Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
File: toqZTkLmDaT0pUdbFfXidRbHzxQ.mft (raw, json)
Hash identifier: cmhyoxEPOWzAa9Da3srI+BKVYkktBT1A38TadbmmVpI=
Subject key identifier: 2C:A1:84:77:09:4A:82:86:00:7C:FD:18:9B:7B:2F:B6:50:67:BE:DD
Authority key identifier: B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
Certificate issuer: /CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Certificate serial: 0195900640F642AE5702985397DA4963542F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
Manifest number: 1497
Signing time: Thu 13 Mar 2025 15:01:23 +0000
Manifest this update: Thu 13 Mar 2025 15:01:23 +0000
Manifest next update: Fri 14 Mar 2025 15:01:23 +0000
Files and hashes: 1: Gqb6OgiiPyPHWY86Q4S-zwTF1xY.roa (hash: Os7YNQWNXg8f2DoDK3e2S/uuUULEf5X8h6dOyySYafw=)
2: toqZTkLmDaT0pUdbFfXidRbHzxQ.crl (hash: rDRbsbXZzkO8ZpKetfsb5pY1laMLfh9O0+c484pO8O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:06:40:f6:42:ae:57:02:98:53:97:da:49:63:54:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Validity
Not Before: Mar 13 15:01:23 2025 GMT
Not After : Mar 14 15:01:23 2025 GMT
Subject: CN=2ca18477094a8286007cfd189b7b2fb65067bedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:17:c0:10:fc:af:c5:e5:c5:dd:2c:54:18:
56:a8:fa:c9:ba:61:5e:97:f6:b8:b5:6c:ab:ac:18:
8c:ad:1a:5c:ec:a9:6c:28:0b:81:13:5b:33:df:21:
a7:78:8b:c8:c1:00:4f:02:06:af:72:f9:d4:72:d6:
c5:c1:3a:b9:f3:41:a1:5e:82:a7:ca:5f:1d:b9:49:
13:9b:37:b2:3b:dd:2f:8a:95:11:c3:c4:ee:89:fc:
4a:b0:b0:e3:2f:33:12:b4:3f:72:3b:83:e8:77:c4:
db:46:8a:7d:b5:97:41:e5:fe:17:7d:4f:e7:a2:b4:
d5:5d:5f:20:e7:80:24:0d:70:20:13:07:fa:97:79:
91:cb:1b:47:81:c8:a4:c1:a7:7e:4b:51:a1:a3:57:
62:aa:88:47:bc:92:93:d4:b2:65:9f:8f:1e:d7:d5:
5b:a2:6f:c8:ed:99:e1:02:0d:50:08:e4:04:44:b9:
81:62:19:89:cb:d5:a8:70:5f:98:b7:2d:13:3e:97:
18:35:2b:e3:34:98:1a:40:08:51:79:e9:9f:7d:8b:
1d:8b:e5:40:29:ea:be:8b:48:34:f0:89:3f:1c:c9:
44:96:29:4e:6e:37:97:23:af:6a:2b:21:9c:13:5e:
af:ea:e2:6b:a6:69:cf:23:b9:37:46:9e:9e:7d:13:
c0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A1:84:77:09:4A:82:86:00:7C:FD:18:9B:7B:2F:B6:50:67:BE:DD
X509v3 Authority Key Identifier:
keyid:B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d6:4b:81:dd:72:2c:b3:6c:09:53:ec:e8:b5:0c:58:95:52:
64:55:05:24:1f:f3:07:27:26:22:e4:c9:d7:a4:2b:f7:c1:10:
e0:a0:34:92:27:60:53:a4:98:0e:15:36:d7:71:bb:90:17:7c:
94:d9:a3:47:1a:cb:a9:60:89:df:ab:7c:f4:8b:3d:f0:67:68:
04:2b:6c:80:07:c3:a1:e1:c1:75:c3:a7:9d:ff:50:99:ed:c8:
3e:08:02:e1:a1:68:9a:eb:fe:83:df:03:7b:95:a7:f4:38:d2:
49:76:e9:07:01:b6:33:46:20:56:57:fc:c4:a7:9c:75:95:a6:
26:77:27:75:6f:d3:0e:f9:3d:3d:fd:66:40:7d:35:a9:1c:5f:
3e:54:db:e8:71:d1:ea:f8:d9:eb:d7:fe:3c:7d:3f:a8:a1:1f:
c2:17:be:b8:2f:a9:ec:88:41:43:3d:f8:02:5a:aa:dd:72:01:
40:e0:74:29:ff:1f:e5:b1:b1:f2:46:04:aa:ab:84:99:74:1a:
75:58:29:fe:bc:29:ac:38:8a:0c:7d:96:c0:0c:e8:23:37:64:
c0:2a:5a:60:39:80:1c:f6:34:c1:19:2c:6b:58:d7:e4:0c:b2:
60:20:cb:2c:96:bf:63:7b:4b:e6:77:cf:7e:7f:17:ac:08:49:
ea:0c:77:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:50:12 2025 by rpki-client