Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
File: c271cwBQxyD4x5BGbri4pI7750k.mft (raw, json)
Hash identifier: mRNuHKzc8cYf4wYYrWUMd5dBlMtpuSCHdUHkj44qLTg=
Subject key identifier: CC:82:5C:00:04:B2:58:CA:01:A4:E8:55:6F:14:38:5F:FD:64:E3:E4
Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749
Certificate serial: 01965047F405C52B40599F079CA99C8DB170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 23:00:14 +0000
Manifest this update: Sat 19 Apr 2025 23:00:14 +0000
Manifest next update: Sun 20 Apr 2025 23:00:14 +0000
Files and hashes: 1: U_EXFi0_K3LJzzOGjdd59sx5hhk.roa (hash: InLExGG/VRrfIxx+5P3BkdCZ9LeR0AfhLMm27/EtRM8=)
2: c271cwBQxyD4x5BGbri4pI7750k.crl (hash: xBQZu9H/KhdbHVcAsvmPQfLit3/1sukz7QggyWWgC2s=)
3: fpEtFF5tn_F6AS7ORtQk_79zOLM.roa (hash: ecIVoFs7h4RkV6LSwkMSO/FMl9ZMbuW6Wd5+RjOOYhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:47:f4:05:c5:2b:40:59:9f:07:9c:a9:9c:8d:b1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749
Validity
Not Before: Apr 19 23:00:14 2025 GMT
Not After : Apr 20 23:00:14 2025 GMT
Subject: CN=cc825c0004b258ca01a4e8556f14385ffd64e3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:ca:dc:91:96:7d:ac:6a:b3:4f:e8:ad:b4:
da:aa:7c:d5:a0:e1:11:ec:85:0a:c9:b3:b6:6a:20:
94:d2:d5:63:ec:b2:55:78:b7:1e:36:c0:6d:8e:dd:
05:a1:5e:0d:16:26:2b:55:f3:fd:6f:e4:2d:c8:64:
81:83:95:de:67:92:a4:bf:61:6b:a0:37:72:f9:69:
a5:05:92:01:e3:17:6e:da:4e:d2:36:fb:6c:96:f3:
0a:9d:29:17:00:58:7b:06:37:02:6f:69:0c:eb:ec:
f5:32:03:f7:8b:40:c8:57:2f:30:dd:06:dc:06:50:
85:7d:fd:d7:45:99:ed:3b:b4:aa:a3:8e:96:be:10:
c6:f1:4d:af:c2:a1:44:99:b5:c4:07:e2:0b:b1:7b:
b6:7a:21:1c:fc:2c:95:82:e9:e2:11:89:56:77:d4:
3b:ff:dc:9e:34:e9:04:f1:6e:c4:8c:64:c6:71:04:
4b:6a:99:61:a0:1f:73:2b:29:83:d3:f8:16:01:2f:
82:3e:ca:7a:81:6f:fd:12:c5:48:86:a2:55:66:71:
e5:c3:8d:37:e2:b8:70:74:f8:0c:40:1c:a1:7d:57:
16:38:6c:7e:c9:f8:c1:a3:50:84:29:89:e2:70:9c:
85:37:64:ec:b1:af:eb:de:34:e0:d2:5f:e3:44:af:
83:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:82:5C:00:04:B2:58:CA:01:A4:E8:55:6F:14:38:5F:FD:64:E3:E4
X509v3 Authority Key Identifier:
keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:78:64:77:98:6d:29:68:cd:ca:2d:fc:41:a1:af:7e:ae:af:
d6:57:03:3e:46:1f:a1:82:be:d4:75:7a:a8:82:a5:35:c8:54:
16:76:e0:03:5a:16:87:fa:cd:a2:73:57:7c:0a:28:d9:72:55:
01:d2:5a:17:ec:a3:87:b1:7e:78:ca:57:6b:15:0c:f2:13:41:
eb:e9:67:fa:91:49:e6:76:de:e4:3a:b2:67:f8:2a:4b:4e:9c:
3c:ba:6b:c2:6b:63:42:b2:41:e4:92:87:b9:fb:72:29:24:f8:
12:dc:bc:e2:db:7a:cb:e7:1c:df:9b:10:14:86:1a:dc:93:b5:
63:f2:60:5f:84:64:62:a3:eb:60:16:0b:ac:51:40:23:9f:e0:
72:ca:e7:d9:91:14:cb:e3:3d:47:92:1a:7a:c0:11:c0:6f:d9:
ce:66:7d:8a:f4:79:f0:2a:9d:fb:49:81:76:d8:0a:79:48:d2:
08:f6:3a:4b:19:17:43:c6:a0:af:44:8f:3e:f0:b7:a2:09:7b:
ac:fa:ae:33:86:43:f3:85:26:49:b2:e4:21:15:88:41:2e:10:
89:f5:24:5f:ad:b9:78:9d:3d:4a:61:4b:ae:0f:1f:f0:47:e3:
06:cd:1c:03:4a:27:13:25:6c:fc:a0:63:78:f8:69:2e:89:29:
0b:8f:d8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:19:09 2025 by rpki-client