Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
File: cEq5aIQnBz_34XneWvAC4J8jYBM.mft (raw, json)
Hash identifier: 0SS/jK0dxPiaYVPNBnsgVfk+NjrCRTQCF78hfk4Pafk=
Subject key identifier: D8:40:0C:58:22:13:D6:B2:BF:98:84:75:6C:07:AB:1D:E1:C9:AD:D1
Authority key identifier: 70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
Certificate issuer: /CN=704ab9688427073ff7e179de5af002e09f236013
Certificate serial: 01958BF26D07844F7449CAC932EE27D4AA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
Manifest number: 149C
Signing time: Wed 12 Mar 2025 20:01:15 +0000
Manifest this update: Wed 12 Mar 2025 20:01:15 +0000
Manifest next update: Thu 13 Mar 2025 20:01:15 +0000
Files and hashes: 1: 6BOfeQqy9IUZ36DNxodiGS7wBoQ.roa (hash: 5gf++9dIYBR0GFOuInOOJProaUQbrotLcp46aQPmrD8=)
2: cEq5aIQnBz_34XneWvAC4J8jYBM.crl (hash: LnHJCGLAjgaAf6XhYbIZBAHJvf/bgKC7tK+UDZZofQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:6d:07:84:4f:74:49:ca:c9:32:ee:27:d4:aa:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704ab9688427073ff7e179de5af002e09f236013
Validity
Not Before: Mar 12 20:01:15 2025 GMT
Not After : Mar 13 20:01:15 2025 GMT
Subject: CN=d8400c582213d6b2bf9884756c07ab1de1c9add1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:36:e5:8d:3d:fe:cf:89:c8:e4:e3:e9:02:43:
f1:38:64:9b:57:7f:c4:54:fc:cb:78:74:b8:7f:31:
c3:60:9d:e0:ca:a8:6b:d4:1c:d5:f1:8f:64:dc:14:
df:33:78:a0:bd:3f:af:ed:fe:06:c3:09:51:61:47:
36:e6:6d:18:30:7a:72:75:78:d1:4d:40:30:77:b0:
22:2c:2a:af:1d:79:f9:cd:e1:7e:14:5e:01:82:9d:
e8:58:ba:f5:88:ce:d3:29:bb:e2:1e:2f:15:c9:2f:
f7:67:0a:46:55:da:da:97:7f:0f:d6:ec:d5:27:d8:
25:b5:97:a0:57:84:33:61:29:bd:7f:87:c6:fc:f5:
89:27:e3:60:a8:a2:52:64:67:92:16:b2:52:1f:7c:
9e:ff:1b:96:ca:f5:07:31:52:1d:e5:5c:74:0b:d1:
54:2a:43:cd:05:90:26:d0:5a:94:ac:cb:a3:0c:3a:
ef:8f:82:2d:64:e3:77:8b:59:69:9b:fe:a4:02:2f:
27:57:09:93:89:32:00:e6:f8:58:59:78:78:ff:16:
73:57:cc:93:1d:6e:23:c5:f8:fb:9b:29:e9:1f:63:
73:0b:db:f7:d1:d6:18:6c:f9:d2:cb:e0:68:93:80:
05:9d:eb:e9:26:cc:f1:65:de:ef:80:dc:e5:ac:e3:
ee:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:40:0C:58:22:13:D6:B2:BF:98:84:75:6C:07:AB:1D:E1:C9:AD:D1
X509v3 Authority Key Identifier:
keyid:70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8c:73:dc:30:6e:17:3a:25:1b:79:00:2d:60:0b:d4:9b:86:
6e:4d:87:29:69:74:a0:22:01:48:dc:d1:ad:52:a4:14:9f:41:
df:14:f2:ec:47:1e:48:65:9d:c5:30:e9:35:d5:c9:4a:34:eb:
7d:90:b7:d9:1c:3d:94:c0:dc:ec:2a:7a:86:28:8c:06:77:d5:
fa:e7:ee:c6:77:23:79:37:28:34:7c:25:d8:23:48:ce:9e:02:
e1:a4:fe:fb:8b:a1:5d:df:1e:66:4b:df:64:6c:b5:65:c2:56:
1f:ad:75:35:d5:fd:ff:fa:df:f1:60:22:94:5e:cb:ec:29:19:
4c:8a:0d:18:49:fd:1b:1c:76:e6:8c:f5:db:93:53:ed:44:58:
73:e7:64:5d:48:de:f0:56:ef:fb:2c:dc:5b:82:0e:b4:01:21:
86:b8:d0:00:05:a4:62:ff:94:4f:a7:0d:08:da:e9:bf:fa:d9:
4a:bb:c4:d9:15:f9:55:37:98:d3:35:9c:94:2c:2e:9e:e3:19:
2e:e8:d4:eb:1d:50:64:0d:0c:dd:a0:fa:a0:7d:1a:58:f7:a9:
e6:88:03:dd:32:22:e6:77:0f:8c:ce:5c:4f:c8:f6:17:5c:ae:
21:52:38:0f:01:e5:c3:65:be:0d:4e:f7:c2:8d:12:c7:36:4a:
b4:38:42:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:48 2025 by rpki-client