Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
File: sTCZw4tkd6aMmAGf9uAECAgHi5A.mft (raw, json)
Hash identifier: 490CE9qNOmBWd8swLVf8plACzNpcFJDr8Kg6RJyh1N0=
Subject key identifier: 1F:C9:75:E6:76:B5:3A:9C:0C:89:61:30:41:DA:2F:84:DF:7E:AF:BE
Authority key identifier: B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
Certificate issuer: /CN=b13099c38b6477a68c98019ff6e0040808078b90
Certificate serial: 0196545BAC87A5BD99909FF8FC89BD93AFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 18:00:16 +0000
Manifest this update: Sun 20 Apr 2025 18:00:16 +0000
Manifest next update: Mon 21 Apr 2025 18:00:16 +0000
Files and hashes: 1: cRAAzm69rK1x2VXcQUJ_DYkM5W0.roa (hash: QMURLhpiB70UAjkJMuKHXFWklTM0r8n8ucBI0KCwX8g=)
2: sTCZw4tkd6aMmAGf9uAECAgHi5A.crl (hash: 0hjqbI2E8pd3kHPL/lN8zoLm/RuPULLg28Hb7Ol1UCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:ac:87:a5:bd:99:90:9f:f8:fc:89:bd:93:af:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13099c38b6477a68c98019ff6e0040808078b90
Validity
Not Before: Apr 20 18:00:16 2025 GMT
Not After : Apr 21 18:00:16 2025 GMT
Subject: CN=1fc975e676b53a9c0c89613041da2f84df7eafbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ea:2b:b3:51:37:99:ad:fe:a6:09:d4:1e:11:
b1:12:4c:f2:39:50:7a:02:1a:84:9d:53:66:89:ed:
f9:a4:50:4d:9a:72:8d:bf:25:4a:4b:2c:6c:43:75:
49:d9:3d:2d:50:cf:a5:d6:b3:7e:31:e8:5b:b5:92:
58:30:d6:2b:0c:9f:d1:4d:c6:22:b8:c7:53:8e:45:
d4:a5:3c:12:2c:01:80:4b:42:79:81:ec:72:f8:9f:
42:fb:06:24:0a:81:73:58:0b:e4:63:e5:45:78:00:
27:74:37:20:a6:d6:23:ae:51:86:9e:ab:83:ed:2e:
3a:7c:9a:51:e3:e9:e4:ef:b7:27:ea:14:04:95:3a:
72:01:3e:43:30:e6:0c:2a:1f:1e:19:ca:1c:03:7d:
e6:0c:0c:68:50:98:fe:c0:19:0b:5e:56:66:7d:e9:
05:18:49:24:ea:b4:3e:c5:9d:19:1f:0d:3c:1f:c0:
aa:0b:f8:2e:86:58:07:4c:3e:e5:44:08:b0:e0:fc:
41:33:8f:82:d3:1c:9d:9f:88:e9:cb:83:7a:af:8f:
bf:6e:01:9e:f3:09:f2:96:7a:1a:5e:05:83:5a:78:
04:d1:66:66:45:af:93:b8:2a:a8:6c:fd:c6:43:f5:
10:78:2c:4e:72:3e:e4:8c:7f:9a:2e:66:de:8c:75:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C9:75:E6:76:B5:3A:9C:0C:89:61:30:41:DA:2F:84:DF:7E:AF:BE
X509v3 Authority Key Identifier:
keyid:B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:72:1a:5e:5c:8e:f2:2d:a4:87:5c:3b:2a:89:74:a1:05:03:
5e:a0:cc:b1:00:0e:14:25:16:9d:fb:54:cc:be:d2:80:72:97:
63:da:1c:a0:c3:9b:81:4b:46:1a:e5:2d:ae:78:74:c4:fb:82:
d5:d3:13:93:ad:ca:c1:af:6c:bc:d0:a0:1e:d8:70:2b:e9:6b:
20:e7:d1:54:67:1d:85:73:28:ec:0a:47:f2:16:35:a9:66:ca:
00:47:35:a6:ff:81:b3:91:7b:e1:95:b8:d3:74:f9:72:92:55:
82:ef:27:54:96:f9:a4:72:7b:57:79:d0:a8:13:b8:b9:3b:bd:
7f:95:28:bd:2a:d6:b7:c4:8b:48:04:a1:65:b7:68:8b:47:96:
20:16:dc:dc:84:db:77:49:dc:40:8e:54:d8:9e:52:8e:3d:37:
42:3d:a7:ec:cc:f8:21:bb:d0:7c:a6:27:6f:11:26:8e:1f:f5:
15:22:b1:ff:a0:75:a4:54:f3:e1:f3:17:a4:f6:12:1d:8c:42:
f4:7c:92:a4:ec:a2:63:5e:2b:be:40:5b:34:0e:fa:0c:f2:af:
be:a6:b2:9e:4c:34:b6:85:87:62:92:43:7b:1d:12:3f:ee:06:
33:03:e1:b8:13:55:28:7b:46:ac:aa:2a:63:ae:60:11:ec:b0:
c6:82:f2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:11 2025 by rpki-client