Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: iBbgVxkD6XfzFS3e1eDOMyn9HJtRvyJO6BnrJCVUw5c=
Subject key identifier: 15:FA:A4:49:A7:40:A9:82:F3:4A:4B:91:77:76:24:18:4A:EA:4C:2E
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 01960B9ED93EAB1EC20C057E7D178088124E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 0E91
Signing time: Sun 06 Apr 2025 15:01:21 +0000
Manifest this update: Sun 06 Apr 2025 15:01:21 +0000
Manifest next update: Mon 07 Apr 2025 15:01:21 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: QBs06SeovpLvOwHZS+TE4LdFQ4RqIDv1eoFUcM/nc0g=)
2: QFbV3cLIo6fGM98z7n86TaXk26k.roa (hash: OdVi+1rHdt0zdTh+loubxHzRa31DZflpr11+itY/7nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0b:9e:d9:3e:ab:1e:c2:0c:05:7e:7d:17:80:88:12:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Apr 6 15:01:21 2025 GMT
Not After : Apr 7 15:01:21 2025 GMT
Subject: CN=15faa449a740a982f34a4b91777624184aea4c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:a7:4b:9d:da:70:e5:f8:55:6c:06:e5:64:
c9:05:1f:b1:ed:09:3a:46:36:d1:1a:05:e1:ae:6b:
21:ee:ba:be:79:94:cf:64:cd:75:64:d2:dc:db:3d:
1b:5b:6e:a6:15:6b:29:cb:f0:0c:d7:25:6f:0a:d1:
23:3b:64:ad:70:5b:be:98:e5:36:f4:c7:db:8d:e7:
51:dc:8d:d6:ba:21:fb:29:04:9f:ef:86:15:66:ee:
27:30:e3:bc:83:ae:bb:14:b7:cc:20:4d:d1:ea:bc:
9c:27:f4:91:82:95:74:e8:95:4a:71:d4:19:55:97:
7d:b8:09:dc:ab:8b:57:57:83:74:ad:f2:93:36:eb:
f7:dc:45:97:ca:dc:47:c8:c3:e7:f3:60:94:1f:d1:
ff:be:29:51:12:7e:43:34:79:59:56:c8:ab:8e:ab:
fe:4e:20:29:ef:e4:b7:f1:9d:f3:52:5d:ec:94:e0:
88:3f:e0:8a:19:e6:d5:45:63:6f:cc:15:b0:02:e8:
3f:bc:e1:4d:d8:3c:1c:fc:c8:0e:f0:a2:d7:cf:b3:
97:62:1c:5f:d8:e3:f0:76:c7:27:b5:81:b5:b9:bb:
e5:e3:ef:f4:cb:c5:ad:01:c8:9c:a3:df:26:76:a1:
04:f8:8e:4f:8f:4c:d7:05:84:20:eb:17:eb:3b:d6:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FA:A4:49:A7:40:A9:82:F3:4A:4B:91:77:76:24:18:4A:EA:4C:2E
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:95:23:2a:25:ea:e7:1b:68:84:b5:fe:f4:e3:4c:58:6f:4b:
4a:88:7f:fb:19:ee:eb:7d:13:8d:58:67:22:bc:8e:cb:12:65:
ee:7d:87:f1:f2:29:8c:de:ea:e5:e4:77:10:d0:66:74:78:e8:
cf:4e:ac:b2:d9:0b:89:8a:43:f1:28:a9:fa:f8:25:c1:d1:3e:
81:33:10:df:35:f1:3e:e2:ea:9f:d2:df:5d:bd:d5:e1:16:bf:
a3:01:37:92:01:4b:ff:13:f0:9b:43:f6:cb:59:df:5f:ce:5b:
c3:bc:fe:5c:b9:8b:ec:0c:1d:5f:4c:fe:1f:42:5c:32:0e:8d:
08:fb:0b:f8:52:0c:16:3d:af:6e:b1:5f:88:d2:0e:be:64:73:
59:b9:6c:36:a6:37:23:c5:a1:f8:b9:ee:ee:33:86:17:f2:80:
01:e1:2e:f4:12:f5:92:f7:bd:1b:33:45:7d:c1:99:80:08:bd:
b3:3c:41:67:22:d8:4d:96:d3:a2:c3:7a:de:dd:0e:74:f2:60:
11:a4:6d:7b:7a:e2:37:5c:b8:d9:ca:50:9e:60:f1:f9:e8:d5:
4f:4b:89:0b:14:be:82:89:58:68:7a:1f:c6:c7:84:78:74:14:
87:f8:e9:39:7c:11:d0:8f:0e:5f:ca:97:2b:e1:54:76:6c:09:
0c:7e:39:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:02 2025 by rpki-client