Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft (raw, json)
Hash identifier: VfmQCkfTNKBovcm992rmzLxwSK3bUdzFceixaC0gpQk=
Subject key identifier: 1D:14:4C:96:68:6B:20:3B:87:EB:2E:F6:9D:40:9F:36:17:C5:24:8B
Authority key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
Certificate issuer: /CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Certificate serial: 01962C3CCDF781379AEF187E037BB7E67FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
Manifest number: 0821
Signing time: Sat 12 Apr 2025 23:01:44 +0000
Manifest this update: Sat 12 Apr 2025 23:01:44 +0000
Manifest next update: Sun 13 Apr 2025 23:01:44 +0000
Files and hashes: 1: 5K2zlrIHADlFytOUhc54zx-uCAw.roa (hash: VJ3nEApsPTUcM1XeIb75bGQ+CbjZ/H8pdnWKdP3UYOg=)
2: cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl (hash: oeRpqDkj2zwqbdKeBJcclI1GbZN6rjxZknymTeJQRzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:3c:cd:f7:81:37:9a:ef:18:7e:03:7b:b7:e6:7f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Validity
Not Before: Apr 12 23:01:44 2025 GMT
Not After : Apr 13 23:01:44 2025 GMT
Subject: CN=1d144c96686b203b87eb2ef69d409f3617c5248b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:e7:ff:46:13:b4:25:37:79:4a:bd:c7:49:
20:a2:cd:d3:fa:d4:8b:1c:8e:6f:74:29:58:f1:1f:
7e:80:81:eb:76:da:74:67:51:91:a0:d0:3c:90:d9:
bf:49:0d:61:2c:82:06:c1:62:5c:24:61:11:70:65:
e3:77:22:96:ea:8c:cd:29:28:13:d1:93:36:9b:cb:
0c:bf:09:0d:95:31:b4:75:5f:19:d6:42:b2:87:74:
57:4a:7e:b4:0e:cc:a4:1d:85:8e:c5:d8:c6:ad:20:
4d:3b:65:b7:02:8c:32:88:0d:99:e3:d3:3e:2d:58:
b7:74:eb:6c:5d:3d:a2:df:41:93:6b:6b:a6:c2:ae:
c3:6f:22:4f:ef:0e:ff:08:28:c8:c3:8f:23:ec:d5:
03:37:a4:a3:86:46:ce:8f:02:92:d9:f7:66:b7:5b:
3a:0c:5a:bc:82:bb:6c:bb:27:44:12:e1:eb:34:2e:
97:51:a0:91:7d:76:16:3a:04:20:2c:5c:6b:0c:a8:
bb:cf:d9:18:71:d3:17:57:82:0d:7b:a1:d8:5c:cf:
31:83:14:09:87:56:f9:25:10:fc:d2:8a:74:9a:cd:
28:7f:e7:37:78:44:7b:71:88:b0:a5:dc:8b:7f:5b:
ed:0d:99:63:31:b9:74:42:68:93:b7:03:8a:b2:5f:
93:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:14:4C:96:68:6B:20:3B:87:EB:2E:F6:9D:40:9F:36:17:C5:24:8B
X509v3 Authority Key Identifier:
keyid:70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:85:fa:2f:48:ab:ec:a0:54:1e:46:f0:61:70:15:1e:e3:67:
09:16:2c:f6:32:44:8b:dd:c2:70:b5:1f:fc:80:96:c0:81:90:
52:dd:08:f8:83:c4:7e:ee:d8:85:10:c0:5b:d5:d6:76:9c:d4:
8f:cf:e8:d2:2f:d6:03:8b:3c:c9:1a:8a:85:5b:23:9d:a1:8d:
ba:a3:5f:ca:ab:6a:01:70:c1:1c:9c:6b:d0:07:6e:31:8f:2a:
70:50:1f:67:07:84:f4:03:13:57:87:26:eb:95:7d:55:56:ea:
41:cf:2e:0f:30:d7:8b:74:e1:59:71:ac:e4:42:d7:72:85:cb:
6b:f6:96:57:20:56:48:ba:48:55:d9:06:f9:87:87:c0:0d:66:
42:c9:d9:a4:59:3d:28:16:04:c3:6d:10:33:3e:38:84:73:c0:
7c:21:bf:55:5d:27:4b:3f:58:7f:73:f0:46:a2:3a:ed:d3:e9:
81:82:fe:47:c4:d7:cc:e9:e3:84:1f:97:b2:70:08:5d:9c:28:
44:0c:c2:40:2e:83:e9:16:2a:a0:f2:2c:ac:d9:c8:d4:fb:bc:
59:69:d2:c0:e3:46:d4:4a:b9:38:d1:4e:b2:08:46:5c:03:33:
d4:1a:31:c1:79:c3:f6:cf:a3:e7:79:26:87:9f:f4:78:db:e3:
8f:33:3d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:52:09 2025 by rpki-client