Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
File: ciLFq32z3TlmGS-q_gfzEVsMjuU.mft (raw, json)
Hash identifier: 6BK3mVzJT8b/L70DhcdmEZX+nndTGJtAIaSA42uGQw0=
Subject key identifier: 0B:99:3E:84:8A:2C:0A:D7:A3:B7:56:EF:99:60:FB:6F:89:95:0E:49
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 0195903CDBA57E703A0C0CB48E6EB3BB38E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
Manifest number: 116E
Signing time: Thu 13 Mar 2025 16:01:02 +0000
Manifest this update: Thu 13 Mar 2025 16:01:02 +0000
Manifest next update: Fri 14 Mar 2025 16:01:02 +0000
Files and hashes: 1: ciLFq32z3TlmGS-q_gfzEVsMjuU.crl (hash: k2sNGF1+NH5UZaOY8Q08Krj0vR+OXPZoP66MMJagq+U=)
2: eBm4FcENh4mdv8uF5hjrhyaeTNk.roa (hash: Ler7/mk93wlcxw6BHOT02mce04EHfQvKLLwFRXlVbjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3c:db:a5:7e:70:3a:0c:0c:b4:8e:6e:b3:bb:38:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Mar 13 16:01:02 2025 GMT
Not After : Mar 14 16:01:02 2025 GMT
Subject: CN=0b993e848a2c0ad7a3b756ef9960fb6f89950e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8a:7a:73:dd:f4:87:d9:fb:6d:7a:89:e0:76:
47:c7:08:ac:02:46:1f:d7:d2:53:a4:a9:d0:c9:4f:
36:e0:5e:4f:7b:ae:e0:0d:96:31:0d:19:0c:4f:c7:
e7:fd:ed:39:61:9c:5f:d3:bf:cd:97:0b:41:a4:b6:
2f:71:28:68:92:ac:6a:e5:cd:fb:0a:59:3b:50:3d:
b2:39:ab:d1:ce:ee:40:39:70:18:d1:55:53:43:ee:
84:f1:6c:e7:5c:18:b3:ae:cd:ac:73:5b:77:5f:b1:
81:90:b5:84:fe:69:39:8c:3c:79:13:f7:c2:de:de:
5a:4e:ad:f7:77:fc:a7:1c:37:21:97:f0:18:c5:24:
52:cf:33:4a:74:20:f6:88:d9:3a:bc:04:cf:71:29:
97:ed:02:cd:e8:42:17:01:9f:80:63:20:d4:69:78:
67:a2:39:0e:ef:13:3d:4e:59:05:ce:1e:f9:fa:54:
f1:08:33:ec:42:27:22:cb:01:10:36:a6:dd:0d:55:
c5:de:dc:8c:49:5f:25:0c:77:1a:3f:15:98:c0:00:
db:b7:37:4d:d5:58:c1:5e:cd:fb:38:be:26:45:42:
55:86:5b:45:e2:b7:6f:56:91:14:6a:44:8d:78:50:
35:be:55:63:47:2b:e6:25:fd:64:78:f9:e0:29:3e:
50:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:99:3E:84:8A:2C:0A:D7:A3:B7:56:EF:99:60:FB:6F:89:95:0E:49
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0b:cc:e2:3b:31:c5:41:e9:bd:cb:c2:d3:0d:b2:8f:7d:05:
04:9f:21:a8:f6:a8:c3:c9:fc:53:9a:2c:21:f1:97:56:26:4a:
cf:ae:43:1c:c7:a4:13:ec:54:98:66:a3:d0:44:e2:d7:b7:c3:
ec:4c:2e:8d:5b:45:05:f8:29:f2:b8:d1:8c:5e:5c:3a:99:8d:
cf:3a:21:87:02:71:f3:79:17:12:40:0f:23:af:9d:14:9c:d1:
5c:fe:c1:2c:27:e5:a1:29:46:f8:dd:36:3c:49:2d:b2:46:7e:
6b:b1:22:52:15:87:13:49:65:d1:86:66:e8:96:c6:55:57:35:
c2:78:69:03:45:97:13:e0:44:d8:25:29:c7:5d:4c:76:3c:c9:
7d:71:77:25:04:d5:c8:89:10:af:02:66:5b:fa:90:b8:e3:38:
09:fa:de:a2:d6:3e:5c:cb:5a:8a:e4:25:0d:36:b4:d4:26:3f:
26:71:f5:c9:29:2e:bc:24:3a:28:2d:16:29:de:3d:0c:32:30:
86:7b:a1:21:13:28:24:88:9c:e5:98:72:f9:b7:db:c0:75:ac:
eb:96:a3:d6:3c:cd:19:d9:96:5f:cf:30:bf:d7:09:ae:b8:80:
f7:34:96:9f:71:c1:21:a6:e2:a2:3b:22:8b:57:b0:af:78:b7:
9c:8a:14:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:46:20 2025 by rpki-client