Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
File: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft (raw, json)
Hash identifier: kBt1suZDtVk95ForDQQZ5Vd6ADjoW0fyg5lBokgPfHc=
Subject key identifier: F1:BC:38:BA:FC:92:AB:29:5F:01:5E:8C:E4:A2:DB:14:17:00:90:9E
Authority key identifier: 0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
Certificate issuer: /CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Certificate serial: 01964A0F39FB641689B7E92CD10873FEE759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
Manifest number: 143A
Signing time: Fri 18 Apr 2025 18:00:33 +0000
Manifest this update: Fri 18 Apr 2025 18:00:33 +0000
Manifest next update: Sat 19 Apr 2025 18:00:33 +0000
Files and hashes: 1: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl (hash: yrNgfEUXwvyw8KCUVO4GlGuBjrWQa+ACLLT7MUuE8+k=)
2: DuaqfpWRjQCcl_wmNFLt00a2Vw0.roa (hash: rQv6lxTZYs4XDzxYfgAGiCr8L0iuSbohO7siOw9JGpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:39:fb:64:16:89:b7:e9:2c:d1:08:73:fe:e7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Validity
Not Before: Apr 18 18:00:33 2025 GMT
Not After : Apr 19 18:00:33 2025 GMT
Subject: CN=f1bc38bafc92ab295f015e8ce4a2db141700909e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:87:a1:f1:0b:bf:20:97:76:92:d5:ce:03:
e4:51:7f:a9:ea:bc:ac:1f:39:0c:8c:11:f8:32:58:
dd:18:82:7a:10:39:13:ca:74:74:ad:5f:e8:7d:b7:
a3:f5:b3:0e:cd:1f:ac:e0:7f:7a:97:64:e6:f1:f1:
18:3e:a8:64:dd:dc:bf:df:b1:1c:da:b8:8f:d5:0c:
ae:e9:11:e5:ac:f8:a0:8a:68:03:53:f3:bd:c4:88:
5e:c7:49:38:9d:96:83:e9:70:a2:ad:e4:bf:f9:26:
66:da:8d:42:19:52:c0:fc:29:43:68:88:fe:cc:db:
c4:59:d2:38:ca:42:eb:2c:04:1a:1c:58:e9:ab:db:
f5:61:3e:72:ed:89:9d:c3:c9:61:ee:23:13:9c:2c:
91:d4:02:5d:1e:79:d1:19:5e:b5:70:3c:e8:73:5e:
5f:0e:3e:23:ef:08:8c:bb:33:32:b0:46:05:55:5f:
e0:b3:95:fb:b8:79:26:a8:0e:31:0f:99:74:b7:28:
84:c6:51:44:f4:cd:b2:f0:b7:32:1a:c8:74:47:d6:
de:d9:92:23:49:eb:24:4d:ca:48:d3:7c:66:ca:62:
f3:32:da:af:af:20:c8:90:3b:78:ba:06:ae:93:6d:
e8:59:30:83:dd:5d:9d:6d:20:ae:b1:7c:39:86:ea:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BC:38:BA:FC:92:AB:29:5F:01:5E:8C:E4:A2:DB:14:17:00:90:9E
X509v3 Authority Key Identifier:
keyid:0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e3:b4:65:97:10:e9:ac:dd:50:e4:b4:9d:d6:60:f9:fc:47:
fd:2a:f0:6f:1b:15:b1:0a:32:19:71:c1:e3:1f:94:20:26:15:
73:d8:8d:4d:c8:c9:a5:6f:01:b2:93:22:57:8f:cc:b4:d5:dc:
30:5a:a4:5c:0b:ef:8b:7e:4d:61:aa:e8:83:88:59:3d:88:8f:
e6:ba:46:f3:8c:dd:58:23:46:bd:22:87:11:0c:ca:5e:dc:ee:
57:73:44:70:ad:fe:ce:b7:42:c8:d4:da:4c:65:7f:41:81:3d:
1d:39:cb:17:c2:52:5a:9d:86:1c:03:42:ce:22:1d:bd:d1:7d:
79:d7:2d:4d:4a:c8:94:ce:bc:14:7a:f7:48:fd:d9:ce:a7:a5:
b7:5e:c8:af:1e:02:d1:c1:5b:88:bf:72:7b:ad:d3:c7:4d:c1:
24:ae:f9:b2:05:1d:50:94:c5:05:37:e7:80:ef:59:81:bf:6e:
bf:f7:6a:7d:43:22:77:ff:eb:28:41:4a:83:a5:90:58:7c:a2:
83:bb:99:c8:0e:e4:08:43:83:98:1f:ce:fa:bd:d9:cb:35:89:
c1:6a:bc:3a:15:eb:7b:4f:2d:04:b8:7f:e1:c4:c6:21:40:b4:
1a:b0:a8:8b:ee:61:a6:6f:b1:16:f2:b5:49:a5:ba:81:c8:fb:
a0:85:03:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:32:18 2025 by rpki-client