Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: Qb7Uf6xOr3SPxwoxlf79Nn7BVxD9ryXcQ6Z5ezuvy90=
Subject key identifier: A4:B7:BD:36:B3:0F:1A:AF:47:62:9B:CB:87:8C:F6:CA:7D:D0:04:3D
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 01958EBC70A2BBA3814B30E08DC36AE8F9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 0CFF
Signing time: Thu 13 Mar 2025 09:01:09 +0000
Manifest this update: Thu 13 Mar 2025 09:01:09 +0000
Manifest next update: Fri 14 Mar 2025 09:01:09 +0000
Files and hashes: 1: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: yZwYTjddFdFDvXiMObf7oU3hErBU2NIXawBLkmLm8G8=)
2: VaNHYKd7fkf8MUmIAFzRDiRSuAg.roa (hash: kArqpkPgXwbWfVfsCGeziL2LJL/J3oK8UFUA3DsKS6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bc:70:a2:bb:a3:81:4b:30:e0:8d:c3:6a:e8:f9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Mar 13 09:01:09 2025 GMT
Not After : Mar 14 09:01:09 2025 GMT
Subject: CN=a4b7bd36b30f1aaf47629bcb878cf6ca7dd0043d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:5f:a7:03:4f:b7:ad:44:3e:75:d4:da:e1:
0e:d5:15:d3:b0:a8:2a:c0:3a:0c:35:8b:7e:13:b8:
55:8a:ec:e0:56:60:f0:e5:03:24:a2:cb:e1:98:dc:
a8:f7:d2:6d:2f:92:00:fc:b6:62:2d:03:69:40:5f:
0c:c6:ea:67:01:49:40:c7:8b:8b:8b:34:6e:0b:57:
a2:63:79:e1:1b:28:ef:c5:b0:18:46:f6:59:87:ca:
b1:9e:5b:aa:db:07:9d:51:42:f9:53:ce:c8:be:db:
f2:73:13:87:7c:16:32:1f:0e:aa:a7:a9:20:cd:14:
e1:97:dd:c3:0d:8c:a2:7a:8b:d5:89:3e:51:83:62:
d4:78:e2:55:c3:51:f1:c0:12:ea:e6:65:b9:62:69:
9c:83:7f:5d:dd:c7:0c:cb:04:f6:bd:06:ce:bb:0c:
9f:b8:6b:46:ec:3b:fa:51:4e:d4:a9:ab:d4:2c:2e:
4d:ea:a7:14:d3:14:6d:9e:2b:e4:88:0d:b5:d5:6b:
4c:fe:70:21:37:bb:64:dc:d9:f3:dc:4f:c8:a4:36:
88:a5:34:15:08:d9:ff:6e:36:50:26:f4:08:d3:c7:
e7:b3:9a:79:a4:94:1d:e3:bf:db:94:e1:5c:ef:b9:
1c:ab:f6:9f:67:0e:2f:b2:34:b3:fa:f3:6d:45:ce:
4d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B7:BD:36:B3:0F:1A:AF:47:62:9B:CB:87:8C:F6:CA:7D:D0:04:3D
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:8c:3d:57:2d:8a:ad:46:23:de:c0:1c:ee:e8:cc:52:0a:ca:
17:86:64:91:6b:14:16:0a:9d:a8:9b:c1:bb:92:fb:09:00:6f:
af:f9:2d:51:e8:7f:e9:95:9e:25:ed:fc:e9:af:6b:98:85:ca:
f5:34:c8:8f:7b:c4:c7:4a:e7:cd:38:e5:fe:1e:95:dc:51:9a:
79:67:a2:83:e2:0a:1d:63:ca:65:19:bd:4e:30:ad:3f:e4:29:
df:e7:0b:e3:91:ba:89:d6:48:49:1d:35:35:7d:a9:f8:9e:83:
13:6b:61:d9:32:d8:c7:35:69:6a:46:8f:82:e2:59:34:5f:d5:
73:2d:e2:ac:1a:1f:55:f5:1c:09:0d:e1:76:9a:22:b6:20:17:
86:03:2f:1e:95:75:83:ba:54:22:4a:c4:d5:08:7d:22:1d:44:
43:d5:fe:33:57:bf:a1:ef:94:f5:26:ef:e3:0d:f7:01:ba:33:
2d:05:19:fc:df:a1:c2:24:75:4e:d0:4c:1c:1a:34:ca:27:85:
dc:dc:ba:3f:e4:c7:7d:e7:4b:ab:18:5c:b4:5a:18:6a:54:43:
0d:26:db:bf:56:f7:b5:f3:d5:8e:5a:a7:86:76:5d:85:9b:ad:
d6:33:34:b8:f3:44:9b:df:5a:53:bf:57:3d:09:7d:bf:a6:a5:
75:fc:97:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:08:29 2025 by rpki-client