Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
File: cBxcPyilwHENvkgp0hbInpQu8Os.mft (raw, json)
Hash identifier: fvzDmjD3PM68La4ozQTiUUyc8/H5bOFAmiiLA2ube4k=
Subject key identifier: 16:38:A8:E9:DD:E6:36:26:F7:50:A4:AA:CE:B2:72:7D:06:03:B5:2B
Authority key identifier: 70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
Certificate issuer: /CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Certificate serial: 01964D471F3F017CDA614290925BF248DE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 09:00:28 +0000
Manifest this update: Sat 19 Apr 2025 09:00:28 +0000
Manifest next update: Sun 20 Apr 2025 09:00:28 +0000
Files and hashes: 1: Ke6BIcKr553RdNTHAAiP-pm7d4U.roa (hash: YC8hk6oKhl67AQI7JSOSYdAfbuzkCnLEvEUsrgjHG4c=)
2: cBxcPyilwHENvkgp0hbInpQu8Os.crl (hash: 9ThO5OaPYqNtWpzX4+nxJUMmp57dTj4f/CUwE8KfCSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:1f:3f:01:7c:da:61:42:90:92:5b:f2:48:de:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Validity
Not Before: Apr 19 09:00:28 2025 GMT
Not After : Apr 20 09:00:28 2025 GMT
Subject: CN=1638a8e9dde63626f750a4aaceb2727d0603b52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:06:45:90:ab:f9:32:a3:e8:5f:18:47:c3:45:
5b:85:b4:00:26:9e:e9:76:c9:a6:52:ed:31:8a:da:
06:e4:a8:b0:9a:f2:4b:25:c0:91:fc:52:10:5f:3f:
21:4c:f8:a0:96:72:a3:56:62:52:0a:81:b1:bb:a8:
d6:79:93:c5:2c:d3:4a:5d:bf:7a:99:4d:1c:4f:59:
1c:f8:cb:4a:e0:90:c3:a6:23:4b:75:b5:24:0a:ba:
3d:c8:88:1c:bc:a8:fe:a5:86:7a:df:f9:6e:f2:b1:
14:d1:22:87:99:41:ac:be:b9:de:2a:bd:39:82:8a:
2a:88:65:a6:72:96:31:17:3f:df:da:a1:e1:f5:6b:
f0:df:08:01:d8:c4:30:9b:42:9e:01:ff:da:b9:5e:
d3:f6:57:31:ab:53:71:61:44:04:ae:1f:14:76:4d:
92:24:12:2b:ac:ba:fd:42:1a:3c:e0:41:ad:de:08:
f9:c0:d0:cd:d8:90:d1:33:69:77:77:dc:eb:e8:24:
b5:7f:49:a4:df:5b:55:d4:03:e6:4d:ee:89:12:51:
07:67:2f:e2:f6:43:9d:99:16:5f:87:b1:fe:e9:9c:
fd:b8:86:fe:63:c4:7f:03:50:06:ef:f6:31:6d:b8:
63:e4:e5:51:62:25:76:55:14:18:32:31:0c:c4:18:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:38:A8:E9:DD:E6:36:26:F7:50:A4:AA:CE:B2:72:7D:06:03:B5:2B
X509v3 Authority Key Identifier:
keyid:70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3a:4d:ca:08:ce:df:b5:d6:5d:dc:6b:f1:0e:6a:17:94:f3:
df:af:e4:a7:70:72:47:dc:5a:60:58:06:83:3d:86:b4:04:c1:
8b:cd:74:c9:17:05:c3:ba:7e:b2:7c:94:5d:9e:c8:3c:93:73:
4f:f4:c7:9e:d6:97:a0:86:56:18:70:e2:f6:9b:3f:c4:54:c4:
30:5f:06:f8:d5:4c:5f:70:f7:b3:e3:f4:23:08:68:ae:67:e8:
2e:3f:35:7a:0b:4b:2d:b2:1f:c4:19:35:66:c8:0c:0b:93:64:
51:26:ed:a3:bb:71:20:cc:6f:89:3b:97:47:e0:ca:97:73:44:
a9:85:e9:97:97:37:c6:16:86:05:85:39:67:e4:47:06:80:6d:
1b:6e:5e:07:c6:c4:3e:5c:14:72:7e:a4:52:31:22:51:db:43:
24:7e:e5:4c:b0:4a:5b:fb:36:56:b8:4f:0b:15:65:3c:22:6d:
b8:66:ca:d0:e7:60:f2:b6:44:e1:26:8c:94:73:70:8c:07:ad:
37:c9:39:3f:97:42:21:79:a3:a9:f4:be:07:ec:3d:36:77:25:
11:b0:34:f8:4f:95:dd:44:df:6d:04:04:52:4a:d9:06:3d:8e:
e9:67:5c:a8:67:21:9e:bc:09:0b:a2:58:5f:df:1d:5f:fc:f7:
c7:ec:6a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:05:23 2025 by rpki-client