Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: One/oiA6YwINEqayYTxDr952FoNGpOnbf0F1l633jvE=
Subject key identifier: CB:DE:EE:A1:09:E8:E5:B9:12:9E:8D:DE:C0:28:BF:80:B5:9E:C1:0B
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 01964BFD8E5E80421F414AF1707A5B8AA0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 03:00:30 +0000
Manifest this update: Sat 19 Apr 2025 03:00:30 +0000
Manifest next update: Sun 20 Apr 2025 03:00:30 +0000
Files and hashes: 1: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: HGTuSfRwjEc087Y/EeoQQo74JLH9owpnl7effpn9ZOM=)
2: RYELhtEFcsCmVORqbpstU7Crut0.roa (hash: aIhBm/rb3wVRspojE1k+QXWmo713Q+h8iYk1yzSNDKA=)
3: wFOiJmPx91gFud4szSTNVGIfLik.roa (hash: KJL3tTISnToS4chRnmNiRq6jQUDoMI15K3mK8EPpyi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:8e:5e:80:42:1f:41:4a:f1:70:7a:5b:8a:a0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Apr 19 03:00:30 2025 GMT
Not After : Apr 20 03:00:30 2025 GMT
Subject: CN=cbdeeea109e8e5b9129e8ddec028bf80b59ec10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2e:d2:fb:7d:73:e5:66:d5:0d:c9:53:cd:10:
58:18:f2:13:9c:ce:00:50:6e:02:be:31:f7:23:7a:
c9:f5:33:ad:63:0b:e3:95:ba:69:9e:db:d7:fd:44:
1c:db:ea:83:bb:40:22:89:64:c4:27:84:dc:9c:39:
4d:21:60:96:f0:c2:f2:b0:5e:51:02:03:73:69:4d:
b9:2e:af:5c:a3:bb:52:55:fe:dd:b2:da:d6:51:93:
5c:33:bd:5f:64:bb:8c:c6:74:fc:b2:42:e7:7f:50:
02:f5:a4:7c:94:bf:3c:c5:9f:ed:2e:84:2f:29:a9:
37:ee:10:f6:2a:09:26:b0:f2:8d:d9:bf:ff:43:58:
ba:27:7d:34:bc:ee:26:eb:3e:45:34:e4:03:71:79:
80:64:ae:c4:86:6b:15:96:42:6e:e1:e7:9c:00:1f:
e0:e8:02:c0:70:be:02:b2:4c:23:ce:45:8b:8b:70:
6c:6c:74:60:62:71:72:40:4b:50:7a:e7:41:ad:ee:
34:d9:2c:5e:6e:35:4e:12:25:a4:fd:a0:c2:3e:a3:
69:83:f9:6d:6c:d8:32:34:9c:9f:07:eb:31:ff:a9:
70:6c:d9:1d:98:22:44:f0:51:c9:fa:d2:34:0e:da:
25:8f:3f:85:d8:ad:ca:d0:72:ed:1e:33:b3:93:f3:
85:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DE:EE:A1:09:E8:E5:B9:12:9E:8D:DE:C0:28:BF:80:B5:9E:C1:0B
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f7:4e:e6:a8:ed:ad:39:6c:a9:45:24:f2:88:a4:bf:49:92:
6f:2e:68:3e:6e:47:8f:2e:88:33:1c:92:a1:9c:3d:45:19:d1:
11:f4:25:21:60:2a:d9:44:eb:a2:82:f0:c5:19:86:87:9d:0b:
57:4b:22:04:da:5e:d0:78:d9:49:e2:8f:12:bb:8f:cd:f5:5c:
e0:c1:01:82:e1:53:d5:18:7b:e7:07:25:98:9c:21:40:49:9b:
52:98:14:f1:1b:64:f3:1b:ef:c3:be:16:60:f6:88:b6:f5:12:
de:c4:7a:35:80:bf:cf:e2:d3:7f:2c:36:b2:4f:1b:49:ab:f7:
88:48:f9:7b:23:31:42:3b:cb:f6:4d:53:9c:b0:95:73:0f:cf:
ad:63:35:c2:30:3d:fa:ac:ce:7d:1b:24:4f:f2:b6:3b:8b:80:
ea:41:db:eb:46:7d:c4:6b:02:80:49:5e:c3:a6:b9:e2:68:07:
2f:a5:17:64:f9:a8:54:5b:1e:3c:af:8c:c9:18:b8:3c:6f:20:
dd:a6:b8:6d:71:6f:91:36:65:e7:bf:3a:97:15:78:8e:7e:fb:
5c:53:0a:ab:84:b7:ca:0e:b3:60:8b:60:39:e6:c1:0c:4d:67:
12:96:9a:ca:5c:48:1d:03:23:84:2b:5d:f8:3b:45:af:9d:44:
c5:6c:f1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:10:06 2025 by rpki-client