Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
File: 1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json)
Hash identifier: CbLP5Vw23wKXdSyMPXJlPjrffs8fBZmxQsoesMXdRXo=
Subject key identifier: 08:AD:47:5D:A2:04:59:D1:D1:EB:B1:91:3E:5C:B5:82:8A:64:50:4B
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial: 019604C12A542EBECB193D101DB08346A470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
Manifest number: 0E24
Signing time: Sat 05 Apr 2025 07:01:30 +0000
Manifest this update: Sat 05 Apr 2025 07:01:30 +0000
Manifest next update: Sun 06 Apr 2025 07:01:30 +0000
Files and hashes: 1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: WOO68eGe+wk7PlplYyUsMn/hYxUMTOsLi7U2wW57Nnc=)
2: AQyWHoTpIoD9YkmssqSGTmtU3kY.roa (hash: gQkpbE3OwjFrYUS2/tIcrYz4PZ/Z8nNnk27GBtk07kI=)
3: n9QbbxtHUjuRXoqW5WKf1TIqSDE.roa (hash: VlEMVs5cMOSULcZyXmypke2XQns+4ddKAif1EvT7d+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:c1:2a:54:2e:be:cb:19:3d:10:1d:b0:83:46:a4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Validity
Not Before: Apr 5 07:01:30 2025 GMT
Not After : Apr 6 07:01:30 2025 GMT
Subject: CN=08ad475da20459d1d1ebb1913e5cb5828a64504b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ae:d6:45:77:e8:92:54:4d:2f:31:8f:19:e1:
7a:36:bf:af:30:28:01:a9:e5:ef:4f:eb:75:92:b3:
7c:96:84:2c:12:03:1b:5c:1f:dd:c7:ca:a3:b4:d8:
7f:61:80:ca:f1:8c:f5:ea:15:85:29:8f:eb:d7:f9:
f6:2a:a4:14:d6:15:a9:9a:25:b4:7a:96:01:2f:be:
fe:07:6c:3f:7a:ca:87:7f:c9:ee:fc:4f:a0:56:e8:
a5:d5:3d:12:2f:a0:f6:17:4d:ac:f2:d9:ff:93:44:
00:08:b6:56:e8:75:56:c6:c6:84:cc:70:83:b2:1d:
d3:5b:44:0e:78:eb:8a:b8:cc:be:7b:fe:b4:54:ca:
db:3f:9a:1a:df:a9:6a:18:ac:a1:86:4b:c1:7e:a2:
36:55:f0:9c:69:98:ff:cb:b1:54:37:04:8e:3c:73:
4e:5a:6a:2e:ea:3f:27:7e:50:e5:da:4c:2f:eb:d4:
87:1b:d9:ed:b2:c9:85:29:a8:bb:74:01:c8:e3:c3:
fe:f7:68:58:5f:49:2a:6d:6d:6b:0d:3e:da:a6:95:
ac:cc:d2:52:bb:20:e1:4e:6c:31:95:7d:5d:4c:ee:
9b:6e:4a:85:0b:d4:08:6f:ba:62:ac:bf:9b:79:29:
2a:39:ff:d2:73:4f:be:c2:32:c7:cb:20:e5:f7:ce:
98:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AD:47:5D:A2:04:59:D1:D1:EB:B1:91:3E:5C:B5:82:8A:64:50:4B
X509v3 Authority Key Identifier:
keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:48:d4:91:0c:1f:38:9b:6d:32:76:25:13:f1:74:c7:22:70:
f3:fe:c7:1f:4c:f4:b9:5b:a9:39:a2:4d:2a:22:ee:b5:87:14:
88:e3:44:1d:09:f6:7a:10:5a:05:13:19:67:cd:c3:f9:4a:e1:
85:be:21:17:92:9a:20:75:30:98:18:a4:4f:b6:c9:a7:9d:91:
0f:0d:a9:ba:a3:2a:49:48:be:09:b1:75:8b:c3:33:1d:3b:06:
33:2a:70:0b:bc:f4:34:5a:d9:84:ee:5f:9b:b5:cf:f3:fc:ff:
2b:7a:8c:e2:27:65:eb:54:b1:6b:81:db:69:39:7b:f8:ee:4d:
49:ee:5d:d2:8b:92:05:8d:10:ab:4f:4a:3e:7c:0a:c3:2c:d1:
dd:e7:75:a2:ac:02:2b:13:29:1f:35:73:e6:27:d0:29:70:9f:
f5:c4:42:17:30:c7:4b:8b:f1:b6:df:14:de:98:3c:0d:dc:f3:
19:02:8e:09:86:2f:f5:4d:f8:dc:dd:50:f4:e0:07:85:ea:c3:
21:f6:e5:e7:59:d2:29:9b:99:5e:f3:89:6c:38:23:6d:22:40:
00:65:56:08:ec:c0:d5:d9:ff:c2:58:7d:50:2a:9b:50:76:a9:
ac:ba:de:20:14:95:95:92:58:84:30:85:78:52:e4:cd:7c:df:
5a:2f:07:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:33 2025 by rpki-client