Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
File: ClMYxYv1unQySyXQN0BN2N2p_yQ.mft (raw, json)
Hash identifier: P1a8FHqWFTbP7teYQmOFUmboeT408HfriS+PvwzYEcg=
Subject key identifier: 54:18:3B:0A:31:14:64:CE:5D:89:0F:7D:38:48:DE:F8:56:55:CA:FA
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Certificate issuer: /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial: 01964AB3B286065DFB460863BECC0E84CB37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 21:00:12 +0000
Manifest this update: Fri 18 Apr 2025 21:00:12 +0000
Manifest next update: Sat 19 Apr 2025 21:00:12 +0000
Files and hashes: 1: ClMYxYv1unQySyXQN0BN2N2p_yQ.crl (hash: RgwfX6idSsYmsGwadJDSMI4/+DG8YlT1rtJG66FvywY=)
2: DLTd3WJjxjvYe7s9RQaXW0-asFQ.roa (hash: CEzU0MiwDAlXifXvS9Fry7MUXXUL96cqYeU54NDS/g8=)
3: MzKwgAtz12wzIsjgwju5LaHLtH8.roa (hash: DsGzfZzJWXHpJi5oY7AKelnpp/ss483xMhTBHOGogIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b3:b2:86:06:5d:fb:46:08:63:be:cc:0e:84:cb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Validity
Not Before: Apr 18 21:00:12 2025 GMT
Not After : Apr 19 21:00:12 2025 GMT
Subject: CN=54183b0a311464ce5d890f7d3848def85655cafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:66:b7:c7:33:cd:33:62:d0:2a:b6:33:38:29:
03:6d:ed:f0:04:67:13:cb:c6:4d:b4:68:56:5f:4a:
dc:05:a2:d5:d4:cc:4f:f9:be:e2:f3:d5:16:a9:6b:
50:68:d8:55:59:fa:1c:36:3a:a4:bb:f7:98:a7:47:
96:29:29:d4:40:ae:c9:e3:af:1e:c1:fb:a0:c6:13:
e0:2b:3d:15:9c:6c:3c:3f:57:02:62:77:7e:5e:3d:
3e:22:09:31:2a:7f:38:0a:d6:8a:04:05:fa:60:3a:
e4:de:66:04:ac:d3:51:9c:d7:e5:21:c1:4a:1f:f3:
03:f5:2e:28:5a:51:26:66:02:ac:26:05:91:be:b9:
5c:bd:2f:53:2f:7a:83:b9:64:e5:c7:41:e2:8d:f0:
35:16:39:6e:f9:46:d4:54:b5:18:8d:f5:61:d2:e7:
48:bf:69:5c:d3:60:5f:32:a0:8f:8e:be:6a:ad:b9:
5b:9b:70:ba:f6:f5:20:1f:ba:49:22:90:9f:e6:61:
d1:c7:a3:a4:b9:13:47:f7:e4:66:2a:6d:78:3d:bc:
2f:fd:83:d7:2e:c4:1d:a3:79:a4:36:43:c6:91:a2:
38:43:ff:f3:fc:0b:d1:6d:c6:44:c2:6a:af:06:02:
28:b6:97:bd:ab:e5:ca:59:55:6f:55:81:f6:0f:3c:
07:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:18:3B:0A:31:14:64:CE:5D:89:0F:7D:38:48:DE:F8:56:55:CA:FA
X509v3 Authority Key Identifier:
keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:82:55:80:76:2a:fb:d0:97:fc:72:0c:6d:e8:6b:ad:1e:1a:
47:c5:26:d8:aa:b7:23:e4:9e:59:1d:e5:ac:7f:0e:30:63:72:
7f:07:b3:54:db:81:cd:1f:e9:58:46:b7:82:d6:75:e9:8f:6a:
b4:50:90:ec:bf:7d:07:65:b4:1a:ca:57:78:28:5b:9c:df:51:
b3:9b:eb:5f:00:7c:4b:39:8f:07:d9:96:7a:2f:fa:a5:ef:59:
ae:8a:bf:d1:f9:7c:c7:fc:fa:91:3e:b0:e3:4a:61:7d:a0:98:
9e:33:7d:58:30:d9:68:38:e9:09:9c:93:bb:46:50:a0:ab:ad:
da:26:1b:04:3e:16:7d:7f:b3:28:dc:b8:12:96:ae:3c:53:ae:
20:77:58:44:d9:c6:4e:93:9e:64:2d:52:4a:a5:f3:de:7b:e3:
91:a2:b9:56:45:dc:61:cb:c2:e6:45:28:5e:a6:69:39:ba:07:
5e:2a:95:28:ed:8d:26:06:f9:04:1d:eb:a6:4b:39:a8:a6:86:
ce:92:31:34:4a:66:b2:62:d8:f7:4e:34:8a:5b:63:23:68:98:
90:96:eb:38:52:4d:a5:88:67:50:da:1d:e5:ec:c2:de:81:22:
d6:fd:1f:39:f4:c1:28:6b:2e:98:cb:68:b6:62:47:77:11:c6:
53:cc:a9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:52:43 2025 by rpki-client