Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
File: sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft (raw, json)
Hash identifier: 5H4MXJ/F8Eh5RuadCd6q/C0pFiMhScFwnrB5wTBgH5Q=
Subject key identifier: 6B:1C:F1:B1:30:1B:F1:3F:F0:D4:40:76:73:34:3A:AB:2D:7E:90:9D
Authority key identifier: B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1
Certificate issuer: /CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
Certificate serial: 019654C9805AB716012B4E3FE7A1C0D15F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 20:00:13 +0000
Manifest this update: Sun 20 Apr 2025 20:00:13 +0000
Manifest next update: Mon 21 Apr 2025 20:00:13 +0000
Files and hashes: 1: bjFNuvRZLnVPhxbqDpaNVvasSyc.roa (hash: Or9p+aN5TKflixXpvac1BP39grelci5lle0PuJ0UsF8=)
2: sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl (hash: JlVFmc3Q4kvDiPkfv0Vz+Oa2q6DFC8/0bcnSEADtnXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:80:5a:b7:16:01:2b:4e:3f:e7:a1:c0:d1:5f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
Validity
Not Before: Apr 20 20:00:13 2025 GMT
Not After : Apr 21 20:00:13 2025 GMT
Subject: CN=6b1cf1b1301bf13ff0d4407673343aab2d7e909d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:83:9a:c8:32:50:2d:28:83:6b:9f:b8:88:
80:c5:cb:d2:c5:85:29:5d:a1:bb:48:02:85:5f:61:
60:38:51:1b:ba:e3:6c:7e:a2:4d:a2:11:2c:db:7c:
92:8a:17:13:37:3c:6a:2d:99:d7:12:0e:c0:97:1b:
6c:c0:64:d2:cd:b0:b5:18:43:08:4d:17:8f:39:ba:
b0:11:c9:1c:1d:ca:aa:39:fb:6d:71:c9:25:74:d8:
ef:f6:ba:48:ed:36:5b:d5:8f:c6:a5:26:c9:d7:4f:
7f:c1:a8:67:f5:3a:41:3e:67:f6:3d:dd:9e:50:f8:
2d:31:76:c2:36:04:b0:d3:46:54:dd:85:9c:9a:a0:
3c:28:71:9f:a0:4b:79:a3:0d:18:21:31:87:ab:f9:
02:8b:0e:dd:a0:33:5e:24:82:0e:39:ce:72:29:49:
57:90:e2:fe:c6:ee:95:62:3e:aa:78:19:3d:e1:16:
e3:f4:d5:61:4b:6c:d6:50:db:d6:a4:7f:7a:de:5c:
23:3e:59:93:48:f3:2b:ae:f1:49:f6:24:fa:50:ab:
a7:95:25:20:c7:fc:e9:d2:87:25:5e:d8:26:38:8b:
53:6b:d4:8d:93:3f:d4:55:60:3a:d4:17:e8:ae:c0:
a5:66:b8:43:c6:dd:4c:d7:a3:c6:cc:24:30:39:bc:
2a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1C:F1:B1:30:1B:F1:3F:F0:D4:40:76:73:34:3A:AB:2D:7E:90:9D
X509v3 Authority Key Identifier:
keyid:B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:86:41:2e:a0:22:05:7b:5e:80:fb:10:55:07:e4:cc:6a:db:
28:70:a6:81:ff:b1:e0:55:d2:b4:2b:5b:97:d3:f3:77:8d:ed:
29:4a:84:e9:66:50:1c:e3:a6:f4:cd:00:7d:ae:9d:84:29:b6:
1a:bb:43:67:88:98:f4:f7:9d:3e:0e:5d:59:9d:af:6a:4f:54:
39:78:5b:1b:81:26:8c:e8:bf:1e:d7:e9:a2:bf:74:9b:1f:60:
02:9a:2f:31:b9:40:68:86:2f:95:5e:e7:4a:ac:5b:f4:eb:45:
1d:6a:45:0c:1f:be:69:9e:fd:3d:7c:74:35:3c:f3:2d:b5:63:
44:0b:a2:73:84:b8:ab:35:49:3c:01:d9:c4:05:bc:65:ed:4c:
6b:12:6c:7f:2f:e7:f8:82:d8:0d:d8:17:1e:45:ac:1b:8f:65:
fd:77:52:51:51:98:e3:e1:31:60:2b:95:2f:2a:58:45:7c:05:
63:c5:4e:26:25:a7:e9:6d:47:f1:6a:a4:58:89:86:d2:30:d2:
a2:e3:ae:b9:1d:4d:52:8a:37:c2:3e:e7:3c:4f:86:d7:7c:38:
7c:b6:27:86:bb:c8:01:1a:f4:22:5c:e3:e9:b6:22:4a:6d:37:
8f:94:c0:c0:00:0c:c8:5b:ba:99:0b:10:ee:f6:50:4f:53:77:
63:f3:81:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:27:40 2025 by rpki-client