Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
File: cNE-Khag7mY0IHqI_wqsTqvGaTw.mft (raw, json)
Hash identifier: rSn8v9uPcrcc6lkBaaohkB+qEhTLNZoS7BAjEZxjDEE=
Subject key identifier: 81:F1:EF:35:B6:11:98:3D:AA:01:03:E7:B5:1B:7B:E4:2A:CD:4E:DE
Authority key identifier: 70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
Certificate issuer: /CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Certificate serial: 01964CA2336B30305D9038E7F91EFB8F2296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 06:00:20 +0000
Manifest this update: Sat 19 Apr 2025 06:00:20 +0000
Manifest next update: Sun 20 Apr 2025 06:00:20 +0000
Files and hashes: 1: Wk-27-wm2MeWL1AcRJVfERPG3M4.roa (hash: /2ZrWGFGh9bM8J1i4JDEX8CG9Dlb6SOL52JzWa/nfw0=)
2: cNE-Khag7mY0IHqI_wqsTqvGaTw.crl (hash: 1Yjyn00gy++QAXPHmgoKe3JrtOwK7x8F+KTXAv7I38w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:33:6b:30:30:5d:90:38:e7:f9:1e:fb:8f:22:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Validity
Not Before: Apr 19 06:00:20 2025 GMT
Not After : Apr 20 06:00:20 2025 GMT
Subject: CN=81f1ef35b611983daa0103e7b51b7be42acd4ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:89:ef:40:d6:1f:32:99:03:e6:66:20:db:
97:00:88:05:f1:a4:13:00:17:4b:26:c3:13:a3:d6:
c3:03:ff:ad:30:4a:b8:8f:05:5a:f8:9d:25:d1:d5:
8f:17:02:c4:a7:98:ea:89:4d:62:86:d5:7f:5c:b8:
bb:2b:24:12:35:b0:c6:50:18:55:51:55:e2:91:72:
ab:28:3c:11:f3:11:b4:66:20:f3:af:01:01:64:ce:
3b:79:cb:c1:ec:29:25:52:10:66:d3:8a:2c:6d:2f:
dd:ac:87:f2:2c:6b:f8:14:95:25:48:ad:12:16:d5:
be:62:12:e9:62:9f:d9:bc:69:0b:e3:1f:87:b5:8a:
53:10:ff:79:7b:a3:a1:70:ce:80:44:7e:e9:48:b0:
8f:0d:4d:ee:ed:e6:f0:d4:43:ae:1b:62:1f:47:4a:
0b:ad:46:bc:45:17:7e:c7:8a:52:28:98:0f:57:40:
28:7c:31:9b:13:98:99:29:ac:d0:6f:8f:0f:c8:d7:
df:50:43:19:18:9e:2a:1a:17:87:d0:2f:9e:ff:31:
04:bf:7c:81:af:eb:c2:fa:bb:aa:80:cd:1e:b6:3e:
ae:f1:8b:d8:ba:cc:b0:b8:4a:02:a4:5f:9c:7b:36:
f4:7e:04:b2:f1:89:55:4d:c1:ce:6d:77:64:35:2c:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F1:EF:35:B6:11:98:3D:AA:01:03:E7:B5:1B:7B:E4:2A:CD:4E:DE
X509v3 Authority Key Identifier:
keyid:70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4d:e4:d0:5d:3f:3a:c7:28:0d:35:04:0c:04:7b:2f:4c:35:
c7:52:a0:4f:ca:82:62:ab:f7:60:bf:4a:72:17:9f:32:2e:f6:
8a:23:97:5f:6e:85:0a:e1:95:d5:e5:88:2f:03:04:48:87:7e:
04:b7:73:a6:b8:06:5b:7a:14:c1:37:4a:c8:9c:b5:49:49:c2:
f5:7d:5d:7f:7e:a4:b1:c6:10:65:7d:c5:28:00:a9:f9:5d:e4:
29:c4:d9:54:4e:5b:86:6b:48:3a:be:71:a8:2d:39:75:48:9f:
33:fa:69:44:cd:d7:c2:32:1e:ee:1f:60:11:07:68:cc:5d:ea:
b3:76:1b:d6:8f:34:18:63:57:ca:41:c9:76:70:be:b2:9b:91:
f6:3e:1b:cb:2c:dd:b6:be:5f:52:41:0a:a3:d3:55:b3:d5:86:
dd:c3:2a:f0:5b:70:f6:8b:cc:d8:39:34:8e:77:54:dc:db:a9:
15:37:b3:8f:31:4c:18:8d:3c:ca:58:dc:1e:5d:bf:23:ca:bc:
b8:88:3e:2b:d5:63:2b:50:7c:97:6f:7e:84:58:74:33:2a:28:
12:2a:03:b7:e9:1a:29:54:27:1c:eb:e9:59:65:ee:a4:88:3e:
76:6c:1f:4e:ef:a4:95:5a:90:48:68:99:8d:7b:5e:dd:73:38:
88:23:44:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:43:34 2025 by rpki-client