Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
File: CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json)
Hash identifier: N3eoGpUpSZ8e3u0baa8M7Rl3xnk5c9ClSM4Y9mrl1Mg=
Subject key identifier: 8D:AF:0B:F9:91:10:8A:FE:DF:8C:BA:8A:B0:8C:7E:C1:CC:85:B3:43
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Certificate issuer: /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial: 019657CB58F5CEC2BDDA27C7BBEF50AC39B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
Manifest number: 14B9
Signing time: Mon 21 Apr 2025 10:01:06 +0000
Manifest this update: Mon 21 Apr 2025 10:01:06 +0000
Manifest next update: Tue 22 Apr 2025 10:01:06 +0000
Files and hashes: 1: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: dmG6YxyAQdS9eEpQKAL2D+6q5M0oQhcpoABaevcABYw=)
2: Wy1LhCK9kxP-C2UiE5R2K8JtffM.roa (hash: DYS7fnBaD9Os9bSnRtbqX/rsXfSVI5HQGNbOlzCHNGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:58:f5:ce:c2:bd:da:27:c7:bb:ef:50:ac:39:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Validity
Not Before: Apr 21 10:01:06 2025 GMT
Not After : Apr 22 10:01:06 2025 GMT
Subject: CN=8daf0bf991108afedf8cba8ab08c7ec1cc85b343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:f9:a1:53:6d:d5:b8:cd:e2:3f:be:3a:84:
6a:d9:82:f2:f1:f6:5c:24:bd:7b:84:11:6d:27:b3:
8a:a0:42:8a:33:19:29:75:ca:84:50:9e:6e:c2:f1:
cb:6f:b4:67:85:49:40:50:7f:b1:f4:e6:7e:4c:cb:
01:87:ef:1e:ce:30:ec:d5:42:7a:b4:9c:d7:c9:17:
9d:f3:dc:6a:d3:12:e5:f6:be:60:a8:08:91:0a:f6:
3b:d6:64:aa:72:f8:ad:43:52:dc:01:3f:55:74:24:
7e:49:87:30:5e:3b:4a:ce:36:68:b0:2b:1f:97:cc:
b0:f7:7f:ad:86:4c:d3:99:fa:ee:e3:01:48:ec:47:
10:01:26:cb:82:16:20:23:b0:15:79:45:23:d9:be:
c7:3a:fb:9d:6a:e9:54:b2:fe:88:08:dd:e0:e3:bb:
2a:93:da:79:4e:f3:cf:f6:4b:2c:54:48:24:e0:42:
f6:4a:87:f9:98:85:e3:13:7d:dc:a9:2c:75:1c:1d:
46:11:cd:b2:3a:d9:0c:be:64:17:fc:37:e4:c5:3f:
88:f5:99:3f:9e:4d:9e:e9:ec:14:36:8a:fe:39:eb:
5b:79:55:cf:b5:07:e6:4b:75:1c:f0:7e:da:4c:d1:
57:64:61:dc:ec:73:d0:bc:52:1f:f4:a7:9b:40:3b:
05:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AF:0B:F9:91:10:8A:FE:DF:8C:BA:8A:B0:8C:7E:C1:CC:85:B3:43
X509v3 Authority Key Identifier:
keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0b:cc:1e:41:51:e0:d7:3d:6a:f2:3f:4a:9b:8c:8f:8c:da:
f5:74:5b:c2:65:9d:08:55:45:98:85:90:00:aa:98:34:7a:b1:
95:d4:cd:fd:75:87:bb:10:8c:85:64:7a:4f:9b:91:c9:8d:ee:
ec:af:94:0a:e3:64:52:68:d1:0b:58:7b:5f:ca:b9:33:4f:23:
cd:0f:ff:c6:86:b8:ba:fa:8b:6d:32:5b:d0:90:8d:6a:6a:45:
bb:45:21:24:65:c9:72:18:2f:ca:67:05:6c:d5:f3:f3:91:47:
ae:83:33:4a:10:42:2f:bb:73:d4:4a:36:c7:05:70:60:e4:94:
49:bb:79:28:4e:63:dd:db:69:0c:d6:6b:e0:91:5a:9d:44:15:
9c:2b:c9:b3:5e:8f:85:5d:ce:33:24:41:7a:aa:82:3d:3d:fa:
43:af:60:5d:4c:b2:17:f2:bd:e2:e6:e3:ca:0c:fd:df:c4:85:
f2:e5:07:c2:39:a4:f9:43:82:1c:9f:0c:48:aa:0a:2e:7c:d4:
b2:04:60:67:48:fe:3b:d4:06:35:41:d0:cf:a0:dd:24:1d:6f:
66:d1:7d:01:98:7a:a5:06:8e:fa:09:69:2f:f6:fa:1a:68:86:
38:d3:6c:3b:1d:99:a2:69:f7:a6:19:29:6b:11:70:68:9b:90:
92:07:e9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:12 2025 by rpki-client