Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
File: CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json)
Hash identifier: eGlxsDo/uXpgL6eVscv67pzI7aSlzDH016G9uKmtNAU=
Subject key identifier: 71:B7:94:06:E0:5F:69:91:B1:19:59:60:BC:21:F2:3A:03:AE:76:62
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 01963F1DE28C52CEF6A9DFF44D033C070A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
Manifest number: 14F9
Signing time: Wed 16 Apr 2025 15:00:45 +0000
Manifest this update: Wed 16 Apr 2025 15:00:45 +0000
Manifest next update: Thu 17 Apr 2025 15:00:45 +0000
Files and hashes: 1: 4to_68QAA5EZP6QVD93278mKQ9M.roa (hash: Din2sy8w9QJ69ucmdkg50bJdWrDL1O3pEtYdPufl40o=)
2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: CDHHZf/jucBWQphP4j9FW7bvoQs3aaj3f0NO3Tf11bM=)
3: kA5bGRl5EHENPG-lFJ-KaUPwtEE.roa (hash: SCW2no/wqMGhhPF1PG24OTD/SWeQikiX3GB3gK0CJDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:1d:e2:8c:52:ce:f6:a9:df:f4:4d:03:3c:07:0a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Apr 16 15:00:45 2025 GMT
Not After : Apr 17 15:00:45 2025 GMT
Subject: CN=71b79406e05f6991b1195960bc21f23a03ae7662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:9b:56:79:c1:bd:16:c3:c6:1b:a2:97:ee:
f4:68:1b:79:7e:bf:d1:63:8b:c4:b6:45:3b:bf:70:
83:28:63:d6:04:50:d4:f7:79:4d:d1:85:84:40:f1:
70:8e:2b:d5:d0:02:84:8a:54:88:68:a2:68:b8:bc:
43:5c:f6:c0:67:eb:0b:ca:7d:48:28:26:eb:67:5f:
eb:ad:92:d8:1c:81:e0:d1:1e:85:a5:24:94:80:3e:
3d:94:6e:4b:f0:bf:51:a1:cc:7b:f3:cb:78:79:d2:
86:b2:81:04:6d:1d:b0:34:b2:62:73:48:62:c7:86:
3f:6b:ca:e5:cf:7b:c9:1d:49:97:80:2d:13:9d:72:
86:f3:9c:42:8b:74:6a:82:a6:b4:58:58:48:9b:cb:
d9:d3:8a:95:98:7e:7f:58:77:4e:cb:6c:77:cf:20:
74:91:80:5d:e8:1c:88:ee:95:14:37:dd:24:fa:7f:
85:24:14:0c:66:9d:64:53:e9:00:58:2a:97:99:58:
11:5e:75:b5:4d:4f:3c:89:07:c8:72:dc:51:19:b1:
42:57:e8:8a:a2:2b:70:5b:5a:f6:7c:29:48:8b:bc:
0c:d4:00:fe:08:81:cc:f9:3f:4d:aa:04:36:dd:90:
33:7e:04:96:df:7e:7a:9e:5f:c9:31:cb:c0:a2:a0:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B7:94:06:E0:5F:69:91:B1:19:59:60:BC:21:F2:3A:03:AE:76:62
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:db:f5:cf:77:8c:96:19:c8:05:93:b5:34:2f:ff:c0:84:af:
d1:f1:5e:21:49:86:99:24:9c:09:91:82:5c:cb:81:91:92:8e:
18:dd:75:9b:42:06:0d:1c:6c:98:f6:ff:8a:ea:e6:5b:9c:f9:
06:9c:da:97:66:e4:49:ba:01:15:13:73:42:ce:37:cf:06:8a:
3e:69:f7:b7:d8:70:07:43:a0:d6:80:69:08:51:b2:5b:22:eb:
4f:14:d7:a3:6c:08:03:49:a2:ab:ec:20:12:8d:9b:8d:c3:0c:
4f:d2:35:9b:7f:5d:0f:0c:7a:db:64:47:83:65:80:db:3b:bd:
a0:94:c6:8b:c5:8c:6b:2c:0a:2c:7c:9c:fb:08:74:95:5e:7a:
73:68:47:06:52:63:8e:c0:c9:8e:ba:78:1d:7d:c7:10:88:2b:
b8:07:f0:c0:d6:aa:75:f9:da:5e:ec:45:f2:03:64:8e:3a:ef:
9c:85:ed:50:1e:b8:d0:62:3e:d2:10:38:1b:dd:4a:e4:ec:27:
05:d6:a4:d3:6e:29:6a:4f:e8:e4:aa:b3:f0:72:5f:28:6c:35:
cf:84:fc:46:00:7a:3a:5f:25:f0:6c:8a:9e:8e:5d:ea:b2:c5:
d6:23:df:c8:a1:95:f3:cc:23:6c:3f:40:e4:41:36:b6:d2:3b:
6d:43:4e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:01:19 2025 by rpki-client