Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
File: pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json)
Hash identifier: uRgqxak/HPvT5pNyNngkApIhg7tC51EwcE450C+Fq7w=
Subject key identifier: BC:A1:C4:1C:8D:37:AB:7F:57:8F:47:56:B9:DF:57:03:28:50:F4:CE
Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
Certificate issuer: /CN=a42d0b826644a18387cf8322db7e646af63d986a
Certificate serial: 0196B8914EE30D2F27C03788DE8D4C78A31D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
Manifest number: 029C
Signing time: Sat 10 May 2025 05:00:52 +0000
Manifest this update: Sat 10 May 2025 05:00:52 +0000
Manifest next update: Sun 11 May 2025 05:00:52 +0000
Files and hashes: 1: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: UYKSydgkSJrLAmJVdqim8oAmSsvfHo+gvL7W5/bZURA=)
2: tHHfiSksDZsfZV-Vj9_kGC4h-Ro.roa (hash: EIcBQ1/xG4TmRqAx5pqcLS0viz8fwAhZIDtmSkzjKwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:4e:e3:0d:2f:27:c0:37:88:de:8d:4c:78:a3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a
Validity
Not Before: May 10 05:00:52 2025 GMT
Not After : May 11 05:00:52 2025 GMT
Subject: CN=bca1c41c8d37ab7f578f4756b9df57032850f4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:37:4c:8f:c9:f0:36:10:65:7c:fc:35:ef:
4a:5f:1f:26:c5:d0:a2:59:f2:fa:71:25:91:ba:df:
e0:89:18:3e:6e:55:6d:dd:90:95:06:f2:fd:06:26:
87:29:e3:34:93:a5:46:b0:5b:f9:b4:82:6a:ce:58:
22:dd:b4:2b:99:9f:f9:49:53:7e:26:3e:cd:04:a3:
39:84:b1:d0:0c:da:0c:d0:1a:b1:d6:6e:33:f6:4b:
8b:1d:5f:da:86:e1:82:86:9f:52:d9:b4:13:3c:a2:
cd:7f:1d:17:17:68:75:57:cb:6d:07:b0:19:a8:01:
5e:a7:03:d2:97:9b:0c:e5:52:a3:77:71:3e:93:ca:
33:99:50:95:7b:21:81:ac:b1:7e:16:53:3c:27:24:
13:fa:44:34:d6:e8:f4:b4:89:e5:ac:3c:25:a4:fc:
6b:44:5e:b0:77:2c:81:11:f5:99:f0:34:8a:d4:bd:
76:59:e1:d4:dc:99:52:2e:2d:5f:f4:82:c0:51:03:
e0:2e:80:94:bd:53:fd:15:16:5d:d5:81:34:e7:a5:
28:8c:de:49:b1:c6:ff:e2:c5:f0:19:d5:bb:aa:c1:
9c:04:04:c6:41:6c:d1:26:98:32:31:3f:2c:a9:eb:
09:da:96:98:14:af:d5:80:78:45:4f:2b:28:b8:b6:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A1:C4:1C:8D:37:AB:7F:57:8F:47:56:B9:DF:57:03:28:50:F4:CE
X509v3 Authority Key Identifier:
keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5f:5d:c0:5a:fa:cd:d1:a1:a0:83:92:b9:e8:d4:2f:b5:d2:
3d:ae:55:d4:09:9a:cd:1e:7d:55:23:bc:8d:c1:e9:ec:4b:fc:
c5:fc:1d:a2:14:89:c8:79:c7:ec:2d:bb:da:9c:62:6c:fe:3c:
32:93:e5:cc:bb:a5:57:9a:f1:62:56:6d:06:e6:d8:14:1c:66:
57:20:0a:8c:5d:c4:96:04:6b:c7:7b:f7:6e:94:d1:3f:e8:93:
95:47:48:86:24:28:09:eb:e6:82:65:99:18:89:a3:62:dd:a4:
96:29:e9:27:2d:38:c6:04:a2:f1:c2:5b:40:c1:40:81:25:46:
ce:59:9a:c7:e7:3c:84:cc:12:8f:03:29:a5:bc:1d:4e:ac:1b:
62:e9:f9:17:13:d5:a7:09:00:a3:2a:7d:d1:2d:ee:ed:19:91:
d9:d4:6b:dd:d2:cb:e3:37:bd:a8:eb:04:8d:94:2c:ae:ad:f2:
47:c5:56:56:4a:8e:35:e7:17:56:3e:37:38:71:52:9d:9c:b8:
c5:60:97:07:0d:49:83:39:9f:3b:d1:14:41:19:69:c3:07:a5:
ef:51:08:02:69:bd:cd:e5:d3:24:5b:b3:06:79:e6:38:ab:85:
d4:51:4b:1f:89:de:2d:72:81:8f:f9:88:b1:e5:5f:53:ec:1c:
3e:2a:cf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:33:28 2025 by rpki-client