Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier: 4nVnQasAi1m/s0DWMDcqsmOt4WyzDi0az5zSau2IXcE=
Subject key identifier: 0A:83:2B:5B:72:30:55:DE:3B:BF:4D:3B:91:FE:86:E5:CA:F5:BB:2F
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial: 0196150F6ED6E989A8A49C00DA9483E67BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number: 0625
Signing time: Tue 08 Apr 2025 11:00:54 +0000
Manifest this update: Tue 08 Apr 2025 11:00:54 +0000
Manifest next update: Wed 09 Apr 2025 11:00:54 +0000
Files and hashes: 1: 5OdHvHOcZkrao-9cj9p2twVtXj0.roa (hash: XE/cbPsbZGNTjgltCjh6PwbFsSQa/FeH5vMG4ogZQBU=)
2: BxevXOZBdFUOOljteOuO-Rxt-CY.roa (hash: 3iKh9PQRS6dYBM+vLpV5Vh4W7QUExMRDQ5j2EO0fnVo=)
3: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: kGqFDb7VTKqsxegM8CT84nLHT5y0Hx44ohMAyzn1068=)
4: dxDHiWZSI0UaIHekmjGJ3sxW6wY.roa (hash: miwDVBoTIblNIC6j43ewfXiSRHSZo0go2veqU8bISQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:0f:6e:d6:e9:89:a8:a4:9c:00:da:94:83:e6:7b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Validity
Not Before: Apr 8 11:00:54 2025 GMT
Not After : Apr 9 11:00:54 2025 GMT
Subject: CN=0a832b5b723055de3bbf4d3b91fe86e5caf5bb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:23:a0:c1:23:ab:cc:5b:de:4b:55:37:98:
65:9a:71:cf:25:3b:d1:0f:be:2c:28:48:a1:ca:b9:
70:e9:f4:5f:a1:8b:91:da:e2:7b:2c:dd:70:b5:2b:
59:46:f1:71:7b:5f:2c:10:91:42:49:5a:e3:0d:72:
40:83:cc:80:7b:fe:48:99:e8:73:53:98:89:d8:e6:
d3:ae:64:f2:51:cd:21:6d:b7:ec:f8:fb:df:38:62:
e1:17:ca:5a:b6:b0:a7:62:2e:03:66:3b:94:32:27:
d6:10:04:f1:82:54:b4:d5:c2:c0:dd:6e:5a:fa:51:
3e:87:1b:85:e2:1b:76:41:34:88:39:ce:1e:44:0a:
66:4a:d4:78:64:25:0f:0b:b2:dc:27:ad:a9:b4:02:
6d:1e:14:21:72:3c:2d:3c:7e:77:88:38:96:d4:ea:
ee:3b:c8:86:0f:ee:41:ae:83:5a:cd:db:e5:b7:54:
77:1d:c2:c0:f7:bf:e8:b1:f5:61:b6:c5:5f:4e:c4:
0e:f3:6a:cc:04:a6:76:fd:e6:1d:68:b6:39:fc:f9:
df:b2:ce:2f:03:b9:a3:41:14:6a:a8:63:46:79:12:
b9:1d:cf:6c:11:a0:06:8d:81:a8:3c:14:d3:2a:6f:
50:3a:7c:02:d0:58:a7:31:48:c9:e2:c3:f3:31:b9:
41:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:83:2B:5B:72:30:55:DE:3B:BF:4D:3B:91:FE:86:E5:CA:F5:BB:2F
X509v3 Authority Key Identifier:
keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5a:cd:50:b6:c6:a6:5e:5d:e8:46:ca:e0:26:a9:c2:86:40:
e3:89:1b:ba:20:ab:b0:7b:cd:f7:39:e5:bb:5e:78:ae:3f:8f:
7e:ac:bb:de:71:6e:fa:73:85:7e:72:8d:59:24:a6:65:83:c8:
68:fc:b4:f1:f7:de:ca:4b:a3:b5:15:9e:58:87:a4:63:1f:05:
48:ae:39:4c:94:91:a0:8b:15:3a:3d:a8:46:aa:7d:48:23:ae:
a6:d8:c4:01:fc:8d:85:e4:13:76:da:83:84:01:24:0e:12:50:
be:86:db:41:98:c7:c3:53:ea:6c:49:bf:c3:5f:9a:9b:ce:3f:
06:74:c6:73:20:0d:f9:c7:75:1f:34:67:72:62:60:1a:ac:7f:
3d:07:d0:3e:11:90:92:01:c2:e5:2f:dc:77:46:9d:25:93:9c:
a9:56:ab:52:5a:0b:e5:af:9f:cf:a8:5e:72:84:fe:f5:d1:e8:
52:61:f6:f3:73:18:1a:b7:91:f7:60:7d:19:6a:e2:47:a5:a5:
b9:9d:38:8c:ec:58:3e:32:29:b7:62:f9:2c:14:62:a6:6a:17:
12:c7:12:b7:e6:6f:38:29:6d:c0:b4:04:2a:3b:f3:f1:ba:ac:
46:fe:89:02:f2:e3:2c:c6:81:7e:92:d5:13:c4:85:dc:d3:70:
11:aa:60:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:29:11 2025 by rpki-client