Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
File: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft (raw, json)
Hash identifier: 1n8tnoIJ2mwOEqZqYOWXYTkkqdzj/hE3JDZEqYg3Q7o=
Subject key identifier: 84:7F:74:26:69:67:C4:1A:15:16:7D:A7:FC:FC:56:F7:96:34:D6:68
Authority key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
Certificate issuer: /CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Certificate serial: 019643D61B6764EC2DB6231A3EDA628FFAE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 13:00:27 +0000
Manifest this update: Thu 17 Apr 2025 13:00:27 +0000
Manifest next update: Fri 18 Apr 2025 13:00:27 +0000
Files and hashes: 1: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl (hash: lwjnbMui7+07Dl2B4u03kQBkljxlXT8X0Uv4ljZhxv0=)
2: KK6CnYNVLgkO9qFyFOT9UGvXJYI.roa (hash: ZHlrP8V5BtXECEdhL9eJuVBZKLMvwmVQC0U5b4cXw08=)
3: o5N_jAG9g_aL4MkwpX9OBq0Dy-k.roa (hash: M8ydZ1fG/pikMq2g2Lj2Oo2CSVv2VUo2aqU5TzG0PFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:1b:67:64:ec:2d:b6:23:1a:3e:da:62:8f:fa:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Validity
Not Before: Apr 17 13:00:27 2025 GMT
Not After : Apr 18 13:00:27 2025 GMT
Subject: CN=847f74266967c41a15167da7fcfc56f79634d668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:dc:35:35:f0:d3:eb:65:32:15:b3:b7:86:
28:cf:de:11:97:66:48:9a:2e:55:6b:61:a9:d5:db:
e8:cc:df:72:21:7b:a8:62:e6:ac:20:39:ec:9c:43:
74:73:7a:c4:82:d0:91:0f:01:13:7e:7e:03:78:76:
34:39:ca:35:f8:de:08:6f:a2:21:cc:e9:07:23:f5:
67:8c:c7:1e:0d:d0:a5:e6:11:02:75:4b:33:e7:0a:
e8:60:7d:76:97:4d:cb:b9:e3:77:62:77:12:2a:05:
53:41:37:ef:34:19:c1:a3:ff:be:7a:c2:11:31:13:
0f:a9:d0:f0:6f:bc:ed:ff:4b:61:6e:06:65:36:69:
74:a3:3f:f4:85:a4:3c:0a:c6:d0:f6:2b:60:80:6d:
00:5e:ce:ac:a2:fd:ef:03:be:5d:9b:9a:82:0c:91:
e8:ff:43:31:c4:b9:3e:43:ce:19:c9:92:55:8b:47:
60:3b:e7:1d:ef:78:fb:94:64:ce:f0:f5:75:23:0f:
92:26:e0:4d:3e:cb:4b:64:56:e6:46:e3:7d:c9:cd:
9e:20:12:43:ee:d1:50:4b:af:49:1f:4a:40:07:d7:
5f:06:73:f7:ca:23:80:87:91:c7:d7:39:48:c0:f3:
d2:74:5e:83:15:69:bf:ba:26:ba:ec:59:46:81:cd:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7F:74:26:69:67:C4:1A:15:16:7D:A7:FC:FC:56:F7:96:34:D6:68
X509v3 Authority Key Identifier:
keyid:FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:83:15:a7:61:b8:1b:f4:c9:b3:ae:c8:05:71:e8:7a:96:b6:
5e:b6:3f:2d:ad:b5:c2:2f:f5:89:99:91:ac:45:32:f5:0c:c4:
d2:13:84:15:e3:21:b2:d2:22:bc:23:74:83:d6:92:88:04:1e:
75:aa:74:14:f8:d9:55:b5:b5:7e:aa:77:3a:dc:cd:e1:99:38:
ce:de:af:14:49:2e:ae:e3:af:d6:99:16:25:b7:63:0b:53:22:
3c:35:d1:fb:f8:a8:60:42:21:e6:04:02:9d:de:7f:e5:b4:02:
1d:a0:2f:19:5a:c1:dd:e7:e6:8f:76:a7:c8:b7:90:fd:52:db:
87:0b:db:40:f8:3f:29:5c:f1:b4:9b:57:a8:e7:e0:a6:2c:9d:
2b:bc:77:49:57:84:2e:a0:cf:bd:ea:bd:54:b9:22:f6:c3:c8:
d8:3d:09:09:10:6d:db:4c:a9:b9:bd:9f:36:20:a9:21:79:05:
04:f1:c6:1d:08:b2:8c:14:4d:dc:fb:ec:a0:35:55:1f:de:6f:
0b:b0:92:a9:37:0e:53:0c:7f:0f:8e:69:17:e0:f9:ea:bf:83:
19:14:e7:f7:8b:ff:0f:9a:b0:10:6d:0d:65:fc:33:b7:48:0d:
21:4f:f2:50:68:d9:c3:fa:ce:c2:cf:a9:33:e7:0b:96:f1:b0:
85:bd:b6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:12 2025 by rpki-client