Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: giLnnIRZHt408sBjyA1KMxv56yziZYS1y8nUczP8g80=
Subject key identifier: 7C:1E:78:E2:86:7E:2A:BD:AA:22:FE:AE:5D:7E:2D:2A:C2:5D:E6:CA
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 01964EC7C4C465EAD6D4AFEEF30D81296BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 0F30
Signing time: Sat 19 Apr 2025 16:00:36 +0000
Manifest this update: Sat 19 Apr 2025 16:00:36 +0000
Manifest next update: Sun 20 Apr 2025 16:00:36 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: jotytF6DB57BKaC1rKpVAxg3a+aAt+TwUvKd3KWtpLc=)
2: ExdpCTXCt8uJ4Z_M2-EkieqhjoE.roa (hash: gUhwwwHnIVltW5e0SpmF0lPF2Gg7aGGIP9a0IVe5wqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:c4:c4:65:ea:d6:d4:af:ee:f3:0d:81:29:6b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Apr 19 16:00:36 2025 GMT
Not After : Apr 20 16:00:36 2025 GMT
Subject: CN=7c1e78e2867e2abdaa22feae5d7e2d2ac25de6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:44:0f:70:cb:60:27:79:86:db:c2:6b:b6:
74:3d:d3:f9:cb:2b:cb:23:d9:d3:45:4c:95:1a:71:
ee:2c:b9:fa:c4:e6:7b:d0:24:86:ee:12:0d:4a:45:
d9:db:09:07:c7:35:15:06:9f:f5:d7:45:e8:a5:64:
c5:b6:08:67:0a:6e:b4:fa:1c:f7:2c:9f:5c:37:b3:
c3:da:10:7c:c2:ff:24:ef:bc:b9:8b:91:89:00:ba:
b1:c3:fd:7a:d0:0c:88:18:9a:00:24:75:4f:d0:b5:
9c:35:3b:f7:2c:de:a5:7f:32:c7:f1:cc:1e:28:c3:
0f:4b:34:6f:9a:fb:3b:71:38:25:82:cf:85:f8:f7:
87:dc:19:70:9b:4f:0a:43:23:ee:a6:cd:08:dd:b1:
f8:ef:11:dd:7a:1a:02:1b:8c:b2:98:ba:03:67:57:
09:0a:e9:3d:20:ae:33:8f:cd:c1:70:e1:db:81:8d:
ed:7f:1c:62:36:9c:c6:fc:66:d7:66:a6:89:11:cd:
76:2a:78:a6:a9:66:9a:8b:f9:38:72:e1:9f:3e:5b:
07:1e:ec:36:77:fe:a7:84:8e:4b:dd:fd:e6:62:07:
06:23:2e:34:b5:69:01:87:ce:39:3c:43:bd:4e:1e:
97:38:bc:22:37:ef:00:2a:d1:24:2d:66:3a:7a:2d:
f5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1E:78:E2:86:7E:2A:BD:AA:22:FE:AE:5D:7E:2D:2A:C2:5D:E6:CA
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:cb:70:84:e0:4c:43:8d:7b:89:94:a5:f3:1a:fe:b5:c7:2d:
a7:3d:6b:ac:a3:37:61:24:e7:71:47:a8:e9:ba:7b:60:3b:fc:
b7:57:d0:03:88:04:32:97:ef:f7:86:70:ed:a2:56:37:ed:05:
7f:23:46:1e:16:00:2a:02:d8:3a:a1:d3:7b:4b:09:ac:0e:d2:
41:8d:88:93:3c:03:59:7e:73:23:29:a2:d2:39:af:a3:b0:8d:
53:e5:60:31:73:f3:0e:d0:77:8a:d6:55:ec:a6:17:17:8b:f9:
64:ab:e3:47:e8:20:90:c2:9e:57:ae:71:24:eb:4e:f4:cc:18:
20:36:dc:e4:a6:a1:f3:27:a7:bb:40:6f:94:86:9d:b6:30:22:
8d:fb:4a:dd:db:08:f3:5e:bb:9c:44:8b:fc:e7:42:1b:2e:56:
2d:85:63:cc:64:65:0f:74:ff:fa:92:43:7d:05:45:95:38:79:
df:17:c5:ca:22:97:2f:01:08:47:5d:d5:2d:8f:14:3f:9d:a6:
47:12:70:94:0b:90:67:83:45:9d:5a:de:fe:85:a6:9d:46:c5:
89:8b:5a:3b:09:00:0b:be:5f:31:10:ae:69:ac:c6:d4:a0:6d:
33:cc:5c:88:9b:54:46:b7:be:e5:0a:5d:99:1b:aa:cc:35:e4:
c2:2f:50:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:07 2025 by rpki-client