Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft
File: 49CoS6s970HWqqkCjeekddMtEr0.mft (raw, json)
Hash identifier: gr8umnQHQcVe1/1alPIGt14UR/s6JPlAC49ysC8VtcU=
Subject key identifier: 9E:B0:AB:24:97:33:84:82:11:52:7B:0E:A5:1D:D6:F8:5D:E7:65:1A
Authority key identifier: E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD
Certificate issuer: /CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd
Certificate serial: 019614A1C68CDE9091465B918D8A5C095CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft
Manifest number: 069E
Signing time: Tue 08 Apr 2025 09:01:08 +0000
Manifest this update: Tue 08 Apr 2025 09:01:08 +0000
Manifest next update: Wed 09 Apr 2025 09:01:08 +0000
Files and hashes: 1: 49CoS6s970HWqqkCjeekddMtEr0.crl (hash: 7BdAHIWckObx+TUzc7Qthc3eg/TzPu5MLVYzvCVuoyU=)
2: C2SAzy7mKgCswx8rNIKEBdaDIlQ.roa (hash: wG/EXCjH8YdNKE8/gDy3nKvr8/OTyii7rZL0CvSQyLI=)
3: OI7NNC-aK3Lu4B5oOeMvqliT7sI.roa (hash: aWqHIcw8FFa62kYu31jy3LFmVcZ+3N4ytjox/9f+rrk=)
4: dPqyZHQPjclEhoO6YFdX9DjRWHE.roa (hash: 9fpla0+AzxLAKXUZM+irYmUieOiP8DlrXLEQ0BQtpBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:a1:c6:8c:de:90:91:46:5b:91:8d:8a:5c:09:5c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd
Validity
Not Before: Apr 8 09:01:08 2025 GMT
Not After : Apr 9 09:01:08 2025 GMT
Subject: CN=9eb0ab249733848211527b0ea51dd6f85de7651a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:9f:bc:20:ac:ef:a1:f2:ec:f6:71:8c:64:
7c:0a:51:f0:6b:9f:28:9b:e9:b5:07:27:63:9d:f8:
5f:0d:6e:73:d3:16:73:62:e2:7e:c5:1e:82:3a:cb:
c1:2d:13:86:67:8d:20:d9:73:a7:46:8c:dd:33:f6:
95:f8:a8:0c:09:66:26:3e:57:de:81:f1:9d:80:e1:
81:b1:f6:da:6b:aa:ee:c4:2f:ae:2c:f8:e7:7a:55:
8a:6e:5d:cf:f0:13:e4:da:18:6b:aa:3d:bc:91:d0:
f8:7a:55:6f:d6:a8:39:94:34:a6:1b:e0:42:19:25:
81:6e:25:86:46:af:fd:a7:af:f6:74:20:8b:54:d0:
74:b8:da:18:55:0d:06:75:8e:9c:37:a0:71:b5:c9:
97:f0:a8:5e:04:fd:82:6d:f7:9b:6b:ac:5e:1a:61:
61:d0:1e:e3:33:7e:82:d1:2c:bd:4c:6c:ee:49:bd:
b5:52:d2:e3:4e:49:4a:85:ec:24:c6:22:7a:39:ee:
85:e4:4c:8f:47:5e:02:63:c7:40:de:90:15:ee:90:
ed:6f:7c:ab:c4:c7:8d:23:bf:9a:1b:ce:43:f7:9a:
45:57:ec:66:46:a4:13:59:21:e2:f6:7f:3d:23:4b:
c7:33:12:fb:c8:df:6c:b3:1d:ac:1d:35:75:74:f6:
3f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B0:AB:24:97:33:84:82:11:52:7B:0E:A5:1D:D6:F8:5D:E7:65:1A
X509v3 Authority Key Identifier:
keyid:E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:53:e6:a8:88:df:11:37:41:26:4d:92:3f:3c:47:f1:dc:8a:
3a:92:b7:4b:90:ab:a2:99:5c:d6:62:05:ff:82:76:45:81:c4:
30:f4:bd:ac:87:45:34:16:12:5c:c5:03:c0:b0:6e:30:fd:04:
d7:62:c7:e7:e7:0f:a0:89:ba:f6:43:4e:20:5c:79:d8:3d:2a:
62:e4:6a:ec:0c:80:9a:b3:17:f0:51:00:52:ee:5a:c9:01:1b:
5b:1c:09:2d:bf:1e:ec:36:9c:78:b5:5d:eb:85:58:bc:0b:49:
7f:7d:50:bd:31:a9:31:48:64:f7:2e:c4:49:0d:dd:28:70:31:
b6:5d:bb:f9:04:b6:9d:12:29:e5:75:c2:93:7d:72:bc:92:a8:
18:fe:49:bc:88:0a:8b:99:08:8d:d5:ba:7c:d5:c3:1e:17:22:
76:05:4b:0a:1e:d3:9b:bb:16:b1:20:ca:3b:36:ef:7f:66:b0:
c2:4f:7c:a7:73:32:a1:17:bb:a3:18:b5:bc:84:6f:ff:04:18:
92:4d:c9:89:1a:2b:02:8c:e0:1c:dd:ab:9e:ed:cd:30:b7:97:
ed:10:5d:0a:75:a1:48:1e:aa:85:19:6e:f7:75:73:6d:a4:5a:
8a:bc:e9:6b:2f:89:1f:1c:ed:ff:04:bc:68:ba:20:dd:0b:5d:
ca:9b:37:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:07:11 2025 by rpki-client