Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
File: 1Cq3jtp78B2VtZd07TRry_lqJoQ.mft (raw, json)
Hash identifier: P3yYlbmi857oQ/ocSzj+eH35lEJM+AAgi4pnC03ezHI=
Subject key identifier: 57:35:D5:CC:84:78:80:E2:E6:89:C1:09:87:2F:A2:5E:15:DD:8E:FB
Authority key identifier: D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
Certificate issuer: /CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Certificate serial: 01965CF18FDB2096052DD27DD8BD21D24DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
Manifest number: 0550
Signing time: Tue 22 Apr 2025 10:00:56 +0000
Manifest this update: Tue 22 Apr 2025 10:00:56 +0000
Manifest next update: Wed 23 Apr 2025 10:00:56 +0000
Files and hashes: 1: 1Cq3jtp78B2VtZd07TRry_lqJoQ.crl (hash: hUiTHje0RuH2ZAf2kdo2C3QCAURXLwtrtbErxxW9z1g=)
2: veEHXuiIgvjqTG6WTLvj8TN1Y9c.roa (hash: zCX9I5DqbiV1NyDUSWL69SaWgCwLBmNnvgRIApALMN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:8f:db:20:96:05:2d:d2:7d:d8:bd:21:d2:4d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Validity
Not Before: Apr 22 10:00:56 2025 GMT
Not After : Apr 23 10:00:56 2025 GMT
Subject: CN=5735d5cc847880e2e689c109872fa25e15dd8efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:60:de:00:25:d7:45:b9:4c:14:d9:da:95:
a9:a2:a3:c2:e9:e5:16:fd:04:c6:a4:11:d1:96:8c:
8c:28:d3:1b:97:cb:94:70:b2:75:a5:a6:09:50:54:
24:26:7f:7d:65:b4:35:3e:47:2f:70:c5:be:ef:33:
b8:98:5f:45:2b:f8:ec:b9:99:09:01:5e:7d:dc:58:
64:58:d3:ce:cd:52:ae:22:cb:1c:09:4d:14:9a:f4:
89:2c:30:e6:d3:9d:25:27:88:e1:2e:2f:40:43:d9:
fe:91:5f:a5:9a:bb:1d:5b:e8:1b:bb:fc:f0:49:33:
5b:f3:e9:3a:03:f9:44:8f:1f:a3:0b:ff:e7:6f:5b:
85:75:a7:18:ac:f5:15:04:52:c8:d6:ab:14:fe:3e:
36:88:16:95:26:58:57:04:ee:87:3a:2f:69:7d:93:
3c:36:dd:ed:7e:19:f9:8e:6f:61:e0:25:d5:87:3f:
4c:ad:25:20:c3:ee:62:9c:bc:ce:5e:b6:4d:48:41:
22:33:09:88:a4:29:3c:2a:7e:d5:a4:f3:5a:10:a9:
6f:35:cf:c4:25:32:2a:8a:ba:02:2d:c4:dc:da:69:
d4:13:7f:a2:70:96:26:ca:41:4d:7b:a3:65:a9:6b:
17:73:af:7f:14:bf:01:86:87:3f:b4:96:30:3d:3b:
6b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:35:D5:CC:84:78:80:E2:E6:89:C1:09:87:2F:A2:5E:15:DD:8E:FB
X509v3 Authority Key Identifier:
keyid:D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8b:ad:57:3e:27:9e:80:3e:3d:4d:e0:a6:39:23:bb:ea:34:
86:38:a5:96:a7:b7:f8:26:31:23:73:94:02:e7:3d:d9:15:58:
b3:02:03:f7:c7:94:45:92:e1:88:6a:74:f1:17:d8:98:cc:cf:
48:67:74:4d:a6:c5:52:fc:3f:3d:64:82:e0:9b:83:b1:a7:ee:
ce:90:8c:df:2b:9a:77:b4:7e:94:d3:4b:2f:2e:a9:28:f8:25:
b0:d9:d1:0f:10:5e:c2:c8:be:0c:27:c4:80:60:fb:82:69:08:
fb:d1:21:f7:76:de:1f:29:2d:1a:92:fc:e2:00:9c:bf:8d:89:
27:c5:10:c5:7a:f1:13:9c:02:0b:8f:95:a3:4d:ed:3c:05:20:
cd:e7:b9:51:50:b4:f1:1e:ce:92:42:5a:bb:c5:50:f5:c3:f4:
bf:5a:ae:69:40:96:2a:ad:39:31:6d:35:e0:e5:66:2d:f8:76:
72:c1:41:59:71:f4:90:c9:5e:ca:79:bc:8b:74:1e:b5:00:83:
24:d8:91:eb:50:7c:a9:e4:e4:73:de:61:7a:ea:fb:da:b9:97:
22:0c:15:a7:19:2b:94:f2:3c:e6:3f:e7:47:16:c4:0f:3a:3b:
91:6c:ab:87:17:fc:9b:e5:1e:8d:f6:26:10:3c:06:24:ce:17:
12:b4:8a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:40:05 2025 by rpki-client