Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
File: ROzsULCd1G04TQgbUH0juv71HJw.mft (raw, json)
Hash identifier: MQJwSqSSgQ2M4IZHq+ela/Vs3b7UNu4HxeJOWRxtITY=
Subject key identifier: 41:6A:DA:67:FB:F5:CF:DB:43:CC:9F:DB:85:DA:15:71:36:3A:41:66
Authority key identifier: 44:EC:EC:50:B0:9D:D4:6D:38:4D:08:1B:50:7D:23:BA:FE:F5:1C:9C
Certificate issuer: /CN=44ecec50b09dd46d384d081b507d23bafef51c9c
Certificate serial: 01958B165416ACC35F188414EDAEF1AE7C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
Manifest number: 1493
Signing time: Wed 12 Mar 2025 16:00:51 +0000
Manifest this update: Wed 12 Mar 2025 16:00:51 +0000
Manifest next update: Thu 13 Mar 2025 16:00:51 +0000
Files and hashes: 1: ROzsULCd1G04TQgbUH0juv71HJw.crl (hash: FqQzMaMfv55a3CZc9bBW9nxtZKAomp73mCXshWAxsco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:54:16:ac:c3:5f:18:84:14:ed:ae:f1:ae:7c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ecec50b09dd46d384d081b507d23bafef51c9c
Validity
Not Before: Mar 12 16:00:51 2025 GMT
Not After : Mar 13 16:00:51 2025 GMT
Subject: CN=416ada67fbf5cfdb43cc9fdb85da1571363a4166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e7:f3:08:f1:83:5f:36:b1:10:59:99:6e:ce:
6a:b9:04:ec:08:c5:2a:55:05:1d:72:3d:38:1f:02:
86:e5:c0:af:24:ed:1c:21:85:26:5b:87:97:19:21:
c2:6b:cc:a1:25:53:2e:c7:d0:3e:c8:0f:0e:fd:ab:
11:2d:f4:c2:e2:84:68:d4:c5:cc:e3:54:b5:34:86:
61:6c:c9:df:34:ff:14:59:b9:e8:27:05:54:25:9e:
de:4a:da:83:08:29:34:46:c6:a4:06:46:a4:85:65:
34:35:af:81:ce:f7:a4:ee:62:0b:a5:da:7a:3b:50:
ca:c2:00:70:d4:7e:69:c2:df:bf:ae:f1:c2:17:ae:
89:ed:20:13:ab:67:6e:f5:83:ee:17:3c:d7:0d:d3:
97:d2:94:01:d9:c6:b4:83:70:e5:87:06:59:6d:37:
e7:29:44:b6:36:3d:1e:56:90:eb:e6:64:41:16:03:
2b:f1:d9:33:29:88:98:9c:21:a1:2e:85:66:3d:df:
59:a1:56:07:12:bd:57:3f:9a:68:a6:73:e7:48:0a:
ad:24:8d:0d:7c:6e:45:87:d3:f7:6d:13:1c:50:10:
6f:7c:57:3d:8c:72:08:42:d8:f8:7f:df:74:33:f8:
ed:3a:7b:63:6b:28:22:3a:a4:98:e0:85:d2:44:7d:
e5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6A:DA:67:FB:F5:CF:DB:43:CC:9F:DB:85:DA:15:71:36:3A:41:66
X509v3 Authority Key Identifier:
keyid:44:EC:EC:50:B0:9D:D4:6D:38:4D:08:1B:50:7D:23:BA:FE:F5:1C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a0:c4:4c:fd:f7:f2:79:e9:f3:23:b7:0e:98:86:70:b0:fa:
1d:86:9a:b2:2b:b4:98:fa:13:ed:59:e6:28:2e:ac:97:31:c0:
2c:99:0f:a6:01:a1:ab:e4:82:a8:a4:c2:a7:cc:5b:9f:6c:fe:
06:af:bc:f6:28:75:68:82:d0:f9:22:ca:7f:c9:3e:7c:e3:66:
a8:89:ca:e9:c0:2d:72:9e:35:36:94:02:5f:b5:04:35:a4:40:
bf:ae:18:b3:2e:21:ee:81:41:3f:85:fd:53:6e:87:f1:da:95:
5a:80:1f:3b:3a:56:01:e2:45:b7:99:bd:0a:cf:58:3d:e1:3e:
bf:c2:14:b7:63:da:54:06:fb:f0:c3:e9:75:c1:53:18:2d:27:
44:55:da:55:7c:85:11:48:b7:1a:cd:fd:20:e0:e0:73:83:7b:
f2:39:4d:89:ae:e2:a6:1c:0e:d5:d2:63:dd:59:cb:a8:82:5c:
55:95:f7:1a:5d:c1:74:80:2f:7e:3d:4a:67:18:bc:47:4b:b4:
22:25:d8:ef:dc:d0:d8:b0:dd:ee:ce:8d:84:2d:b9:68:6d:02:
e4:cf:93:33:91:2b:06:d6:85:58:64:03:da:73:82:bf:4c:40:
f1:7d:01:b2:81:4a:0e:4b:fb:37:21:26:6e:87:8e:2b:c5:f9:
51:8c:16:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:50 2025 by rpki-client