Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json)
Hash identifier: w1ULZUOp5yYmMXAdA7trSuy9jrZ7+p9I5enbxHm/WdI=
Subject key identifier: 3A:6C:E8:4F:46:BF:4D:E9:FA:5D:5E:48:5C:9F:D0:FA:B1:F2:52:A1
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 0196146AFD7224EF3EE3807512F43EF97931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
Manifest number: 14EE
Signing time: Tue 08 Apr 2025 08:01:17 +0000
Manifest this update: Tue 08 Apr 2025 08:01:17 +0000
Manifest next update: Wed 09 Apr 2025 08:01:17 +0000
Files and hashes: 1: 3cfolha5-Y-keIgl3j-ukMRu5nQ.roa (hash: BQrU5Phy/xAtort4zjZjH8gAv4mg2agVu08FECKFlvU=)
2: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: 8OknwzjrdDIVsS0qnK5mzLQtsasB9StSamSrUToil44=)
3: GopMrpyToOz7hTEn02tSlWTChNc.roa (hash: PWyNZm9NNDQb4vDrYexwTILfoeBvuqO0/ZesnD+rBMg=)
4: Zla6xxqlwjD5HGAN16Pzo29Tijg.roa (hash: XT7/Z4sfo6kElFtdLFq3BhRYhs4vxj89ZfDzgHu8Ge4=)
5: eeob2ee4lfFzOOMEsHvp08f6qTk.roa (hash: 0B+jfajS9x0UOg+XsVtGs3LZcCLSBc/7t9eJKjvj4DM=)
6: hnMtsx259zWb5DPTAskFt19vieA.roa (hash: IS/K0LmABWhq/hUi5ijfbnkS8QGQcUBWRW0f7gTisD4=)
7: izRl0EDK4B0qzWxxkTnsFaQUD9I.roa (hash: deGltujGMo6zRw49YCgwFhp3rs4UuELASdCXPlgWHmM=)
8: tbMl7oFKXcbypI4zCPH3_DIQ3z4.roa (hash: woX9zsT33PUAbbfirUNyi4tkHILBBLskTh8l2Lf5sLU=)
9: ydOhopDpEgxJrzwZy5o2ywKpW8w.roa (hash: cGNA9jtDwM6OD4vlqV4K4uD26uy/JQnhTPG3oY/YMmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:6a:fd:72:24:ef:3e:e3:80:75:12:f4:3e:f9:79:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Apr 8 08:01:17 2025 GMT
Not After : Apr 9 08:01:17 2025 GMT
Subject: CN=3a6ce84f46bf4de9fa5d5e485c9fd0fab1f252a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:bc:68:59:7f:56:eb:97:fa:f4:66:3f:e8:
f1:e6:51:03:63:a4:a8:1c:4c:7a:7f:15:54:1f:ec:
9f:95:c3:6f:63:35:9a:57:0a:55:3c:54:9c:37:4b:
fb:c0:46:1f:f1:5a:60:a3:c5:54:65:81:f1:0e:68:
9b:37:60:65:85:e9:0c:91:b9:d3:c8:6d:cb:9a:d2:
35:a5:fc:93:8b:1b:42:89:d4:54:80:d0:ae:20:39:
7e:58:08:60:a9:e1:09:16:59:a9:2e:4b:5c:c7:83:
43:d8:ec:0c:f1:42:96:8d:a8:ec:7e:b6:64:77:ec:
18:8d:2d:4a:47:ad:92:40:7a:e4:1c:da:03:8d:d1:
59:92:f1:c8:c0:2e:ad:f9:11:12:f2:6c:83:36:15:
8b:fb:04:fc:9e:4c:38:e5:3d:f6:85:03:da:9a:c4:
de:bf:20:42:52:9a:06:58:a7:3b:ee:6a:3f:69:5f:
2a:6a:c7:8e:25:8d:40:0b:c3:8c:44:03:62:a8:ba:
bd:a1:c1:6b:bb:5e:c5:34:92:1c:b2:41:31:fa:ff:
29:ed:cb:13:cb:6a:46:7f:bc:78:0c:37:8d:2c:2c:
fa:06:96:53:b7:f6:53:ee:21:0a:93:0f:1d:84:11:
84:9d:d7:a1:e8:a0:5c:b9:ec:ef:b9:a4:3a:7a:a0:
8c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6C:E8:4F:46:BF:4D:E9:FA:5D:5E:48:5C:9F:D0:FA:B1:F2:52:A1
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f5:a2:fa:3d:df:17:3d:cf:7c:ad:78:d0:0b:f5:76:88:31:
b2:53:4c:65:cf:10:74:91:76:c0:09:ea:2e:80:40:50:31:0c:
36:df:53:76:b3:b5:53:29:fb:00:7e:12:c7:fd:6d:92:b3:c1:
b6:c0:a8:21:ae:d5:19:7e:39:86:cb:e3:de:20:c0:31:26:29:
c6:76:b2:d6:6a:66:79:c1:e6:bc:34:55:84:fc:2d:46:62:db:
39:f4:05:c9:69:52:bf:9e:bd:ae:33:ab:24:9e:6c:f9:6d:3e:
41:5b:24:62:55:b9:bc:9c:b1:ce:09:a9:e3:a5:c5:d4:d4:4f:
6e:a4:e4:a5:9c:96:d9:bb:95:7d:06:98:7d:d1:10:74:38:77:
1b:39:0c:f5:5f:06:71:28:1e:71:db:df:bd:d8:ac:f4:e1:8b:
92:c1:7c:e3:9c:4b:ec:fe:26:b1:b2:81:ad:c1:96:99:10:36:
5f:3c:0b:22:86:2a:93:70:6e:07:eb:f9:95:e3:33:1c:15:a6:
23:01:88:fa:71:88:da:8b:6d:0b:60:68:b8:94:b2:58:00:9b:
63:a7:8b:a8:4b:96:2f:96:10:c4:ee:2b:32:50:1b:a6:a6:dc:
e7:29:88:53:f1:7e:2b:e5:a4:a6:06:11:6c:e8:1c:31:d4:8c:
a8:eb:61:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:29:10 2025 by rpki-client