Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
File: c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft (raw, json)
Hash identifier: FwZKKkrPVceWDtG00dFI05VJ5+cjNJbU4u0tieLZ2GI=
Subject key identifier: F7:23:9F:32:BA:91:9B:87:FD:B7:21:9F:3E:5D:6D:72:B3:39:91:AB
Authority key identifier: 73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
Certificate issuer: /CN=734c3511cbff092816418be477cb553d66b5b84f
Certificate serial: 01961245D50807A070DE63499A0E990B62E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
Manifest number: 1374
Signing time: Mon 07 Apr 2025 22:01:28 +0000
Manifest this update: Mon 07 Apr 2025 22:01:28 +0000
Manifest next update: Tue 08 Apr 2025 22:01:28 +0000
Files and hashes: 1: c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl (hash: LCu6zFgA0QaYTcPSM125H7mCoRu+Z1nikUXxEgoE+w4=)
2: s3lH6NKYWmmwJhlNdBC0Z4wTX7s.roa (hash: yGRXRmilLINdMy7QeallAtPWcWMTpoSWpUomtg+4yo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:45:d5:08:07:a0:70:de:63:49:9a:0e:99:0b:62:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=734c3511cbff092816418be477cb553d66b5b84f
Validity
Not Before: Apr 7 22:01:28 2025 GMT
Not After : Apr 8 22:01:28 2025 GMT
Subject: CN=f7239f32ba919b87fdb7219f3e5d6d72b33991ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ec:f0:74:83:58:16:70:15:7c:ce:a4:0d:31:
bd:09:47:ed:e4:b2:fa:af:52:9e:d2:e0:7d:5b:2c:
00:d5:d9:7c:22:7a:18:59:2b:29:e1:af:21:12:54:
df:c2:23:87:79:b1:21:d8:7b:c7:c0:42:51:e6:98:
48:12:d2:dd:17:39:75:40:87:b3:cc:3f:ab:76:44:
f8:77:ce:08:d1:fa:d0:2b:5d:d1:a0:6c:98:b9:cd:
f3:37:d8:35:34:86:6a:2e:b2:0f:bf:d1:6e:76:c3:
34:8e:b9:89:8a:5a:70:c5:3a:78:0e:f4:98:46:20:
25:fb:41:40:0e:a7:11:3a:16:ec:65:0a:c0:85:4e:
6f:44:a3:d7:53:4c:12:dd:59:89:7a:84:46:71:08:
1d:72:52:d9:4e:5c:2f:27:59:c1:e1:b4:c2:e3:91:
5d:1e:fb:8f:b0:3a:98:68:0c:d4:c0:b0:f7:cf:db:
a6:4d:15:f7:05:49:2f:1b:57:a8:56:75:2b:d3:cd:
bc:bf:bf:cc:9c:6c:1f:60:5d:7a:0f:f1:31:12:c6:
de:1b:aa:91:c5:41:d8:5b:98:a9:e1:c6:c3:25:51:
2b:e4:98:72:a3:40:1e:48:9c:76:a4:7b:e9:9f:20:
1d:0f:e2:80:9d:96:70:6b:9e:ae:12:97:da:73:df:
64:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:23:9F:32:BA:91:9B:87:FD:B7:21:9F:3E:5D:6D:72:B3:39:91:AB
X509v3 Authority Key Identifier:
keyid:73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:aa:ac:a7:c5:97:26:3b:9f:ec:01:9e:7a:9a:7f:69:57:ce:
