Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier: 3KPs+DqXTnl9jfxXtx2We/yVuvK3Ijz9An5pteoGwMM=
Subject key identifier: 77:94:09:6E:6E:36:0F:73:51:F3:66:20:02:77:5C:29:54:58:9F:22
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial: 01958FCF2A1880520BF25D5A2C3B943B89E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number: 0ECE
Signing time: Thu 13 Mar 2025 14:01:13 +0000
Manifest this update: Thu 13 Mar 2025 14:01:13 +0000
Manifest next update: Fri 14 Mar 2025 14:01:13 +0000
Files and hashes: 1: 3vMVhDVuSakGpKEegLzmX9CZn_0.roa (hash: 0WA7LBg+VlA+MYR6g5nbmdux2cCvdzgMgFAqrxmL/5k=)
2: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: UNGfMjYW9/j2eSERPGwqY91upF0pBnqNnShjat3xrJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:cf:2a:18:80:52:0b:f2:5d:5a:2c:3b:94:3b:89:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
Validity
Not Before: Mar 13 14:01:13 2025 GMT
Not After : Mar 14 14:01:13 2025 GMT
Subject: CN=7794096e6e360f7351f3662002775c2954589f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6c:4c:56:68:66:0b:d0:b4:43:b3:58:a4:48:
17:03:a1:a1:c2:f4:e9:1e:22:b1:49:7e:d5:65:c1:
7d:05:30:e7:9a:0c:bc:bf:0b:f8:3f:95:ea:0d:dc:
3c:e6:3f:db:de:e5:49:29:30:a7:52:de:a6:eb:f9:
df:6f:66:80:32:e5:1d:10:53:af:b6:ee:11:3f:1e:
ca:a3:aa:f0:59:ff:e6:71:e7:87:18:14:e0:83:26:
91:a7:57:3a:ca:a3:4b:55:ad:b1:f1:c7:77:6e:4c:
b4:a9:5b:40:2b:1f:d4:2f:65:b7:96:b2:2a:2e:86:
15:c6:af:d9:98:c8:34:fa:02:f3:7d:38:3c:b4:89:
26:95:8f:bf:fc:a1:08:e9:40:57:cc:a1:e4:39:fc:
1b:db:c1:ee:d8:78:59:04:57:9f:85:e4:b0:01:25:
2b:13:6b:2d:27:19:4c:8e:f6:ea:ae:d6:f5:ca:29:
21:ab:7a:06:b6:67:a5:2e:eb:55:ce:58:73:77:f3:
42:2a:fd:a2:1f:5e:03:71:55:06:30:4f:77:4b:f7:
39:fe:d1:cc:c7:26:9d:15:a0:e0:d3:3e:f5:72:dc:
b0:c4:ab:bf:ae:08:92:6b:18:13:e2:52:77:cd:9a:
2a:b7:c9:00:f0:b0:42:ac:7f:ba:d7:1b:22:c4:84:
e3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:94:09:6E:6E:36:0F:73:51:F3:66:20:02:77:5C:29:54:58:9F:22
X509v3 Authority Key Identifier:
keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:a7:f8:d1:db:f0:91:e1:28:89:a1:1c:2a:c2:d0:9d:ff:93:
8c:b1:92:52:0d:a3:20:a7:1c:ba:88:5e:49:56:cf:91:7a:e3:
03:2a:3e:98:e7:21:52:70:fe:4e:33:b7:89:1a:5f:8a:c4:1e:
fd:3f:12:fd:ab:bd:3e:66:73:f7:db:1c:c2:ba:08:72:ff:4d:
46:26:b6:f2:8b:54:5e:0b:fc:02:80:4d:5f:f4:f8:19:c5:00:
2c:df:d9:78:65:8f:b0:57:bb:dd:38:c0:d5:f0:d1:e7:f3:2c:
db:7e:8a:e2:fa:ca:91:1f:ba:15:e0:fd:b4:ef:8e:92:f3:a7:
66:e8:e6:62:a5:58:e3:32:11:63:65:d6:7f:6b:87:fd:bc:8e:
80:b0:f6:99:ea:82:1f:bd:61:fb:e3:26:f0:de:39:51:4c:26:
a8:8f:13:94:21:33:1e:c7:92:d5:0f:01:91:1f:db:c1:b4:dc:
0f:6c:cd:12:77:73:94:2d:a0:f9:36:0a:da:ca:38:4f:f6:29:
b6:d1:96:a9:ce:23:d1:c5:1d:b7:75:f6:7b:41:89:bf:d1:53:
20:14:5e:ca:8a:f3:2e:21:c0:c2:da:b1:bf:b1:dd:d9:43:1c:
9e:b3:9a:68:63:7d:24:43:90:12:fa:8e:16:0a:33:5d:24:f4:
9a:31:20:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:27:54 2025 by rpki-client