Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
File: 4COOIod_cwOWQAfOPjQG9frZSWI.mft (raw, json)
Hash identifier: Bk4U6GtmIYR77tJ3iz+w+QfN/3n0uySDNYSeWpyaW8M=
Subject key identifier: C1:DE:8A:43:8B:07:38:DB:EE:30:32:79:7F:5F:72:47:E8:18:C5:77
Authority key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
Certificate issuer: /CN=e0238e22877f7303964007ce3e3406f5fad94962
Certificate serial: 01964B90E19A6DDAD356CE07986462CE00A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 01:01:48 +0000
Manifest this update: Sat 19 Apr 2025 01:01:48 +0000
Manifest next update: Sun 20 Apr 2025 01:01:48 +0000
Files and hashes: 1: 4COOIod_cwOWQAfOPjQG9frZSWI.crl (hash: pkBO2/SavdA8BnUp/v0fJev9AWrnyLIM9/IZTKdYSKI=)
2: VBkUSdd8HhC9ylebW4iiyCK4E-Q.roa (hash: /Z8ymu6jIj7elvCMahyZD4nXriuKXl4fYbvc0S8rJdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:e1:9a:6d:da:d3:56:ce:07:98:64:62:ce:00:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0238e22877f7303964007ce3e3406f5fad94962
Validity
Not Before: Apr 19 01:01:48 2025 GMT
Not After : Apr 20 01:01:48 2025 GMT
Subject: CN=c1de8a438b0738dbee3032797f5f7247e818c577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:fb:39:43:e7:b7:be:0f:d9:e3:17:98:24:
71:7c:00:e8:49:b9:4a:75:21:25:dc:61:63:6e:ab:
5d:b6:b5:a0:f0:a0:9b:59:f9:0a:ed:3a:d4:a6:02:
aa:77:85:71:46:dc:5e:00:b1:84:22:06:3b:50:1f:
8f:31:a3:7a:5c:c7:6b:a6:28:2d:0f:ad:68:46:5c:
d6:64:83:1f:38:11:bb:e1:e4:b7:75:69:e5:e9:03:
a6:7a:e1:6d:1c:f8:30:27:d2:05:ad:10:8a:eb:75:
cb:25:12:45:5c:fc:8b:a0:59:45:88:06:9f:cc:70:
32:24:af:cf:65:66:47:90:a4:c1:4e:82:3d:04:66:
38:15:77:67:ba:0e:19:8b:22:b4:96:17:7b:4d:f7:
f9:75:9c:5f:2a:72:a6:f9:6c:a1:be:41:48:aa:b5:
26:3d:19:fc:23:d8:46:a6:9d:ce:d0:93:3f:99:69:
e4:5c:c6:2f:8f:cc:78:43:b4:89:31:02:73:c5:dc:
26:41:d1:7c:20:97:68:81:58:6a:72:f1:d7:86:94:
41:e5:f1:7d:54:b1:a7:08:94:34:3c:26:7b:00:b8:
76:fa:d1:aa:40:d2:cb:0c:c9:c4:02:81:d9:62:92:
82:97:54:37:be:5e:76:5f:ed:af:f3:36:5b:43:69:
96:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DE:8A:43:8B:07:38:DB:EE:30:32:79:7F:5F:72:47:E8:18:C5:77
X509v3 Authority Key Identifier:
keyid:E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ee:14:ff:aa:90:a8:c4:e3:a9:9e:cd:46:5d:c3:cb:2f:bc:
5a:a2:81:3b:e5:c1:d3:22:4b:ba:35:a3:de:f3:9e:b3:e3:12:
59:6f:36:ab:ee:42:fb:a2:b9:db:ae:8e:a0:3d:88:1d:67:24:
ea:53:49:df:c5:47:86:2f:14:8c:6e:bb:7d:78:82:95:3c:e8:
03:7d:c8:a1:d9:54:37:af:1f:42:c3:68:34:66:78:c3:f2:1a:
d8:e8:8c:80:02:04:3c:dd:7f:27:75:77:9b:90:6e:8d:4a:7f:
06:2c:a4:8b:12:84:54:05:d5:e4:e0:2b:f6:7f:e9:ae:04:77:
2e:4e:68:fb:81:46:fe:95:aa:63:25:67:df:d6:bf:4c:d9:a7:
18:fe:66:6a:65:61:26:da:ab:eb:48:b6:91:df:4c:0d:d3:cb:
bd:57:e8:34:93:9e:b2:7d:11:6a:33:ae:4e:1c:3a:db:a5:08:
98:f0:d4:e7:d7:d4:0b:d3:fe:2a:f7:43:b1:07:c5:3a:a0:88:
ae:e2:20:c0:95:5d:b0:6a:ae:5b:34:d7:4c:97:a4:d3:19:6c:
30:dd:3e:37:d6:02:a9:8e:e0:45:83:e1:d7:04:33:b4:0c:70:
f2:db:52:76:7e:76:2a:0d:fb:46:88:9f:ce:ea:35:45:c5:e1:
b9:06:2f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:39:03 2025 by rpki-client