Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier: GKidwMTkfWwuhEqUZH+vAH2TKPEMnCmC5QjACaS9+bs=
Subject key identifier: 56:BC:89:C0:06:7B:00:8F:CA:3B:3F:F5:1A:E2:C7:76:57:B9:7B:4A
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 01958C6073372C66A21726730E39F7B0723A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number: 149A
Signing time: Wed 12 Mar 2025 22:01:25 +0000
Manifest this update: Wed 12 Mar 2025 22:01:25 +0000
Manifest next update: Thu 13 Mar 2025 22:01:25 +0000
Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: DfS8jxjOtF0Ftwiag21mWtDtCMH3V0A62I/AjiFKPRw=)
2: xOgebtB7-JslaYskbHWpkE_rjGk.roa (hash: WlppSlnMGpM2+YnpOQ+4knYBpRNoouui2tk9UJv6tWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:73:37:2c:66:a2:17:26:73:0e:39:f7:b0:72:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Mar 12 22:01:25 2025 GMT
Not After : Mar 13 22:01:25 2025 GMT
Subject: CN=56bc89c0067b008fca3b3ff51ae2c77657b97b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:f7:93:98:63:78:3e:99:1f:9d:59:68:7d:
be:8f:90:8c:a9:e3:90:85:e3:dd:23:82:86:68:bd:
f1:d3:21:85:c5:f8:ab:e1:c5:cf:a7:a2:95:af:70:
a7:4a:ee:eb:3d:6f:a5:a0:14:af:95:6d:e0:ee:dd:
21:13:1a:c3:8c:ec:63:97:d5:5b:e4:aa:df:12:0c:
b8:98:38:f4:c2:09:2f:4e:c0:fc:d2:ce:ce:f1:7b:
a6:ab:3c:8e:3e:25:6f:d1:45:f6:a4:4f:90:32:31:
39:d0:63:b1:81:9d:59:ed:e1:31:d7:91:62:ff:ef:
c7:56:2e:5a:5d:a9:e4:12:d7:3a:96:d0:3a:38:5f:
9b:a9:72:c6:63:d7:a5:7e:f4:6b:3e:4a:78:c7:02:
cd:03:f2:bd:16:38:99:78:32:08:03:25:ee:f3:ca:
d5:f5:eb:98:8b:54:48:6c:c7:4f:e6:a3:b1:c0:7f:
f1:e3:fa:b0:7a:ae:b7:83:d9:e5:35:44:1d:c6:7d:
d1:f6:44:50:70:94:8b:ac:31:e1:2d:0a:9c:56:af:
ad:67:4e:6f:68:85:91:e2:75:bd:a6:c4:a1:d3:44:
e9:94:bc:21:9b:fb:86:1c:10:68:b0:fd:14:3d:a3:
99:11:28:c7:1b:f7:49:df:1a:b1:38:e4:a5:98:c6:
1a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BC:89:C0:06:7B:00:8F:CA:3B:3F:F5:1A:E2:C7:76:57:B9:7B:4A
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:55:68:14:33:3a:b2:0d:4c:c3:79:c7:87:51:13:42:c9:10:
73:af:95:af:d4:30:77:72:1c:47:5b:ed:f4:f0:d9:a1:7e:18:
b5:d6:69:cf:55:5e:8e:66:03:21:c6:25:9d:60:11:53:4e:bb:
af:ec:56:31:91:cf:74:3d:be:0e:3e:3e:76:9b:08:d3:a0:80:
b5:3a:1e:1e:1a:a7:22:8a:e0:70:ea:92:a1:4b:9a:3c:33:1b:
0c:f2:49:89:cf:62:ea:38:4a:7a:2a:c1:26:ef:85:97:47:a6:
45:b3:7e:75:e4:88:50:87:b9:55:0c:2f:8f:54:a8:be:b4:c3:
5b:0e:89:3a:7c:d9:d6:0a:4f:7c:8a:c4:13:8b:7a:7b:2f:e9:
1f:cf:53:54:16:39:cc:01:09:e6:5e:48:39:55:2f:ba:51:1e:
5d:8a:28:4e:b4:e3:0e:3f:0e:86:16:3b:1b:c6:54:c0:02:88:
cf:d3:b8:a4:69:b3:5c:c9:5f:de:0f:31:53:fc:31:bc:b3:fc:
d4:d9:ce:ae:ff:ec:66:03:62:22:89:f7:14:87:49:8e:1d:9d:
42:0d:f3:85:ce:ea:7b:77:c0:bd:77:ef:a4:1e:b8:1a:fa:75:
75:20:95:4e:dd:b0:49:14:0c:fb:52:98:0b:dd:a6:72:dd:7f:
f4:f9:2f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:05 2025 by rpki-client