40:fc:a7:68:e5:4d:57:df:63:2e:a8:c6:68:a2:b7:04:97:ab:
71:73:8c:6c:ef:b8:a1:e1:3a:c7:1a:db:54:b5:42:e7:a6:eb:
f3:6a:44:c0:07:f6:bd:78:d6:6e:88:c0:cb:32:99:4c:aa:ec:
9c:6e:59:5e:b6:c8:b6:6c:ac:6d:fb:a8:3b:c5:ac:f7:aa:85:
7b:2d:0a:d0:af:aa:d3:90:61:85:42:05:17:99:28:b1:84:33:
57:17:b0:5f:e0:75:7d:a8:8d:03:88:2d:0d:46:f6:6b:74:b9:
a8:07:3a:3a:54:a6:a0:f4:67:90:45:4e:20:2a:ca:db:01:ab:
2d:86:ed:b5:70:99:29:64:c3:4e:a7:d7:76:39:0d:97:db:d5:
b9:85:ec:9e:ed:c9:5d:8f:23:c0:04:33:53:88:eb:3b:8e:6f:
7a:e0:c9:72:aa:a9:79:15:d2:79:42:9e:9d:d2:b8:de:60:77:
85:ec:d7:a1:07:52:41:31:cd:c9:6f:b6:85:e1:6c:4c:ee:86:
f0:0d:7a:0f:5e:fc:cb:c0:f3:e3:32:e8:59:a3:f8:d1:ae:5c:
dc:d5:0f:3d:b8:85:ac:d7:90:f5:3d:07:16:8e:96:63:89:fe:
39:be:4e:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYSRdUIB6Bw3mNJmg6ZC2LjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNGMzNTExY2JmZjA5MjgxNjQxOGJlNDc3Y2I1NTNkNjZi
NWI4NGYwHhcNMjUwNDA3MjIwMTI4WhcNMjUwNDA4MjIwMTI4WjAzMTEwLwYDVQQD
EyhmNzIzOWYzMmJhOTE5Yjg3ZmRiNzIxOWYzZTVkNmQ3MmIzMzk5MWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+zwdINYFnAVfM6kDTG9CUft5LL6
r1Ke0uB9WywA1dl8InoYWSsp4a8hElTfwiOHebEh2HvHwEJR5phIEtLdFzl1QIez
zD+rdkT4d84I0frQK13RoGyYuc3zN9g1NIZqLrIPv9FudsM0jrmJilpwxTp4DvSY
RiAl+0FADqcROhbsZQrAhU5vRKPXU0wS3VmJeoRGcQgdclLZTlwvJ1nB4bTC45Fd
HvuPsDqYaAzUwLD3z9umTRX3BUkvG1eoVnUr0828v7/MnGwfYF16D/ExEsbeG6qR
xUHYW5ip4cbDJVEr5Jhyo0AeSJx2pHvpnyAdD+KAnZZwa56uEpfac99kOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcjnzK6kZuH/bchnz5dbXKzOZGrMB8GA1UdIwQY
MBaAFHNMNRHL/wkoFkGL5HfLVT1mtbhPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzB3MUVjdl9DU2dXUVl2a2Q4dFZQV2ExdUU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jM2QyMjAtNDk4NS00ZDE5LTgyMDAt
NjA4MDk3ZjE4ZDgzLzEvYzB3MUVjdl9DU2dXUVl2a2Q4dFZQV2ExdUU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9jM2QyMjAtNDk4NS00ZDE5LTgyMDAtNjA4MDk3ZjE4ZDgz
LzEvYzB3MUVjdl9DU2dXUVl2a2Q4dFZQV2ExdUU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqqsp8WX
Jjuf7AGeepp/aVfOQPynaOVNV99jLqjGaKK3BJercXOMbO+4oeE6xxrbVLVC56br
82pEwAf2vXjWbojAyzKZTKrsnG5ZXrbItmysbfuoO8Ws96qFey0K0K+q05BhhUIF
F5kosYQzVxewX+B1faiNA4gtDUb2a3S5qAc6OlSmoPRnkEVOICrK2wGrLYbttXCZ
KWTDTqfXdjkNl9vVuYXsnu3JXY8jwAQzU4jrO45veuDJcqqpeRXSeUKendK43mB3
hezXoQdSQTHNyW+2heFsTO6G8A16D178y8Dz4zLoWaP40a5c3NUPPbiFrNeQ9T0H
Fo6WY4n+Ob5OQg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:15:20 2025 by rpki-client