Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
File: C4-x3rCeckJbMJoUFJF9r4k771k.mft (raw, json)
Hash identifier: QNGqrG5gWNgndWrErHChbGb5y1dA3gzeHIEBm2H4F3Q=
Subject key identifier: B1:E2:24:1F:70:EE:9F:98:83:7A:9E:FA:E8:5E:F3:A8:A4:65:4D:03
Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
Certificate issuer: /CN=0b8fb1deb09e72425b309a1414917daf893bef59
Certificate serial: 0196135807831678CBB8557950D0F2A36B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
Manifest number: 14DD
Signing time: Tue 08 Apr 2025 03:00:58 +0000
Manifest this update: Tue 08 Apr 2025 03:00:58 +0000
Manifest next update: Wed 09 Apr 2025 03:00:58 +0000
Files and hashes: 1: C4-x3rCeckJbMJoUFJF9r4k771k.crl (hash: eF2jyajS58jL4fXKzoJCofHDuwqM7VQyCnRw1afHPu0=)
2: xbK0xWiY34_RomWctzp72CJLeyA.roa (hash: uGlhM5SP1wH5GgbXheJ7ZYAOlhLuCV1Bj19dNLN10ho=)
3: ztCPKk8w1aeaQKuLHJz_e0TSo9Y.roa (hash: eX6lgcMXGHHyxYwjBqAxjQIWBeaf2J3CyUG15tvpJ0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:58:07:83:16:78:cb:b8:55:79:50:d0:f2:a3:6b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59
Validity
Not Before: Apr 8 03:00:58 2025 GMT
Not After : Apr 9 03:00:58 2025 GMT
Subject: CN=b1e2241f70ee9f98837a9efae85ef3a8a4654d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:9a:61:c8:06:e6:6c:8b:17:63:56:9c:e4:
92:a7:16:15:18:b2:ea:e4:a5:d0:7d:70:22:ba:9d:
f4:e6:1e:de:28:32:f2:df:41:0d:7f:f2:51:55:d4:
45:9f:85:82:2f:24:15:0f:e8:2a:2f:7c:f3:5f:ae:
24:00:5c:f1:8b:70:24:02:33:41:a9:41:96:32:9a:
a2:dc:d2:6a:40:5d:f2:11:59:e5:04:94:0d:d7:72:
8c:59:eb:53:c3:d7:d1:02:21:1d:d4:8b:ca:5a:80:
70:e0:f9:cb:8c:d9:57:ee:31:66:7e:6e:50:c1:61:
61:bb:78:e0:ec:b8:da:08:7a:31:b1:57:6d:2f:7f:
d8:51:cb:f9:81:c0:c5:64:9b:c2:c3:4e:78:84:44:
83:dd:fa:bb:51:4e:3e:40:e1:a6:77:69:af:da:96:
32:b0:3f:9f:3d:22:ae:dd:f8:cc:24:26:49:b0:7a:
bb:72:d4:a1:2c:31:77:7a:61:91:c3:53:f2:e3:46:
99:e1:20:f3:a8:86:d4:68:75:24:29:bc:5b:79:bf:
59:20:76:af:a4:1f:6f:6e:9b:d8:79:da:43:1a:0d:
0d:db:85:87:d5:1f:b1:60:c7:11:2e:20:90:f9:3a:
03:54:55:dd:e6:2f:16:f5:28:06:f5:86:bf:d4:48:
b2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E2:24:1F:70:EE:9F:98:83:7A:9E:FA:E8:5E:F3:A8:A4:65:4D:03
X509v3 Authority Key Identifier:
keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8f:78:5c:ed:24:a8:fb:b6:d2:69:d0:36:58:cf:80:26:a8:
39:a6:4f:cc:0b:b8:31:41:eb:f8:35:11:29:2f:9a:1e:af:41:
ff:78:c1:68:92:87:21:fb:97:ac:2e:c4:83:ab:ff:7a:3c:be:
90:20:2e:78:fd:e7:c3:6f:12:84:c6:9c:a7:8e:9c:fc:e2:62:
b0:7f:f7:17:0b:02:5f:35:e6:a5:30:76:04:92:ea:dd:83:27:
1d:0f:d1:3d:80:94:e6:6b:15:44:73:7f:eb:49:0d:44:32:d0:
0c:9f:12:26:93:6a:95:6d:90:d3:2e:75:10:d1:81:48:08:08:
18:02:55:2f:69:ac:97:12:96:14:74:d9:b5:29:35:eb:cc:11:
de:97:25:6d:26:e3:35:90:a2:a1:a7:b8:18:08:f3:b4:3f:f8:
7d:e3:95:33:75:67:14:4c:65:7c:ab:aa:74:4b:a6:f2:38:6b:
35:89:70:aa:a7:d1:05:20:6d:fd:48:20:7d:e1:d6:ec:08:5b:
98:c0:6b:4d:12:61:74:4a:3f:a6:d0:e2:b5:7c:03:7e:af:2b:
cd:6b:2d:87:65:98:43:bd:70:b8:ff:c5:85:ad:33:1a:df:0b:
bc:6e:41:2d:d4:62:3c:d9:64:e0:55:21:98:2e:ed:6c:d7:b3:
35:86:92:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:20:34 2025 by rpki-client