Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier: 92lBNKlyNRMGDKxPDVyUc6VaKU0fCm1av4JGYFynuzw=
Subject key identifier: 17:F7:DF:15:9C:72:D0:84:C7:7A:3B:97:68:C4:3C:FF:8F:A0:42:BF
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 019641E77DBE004292E08C8910BDA3A77144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number: 14F6
Signing time: Thu 17 Apr 2025 04:00:12 +0000
Manifest this update: Thu 17 Apr 2025 04:00:12 +0000
Manifest next update: Fri 18 Apr 2025 04:00:12 +0000
Files and hashes: 1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: cQL6hXx7TG1NCfeeNkRMHT/v1+f2rwr5CpBUGxf/BUw=)
2: dl3PAMO_cjTEN-X9xexRuh-Chb4.roa (hash: EybA63Tgz5VJ0tdqhdyDgjCCTh9UVwGU3vK+Wpg2GJ4=)
3: lJ4tZxRFs8zm0c7vVrYQoA3wLAU.roa (hash: UW3HI87+Tvs0vPfpNH93w8VClrUvFKCrCGbfw0Tz9ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:e7:7d:be:00:42:92:e0:8c:89:10:bd:a3:a7:71:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: Apr 17 04:00:12 2025 GMT
Not After : Apr 18 04:00:12 2025 GMT
Subject: CN=17f7df159c72d084c77a3b9768c43cff8fa042bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:95:08:06:79:fe:d4:75:75:c1:b3:b2:39:54:
70:89:66:f4:a6:9e:09:d2:1b:83:fe:d1:06:2a:f3:
70:91:35:23:31:e3:ea:fd:5e:b5:bb:c1:bb:35:93:
01:6b:9c:af:94:29:fc:ff:2a:0b:1e:4a:20:2c:4b:
d8:81:6d:2a:0d:81:1b:77:38:42:8e:a4:45:c9:37:
a8:33:71:8b:3f:58:38:e6:1c:ee:c7:d5:73:ff:75:
a7:c2:23:f8:c7:48:de:a8:a9:cb:52:ba:51:73:73:
a7:ec:1e:df:06:cb:1a:7b:3a:55:8b:8f:ce:84:22:
d3:92:e5:38:e3:06:5e:ce:31:b2:6c:06:51:be:e3:
f9:d3:85:63:84:d5:d6:c3:2c:74:a4:60:09:55:d7:
94:f8:ee:e2:ea:9d:30:dd:a1:01:cd:cb:80:9c:4f:
e1:15:b3:8d:8e:65:d4:ca:c9:45:b8:c6:f2:3c:dd:
32:fe:b6:37:70:6e:7c:c3:89:59:d0:c9:ae:d7:30:
a1:2f:eb:3a:e5:3a:03:3c:ee:0b:79:57:7c:19:ca:
15:5f:e6:aa:bb:c2:85:6b:c5:ff:39:4b:b9:1a:fc:
7b:d4:5b:94:c3:34:5a:1b:19:f7:a5:7f:4a:d7:05:
98:0f:7c:3b:6b:cb:10:e8:ad:f2:57:bc:21:07:c3:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F7:DF:15:9C:72:D0:84:C7:7A:3B:97:68:C4:3C:FF:8F:A0:42:BF
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d3:f3:3f:af:5c:16:d4:df:8f:fe:11:c5:0c:ad:d0:9f:f9:
71:f7:80:de:ec:40:e4:9a:27:23:1e:15:ea:1c:9b:6f:57:50:
00:2c:d8:f0:c8:50:a3:85:d6:80:26:58:fa:48:32:80:d3:94:
68:9c:87:2a:cf:61:f7:11:ed:ca:a7:aa:24:c6:03:c7:2a:4d:
96:bf:19:ce:86:d0:37:12:8c:6a:10:08:fb:12:26:0f:a0:20:
23:2a:48:8a:b7:40:57:19:82:d5:ed:3d:5b:fa:e2:51:f6:14:
17:97:96:51:48:17:5b:d7:18:bc:4b:03:7d:0d:b9:cb:c3:29:
d1:fb:88:b6:40:4a:5b:fa:2f:0e:52:96:df:4e:b5:61:18:06:
c2:7e:3f:d4:d9:a4:e0:e0:b7:eb:ed:39:16:19:28:4a:27:f2:
e6:b0:a9:9b:e2:1a:fb:14:18:e3:14:f6:dc:36:3f:5a:ea:a0:
92:1c:4a:eb:10:73:00:33:b9:81:ad:30:19:90:0b:86:c2:82:
ac:19:ce:60:bb:c3:78:b2:ac:e8:0a:d0:97:ca:ac:0c:de:80:
04:d2:be:e4:b2:d0:aa:1d:0d:44:d4:67:fe:1b:4d:bc:e7:74:
33:13:df:c6:0e:fb:14:38:67:e3:fe:e4:a4:73:fe:68:e8:81:
44:f0:c4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:15:51 2025 by rpki-client