Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
File: No41oF8nB7WnQcKnL15Ls0ybCag.mft (raw, json)
Hash identifier: wCSV8zIn8VNtkCuOlF/YAXxybrP/EvX7t17ZDjaXrNI=
Subject key identifier: FC:81:E0:50:13:AF:56:48:9E:7F:DD:70:E4:DB:69:49:57:8E:C4:45
Authority key identifier: 36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
Certificate issuer: /CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Certificate serial: 0196458D4F108BEE5AD1079B805EC5E46B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
Manifest number: 14F4
Signing time: Thu 17 Apr 2025 21:00:10 +0000
Manifest this update: Thu 17 Apr 2025 21:00:10 +0000
Manifest next update: Fri 18 Apr 2025 21:00:10 +0000
Files and hashes: 1: L7FYC8e89xGKnty6O1mK_Gb2H5U.roa (hash: McrAWYa182W0VDulttkCRb8Sku8UBSHS1nLFi0h9Euw=)
2: No41oF8nB7WnQcKnL15Ls0ybCag.crl (hash: EcH8opl7kcj/ojAjkkHIYYrMgzaVztbS+w2wwubUyuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:4f:10:8b:ee:5a:d1:07:9b:80:5e:c5:e4:6b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Validity
Not Before: Apr 17 21:00:10 2025 GMT
Not After : Apr 18 21:00:10 2025 GMT
Subject: CN=fc81e05013af56489e7fdd70e4db6949578ec445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:30:75:07:9d:7b:21:2a:06:0f:5f:a9:27:3b:
08:95:84:6e:79:45:9b:eb:63:3e:dd:e1:a4:fd:43:
4c:e2:99:08:6f:37:bd:e3:9c:25:e8:1b:27:9e:05:
5d:c9:d9:c6:5d:45:61:7f:40:68:20:d0:8a:55:26:
78:36:dc:3a:30:c5:b9:fa:81:be:a2:1d:df:b8:ec:
73:97:09:48:e1:cc:90:ac:7e:4e:89:54:f8:d6:3c:
40:61:15:92:25:7b:12:f9:09:8e:10:fd:ac:7e:6d:
93:13:fd:ad:ad:93:36:51:07:7e:c7:ad:31:39:c8:
fb:8f:0f:63:a7:41:01:0c:f7:b0:8c:1c:71:ec:0c:
0a:a8:3c:fe:8a:80:02:23:63:7f:61:33:6c:dc:65:
56:f0:35:29:5b:4c:6f:14:3a:3b:26:26:86:ec:af:
c5:a7:d0:8e:f9:ac:d3:7c:04:6d:6d:a5:3c:d7:11:
ca:b8:7a:f2:36:ad:15:a0:0f:e2:90:e8:7d:3b:b8:
ca:04:01:39:bf:be:6d:b3:60:66:f7:fd:21:01:de:
d7:cd:ec:7e:ed:75:49:11:ff:a3:a1:a5:74:4f:37:
d7:6e:8f:07:39:2a:78:ca:e1:d4:dd:1c:63:81:8a:
31:e0:2d:ee:e8:25:2b:b6:00:37:97:dc:e0:1a:bb:
33:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:81:E0:50:13:AF:56:48:9E:7F:DD:70:E4:DB:69:49:57:8E:C4:45
X509v3 Authority Key Identifier:
keyid:36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:e3:9b:3f:bf:1e:2c:94:c6:51:35:90:bc:ab:1a:b3:88:6c:
47:22:bf:9e:02:06:db:7a:fd:79:8a:f7:b7:cf:8d:70:15:10:
6d:4f:68:34:57:23:b8:62:64:24:c9:71:d0:09:40:66:e1:a8:
84:39:08:7c:b0:f8:a0:c7:ce:71:28:c1:b0:e6:8b:0c:a3:a1:
47:7e:77:84:b2:51:2b:44:0c:90:e1:6f:94:82:08:01:2d:dd:
99:7f:10:a5:ca:bd:0f:a6:f0:c1:91:ed:a2:64:30:73:4f:31:
30:9b:91:67:96:0d:1f:0c:04:f8:d9:2b:2b:01:e6:f2:19:46:
23:30:7b:16:01:a3:c9:77:92:4f:29:98:7d:ee:50:0a:8a:7a:
dd:33:5e:88:f8:39:82:e6:a1:c0:d3:39:c6:32:b0:83:60:44:
82:24:ae:96:a9:4e:b8:c1:a8:d0:41:23:e2:21:fe:e9:52:ec:
b3:75:39:af:c3:e6:cd:f9:ed:82:d6:cc:27:78:1b:19:35:c0:
88:43:6a:3b:e9:76:b6:35:86:97:d3:46:41:5a:3a:91:1a:6d:
92:be:a7:ed:2c:83:24:12:62:89:d0:6e:f6:0e:07:c5:0f:64:
bb:f8:53:ad:a6:bf:33:74:1a:e6:63:51:3d:42:c6:d9:4a:3b:
01:47:f3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:35:23 2025 by rpki-client