Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
File: CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json)
Hash identifier: wi5rwn65QPzilaYG4rCgVQU05r0t6Z8oSyttRiAtxBo=
Subject key identifier: 36:60:A3:6C:E7:E8:F8:E1:B3:B7:62:9E:17:45:9B:AA:A9:D0:2E:08
Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Certificate serial: 01965123AEF6C574581F2574D12879C11382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
Manifest number: 05AB
Signing time: Sun 20 Apr 2025 03:00:15 +0000
Manifest this update: Sun 20 Apr 2025 03:00:15 +0000
Manifest next update: Mon 21 Apr 2025 03:00:15 +0000
Files and hashes: 1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: jFR8CkqeLD5DBXRO10le8cmZ1XKRO/XWSieES3mlkBY=)
2: XgZiHyWgL10sySKObf_Bjn8Hh_Q.roa (hash: 2Dl4jp91F4zOnOBtmwjhJgpK+aRbbY/cT57xX5iOAng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:23:ae:f6:c5:74:58:1f:25:74:d1:28:79:c1:13:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Validity
Not Before: Apr 20 03:00:15 2025 GMT
Not After : Apr 21 03:00:15 2025 GMT
Subject: CN=3660a36ce7e8f8e1b3b7629e17459baaa9d02e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:56:df:f5:cc:af:01:17:60:c1:42:c7:40:
0a:38:19:df:a4:7e:fd:c5:dd:8d:f4:49:fe:df:11:
1b:73:39:89:28:d2:83:0a:41:e0:d3:82:7b:ef:ea:
c3:15:ee:72:fb:72:cc:e7:bc:65:72:78:b2:2e:ae:
21:b5:86:72:5a:cd:b8:af:f9:59:dd:72:f6:cc:6f:
75:75:a8:c5:7c:4b:8a:9f:2a:d8:16:09:d6:eb:ec:
af:11:62:70:70:22:30:c8:90:ca:1c:72:e5:3c:6d:
33:3d:77:fe:fd:87:68:88:70:8f:88:89:5d:8c:47:
92:e2:b3:94:68:88:67:e0:ef:73:f8:2a:13:0f:5f:
67:1f:f9:ec:d5:8d:ad:8a:b1:1f:d0:25:76:97:cf:
cc:c3:67:ba:63:b3:ce:8a:ee:b8:a1:ad:bd:c0:2d:
0e:bd:76:f3:0a:13:87:0b:12:4a:91:5d:42:69:7a:
fb:81:0a:47:f2:ae:bd:b9:56:95:f0:35:46:c9:06:
e0:ff:a1:90:56:b6:0f:8a:d0:1f:b3:44:4e:f0:ea:
47:d0:4d:d9:68:7b:3a:fd:27:e2:80:76:f1:b5:af:
af:65:3b:25:75:a2:bd:dc:f7:0f:6e:0b:96:d2:c2:
6d:12:e5:41:4b:15:04:fa:11:fe:46:43:8b:04:b1:
57:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:60:A3:6C:E7:E8:F8:E1:B3:B7:62:9E:17:45:9B:AA:A9:D0:2E:08
X509v3 Authority Key Identifier:
keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b8:af:ff:18:7f:d6:1b:4b:b1:dc:74:67:a5:e9:71:6c:9e:
ff:f0:fa:de:0a:d2:e4:a1:4a:0c:28:9e:27:ff:82:33:81:e3:
4b:c1:21:87:c2:1b:3f:19:0e:47:df:28:ac:d7:b2:f7:43:b8:
a9:53:b1:65:c0:70:fd:7e:32:bb:b7:1d:96:b6:3f:c7:81:5a:
33:f9:b2:cc:74:18:b5:57:5c:4e:99:11:ac:6e:3b:2f:27:da:
aa:cd:43:08:42:13:1c:22:a3:1e:c6:1b:78:ff:b4:db:b8:4c:
96:6b:2d:71:4c:71:cd:7e:cc:4c:83:52:04:b6:dd:e3:a2:03:
bd:68:4e:1b:66:c3:09:aa:fe:3d:0c:fe:32:1b:ca:18:71:b4:
b3:02:24:84:94:d6:a5:8c:0d:1c:31:ab:cb:24:56:66:31:6b:
90:40:35:e2:50:59:2b:f0:88:e5:77:db:5c:f3:40:1e:20:ea:
b3:2e:91:f3:fd:1c:c9:bd:d3:e3:50:45:41:cb:30:cd:56:10:
63:0e:27:aa:49:c3:cf:31:7e:3b:d2:90:b7:02:24:07:78:9e:
78:3a:14:0c:a5:80:5e:00:ba:f2:f0:2a:f8:2c:7f:14:63:49:
37:84:a3:96:4c:0f:f9:04:25:64:d5:78:7b:d6:53:04:c6:ff:
31:eb:63:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:57:02 2025 by rpki-client