Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: FYqg0Dq4GYdRF+vAFH4Ac+KxHA6d7pLZeLaa8+mlT+w=
Subject key identifier: F6:08:A3:D1:DE:8C:BF:A1:A4:0C:81:0C:BD:0F:D5:17:13:87:8D:1F
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 01958BF2545523C0392C36C0A161F2C68C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 0D97
Signing time: Wed 12 Mar 2025 20:01:09 +0000
Manifest this update: Wed 12 Mar 2025 20:01:09 +0000
Manifest next update: Thu 13 Mar 2025 20:01:09 +0000
Files and hashes: 1: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: WbZCMRKyIY/G3+3KnerC7xqFTiwg9LYdLxC4azi+Fy8=)
2: evdpU8RxaI_pbdRiidwVOCapui0.roa (hash: gmEXsktEnud6XxBSpR/JYtLPKpbESxZW8V98Ytskm+o=)
3: zC0DwQFXhSD9GmfEt7gqZels6ME.roa (hash: Cq4uPzMv6jZuo+s6z3yPpwudom0heKSg9U70MId82ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:54:55:23:c0:39:2c:36:c0:a1:61:f2:c6:8c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Mar 12 20:01:09 2025 GMT
Not After : Mar 13 20:01:09 2025 GMT
Subject: CN=f608a3d1de8cbfa1a40c810cbd0fd51713878d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:83:17:62:cc:f1:41:6e:d5:ab:ca:d1:64:
19:51:bf:20:ff:4a:aa:d1:9e:ab:f9:8d:57:9b:60:
a2:37:64:e0:44:bb:34:d8:d7:15:ab:5c:96:ef:a7:
eb:20:c1:c8:bb:50:89:77:d6:51:88:69:c4:82:60:
bb:70:cc:29:38:61:5e:1f:c3:72:a9:7c:11:bb:ab:
da:fb:50:fe:16:e6:50:c6:21:1a:37:f3:e5:2c:32:
82:c0:f5:8a:0a:04:e7:aa:9c:0f:17:b0:4d:c9:83:
ff:43:10:30:ba:ba:9b:88:6c:c4:42:95:29:3b:ee:
7f:68:0d:5d:62:de:98:85:96:d5:94:43:26:e6:d8:
99:05:29:1c:fe:ad:88:27:e5:98:66:bc:88:b4:cc:
f0:43:b1:3e:d0:38:38:d8:d0:12:38:1c:cb:78:14:
4b:35:0b:6e:98:e2:3e:00:02:be:0a:d8:68:fb:7b:
aa:3f:dc:e1:c4:52:8f:a3:44:69:f6:75:92:73:26:
64:10:e5:2a:98:65:56:2b:f2:de:0d:5a:e8:05:cc:
1e:c8:5d:0e:0c:8e:79:7e:e6:ed:ab:d7:3e:c2:2d:
66:29:db:a0:80:44:ad:5c:52:2c:cf:95:b4:02:79:
48:2d:8c:55:c4:2f:e8:6c:f3:76:3e:78:2d:f2:2e:
32:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:08:A3:D1:DE:8C:BF:A1:A4:0C:81:0C:BD:0F:D5:17:13:87:8D:1F
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e7:35:95:f5:27:8e:2f:93:b8:d9:15:bc:08:70:dd:c5:03:
52:8b:8e:75:f2:76:6c:55:31:13:6c:71:8b:e1:4b:b1:81:94:
16:55:d4:4e:25:b5:33:44:87:21:2d:88:53:6d:35:95:ee:3d:
93:23:d5:d7:45:ba:b0:76:e3:df:c9:0a:9d:d4:f0:87:c7:86:
5d:3b:e5:0c:2f:53:1c:b6:6b:2d:68:3c:97:ae:2a:dc:62:b6:
45:4c:63:be:d3:01:01:ed:f3:1b:a2:44:dc:62:f3:40:8d:94:
31:80:90:ad:0b:2e:d0:3d:e7:29:b7:e8:31:f0:f5:0d:2f:26:
73:00:62:2b:93:59:77:91:ab:25:a0:fc:38:e6:e5:ed:16:59:
18:a4:a3:0a:da:7e:45:e6:f7:a6:5f:dc:3c:ad:ed:1d:e8:e6:
e9:4d:80:ff:14:8b:ac:08:38:93:cc:fb:31:f3:7e:3c:06:06:
bb:e5:50:e5:44:e7:9f:d6:b0:a1:bc:06:df:88:73:6a:51:c4:
39:3b:a2:06:24:ab:4a:46:78:aa:74:ff:6e:f1:0d:53:16:bd:
19:60:41:b5:85:e6:00:96:b5:59:4d:29:84:ea:de:de:55:9f:
e6:7d:d9:9d:c3:45:e0:ac:4b:97:7f:3e:cb:ea:21:e1:5a:b1:
bc:35:c7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:38 2025 by rpki-client