:43:74:fd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf42b84baeedc2c463de37fa4d146247f3e14ba1
Validity
Not Before: May 11 16:00:32 2025 GMT
Not After : May 12 16:00:32 2025 GMT
Subject: CN=b45fcde80f49dc24c0e81bad8424c815d51d711f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:b2:71:f9:81:34:52:e0:28:8c:18:3f:f8:
84:4a:d6:cc:2b:d5:75:82:db:b6:52:0a:16:7b:da:
df:70:c6:43:22:8b:e4:9a:e7:90:17:c2:b9:13:0c:
8f:5e:31:4d:91:87:a1:d8:13:38:29:7a:3f:76:3e:
52:7f:c7:a8:8b:b7:4a:94:43:33:4b:09:95:46:bc:
36:ef:7d:7c:b1:23:44:b7:56:e5:93:e8:fa:36:06:
96:e3:d3:db:3c:e4:e3:ad:b0:cc:8c:65:2d:b5:15:
b5:fa:bd:d7:69:e4:fb:ac:98:d2:70:ea:05:1a:39:
ae:75:d4:d9:3b:35:1e:47:5d:50:eb:36:7c:dd:3f:
c0:e4:8c:59:67:cc:81:98:1e:b1:01:ab:72:10:9a:
3f:af:6c:e1:b9:c1:63:64:76:b2:30:66:58:ed:1c:
43:2d:ca:f8:0b:65:69:ab:7b:a0:23:af:6a:7e:54:
b2:bf:76:30:95:b0:6b:50:f8:3b:f6:60:35:bb:4a:
ca:ed:00:4a:70:15:9c:17:0f:21:69:97:aa:92:19:
b3:5f:bb:85:93:f8:d0:d7:f9:68:45:1f:ba:78:ba:
e6:ed:92:d1:9d:a2:a7:6f:9f:e8:15:9e:f6:17:27:
8b:a5:da:ee:17:fc:18:30:4c:6e:1a:67:b7:38:9b:
66:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5F:CD:E8:0F:49:DC:24:C0:E8:1B:AD:84:24:C8:15:D5:1D:71:1F
X509v3 Authority Key Identifier:
keyid:BF:42:B8:4B:AE:ED:C2:C4:63:DE:37:FA:4D:14:62:47:F3:E1:4B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0K4S67twsRj3jf6TRRiR_PhS6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/v0K4S67twsRj3jf6TRRiR_PhS6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/v0K4S67twsRj3jf6TRRiR_PhS6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:87:67:d0:2e:2b:12:39:a6:2f:4b:16:da:59:88:df:81:74:
7b:5e:85:fd:cc:ac:87:d1:02:cc:82:a4:de:c1:23:52:01:7a:
30:e4:c3:30:42:20:fe:25:d3:69:f0:f6:44:ee:a7:eb:bd:33:
67:9a:2a:6d:17:2e:7b:2e:3c:3b:2b:58:dd:56:80:8a:1b:97:
0e:9a:5a:11:68:a3:88:81:af:3d:8b:dc:21:95:b5:af:65:b8:
c2:63:7a:0f:e0:ae:b3:dd:34:c4:a0:ab:dd:bd:9c:47:fb:89:
7a:d4:14:ff:73:70:e1:39:1e:68:0c:dc:22:e4:2e:9b:db:42:
6a:9e:0e:ac:c7:99:d7:74:ef:65:4f:9e:cf:6e:61:c3:88:9d:
7b:79:23:89:18:5c:b0:d0:52:8b:c9:b9:e2:47:50:a2:f7:4a:
70:23:43:53:19:e7:2e:bb:67:09:e8:87:74:6b:d1:53:71:d3:
db:0a:ca:55:fe:f9:57:5a:f9:6a:70:44:f6:9a:63:a2:f8:58:
33:09:26:5c:cc:4b:cc:de:96:25:c8:85:4f:6f:3b:eb:81:2b:
59:11:7e:08:77:e3:77:99:82:79:e1:a6:6e:b0:93:89:90:b0:
7a:81:fd:0f:d0:d4:af:62:d6:e2:59:c5:cb:8d:2c:d1:45:4a:
56:54:b1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:04:08 2025 by rpki-client