Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.mft
File: 4VxQYDX6jdYJG0Ok6Il2f83MSPE.mft (raw, json)
Hash identifier: QrLxu8CxT7b/6/lzfn37prdJd4Dc2hAAQFwQTujcN+s=
Subject key identifier: 1C:17:BB:1E:A9:5A:20:F9:1E:83:14:6E:0A:E2:67:C2:C8:0B:0F:E0
Authority key identifier: E1:5C:50:60:35:FA:8D:D6:09:1B:43:A4:E8:89:76:7F:CD:CC:48:F1
Certificate issuer: /CN=e15c506035fa8dd6091b43a4e889767fcdcc48f1
Certificate serial: 01958C2926A4989570481D2F2C94DDF13523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.mft
Manifest number: 109F
Signing time: Wed 12 Mar 2025 21:01:01 +0000
Manifest this update: Wed 12 Mar 2025 21:01:01 +0000
Manifest next update: Thu 13 Mar 2025 21:01:01 +0000
Files and hashes: 1: 4VxQYDX6jdYJG0Ok6Il2f83MSPE.crl (hash: PP44nSJfa8v2qn2Ts+hZsG2fASaBSje8iOmtifqzO4s=)
2: NRZ_lCVhABHz5b_Z8IxEc9d_jK0.roa (hash: JVDWSg5rVEKkwzjQ42dtSUP/iC2fUlHw3otcwoq/p38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:26:a4:98:95:70:48:1d:2f:2c:94:dd:f1:35:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15c506035fa8dd6091b43a4e889767fcdcc48f1
Validity
Not Before: Mar 12 21:01:01 2025 GMT
Not After : Mar 13 21:01:01 2025 GMT
Subject: CN=1c17bb1ea95a20f91e83146e0ae267c2c80b0fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:39:e0:14:32:b8:12:71:b0:86:97:52:f9:
b0:44:6c:48:78:f6:8a:92:5a:3f:fc:72:c5:16:23:
e3:25:7d:36:d6:0b:22:ea:fb:5b:c5:a0:48:c1:4a:
1f:bc:7b:db:e7:74:68:2e:f7:a4:cc:49:a0:d2:00:
27:ed:d3:1e:6b:2a:73:87:f2:d2:89:16:b4:ee:4e:
cc:5e:b6:5a:6e:e5:6f:1e:fa:b9:9b:c4:b8:13:05:
f7:2f:fc:e2:9a:76:40:63:43:ed:67:87:5c:2f:20:
7d:ce:86:7f:8d:c8:70:88:74:9e:7d:cb:26:6e:6e:
a6:3c:c9:e5:61:95:01:7d:8a:cd:42:42:e9:3a:36:
be:9c:8e:5d:c0:04:78:4f:0f:32:cd:58:61:df:74:
db:98:1e:af:8c:7b:d3:9d:aa:25:5b:4b:56:1b:80:
bf:00:69:49:84:2a:47:6f:bc:df:d6:c8:1c:91:e0:
1a:e8:9b:e3:36:c0:7b:e1:1d:6c:7b:92:10:3a:c5:
3b:1e:94:31:32:9b:fe:cd:02:f5:9d:fa:bb:8e:5f:
57:ce:4b:01:79:4f:a6:a1:73:32:35:49:99:7a:3b:
30:21:62:62:fb:5b:51:fc:b5:79:0c:00:88:e3:6d:
12:1a:95:d6:c8:6a:0b:fc:ec:0b:fa:31:a1:68:ff:
e5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:17:BB:1E:A9:5A:20:F9:1E:83:14:6E:0A:E2:67:C2:C8:0B:0F:E0
X509v3 Authority Key Identifier:
keyid:E1:5C:50:60:35:FA:8D:D6:09:1B:43:A4:E8:89:76:7F:CD:CC:48:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7e:a3:69:ca:43:d7:29:e0:c0:ea:9a:cd:31:a2:ea:0b:cf:
f6:af:b3:7f:60:e6:55:2b:3a:83:7c:5e:8b:eb:d3:9d:28:3f:
4f:21:3e:5b:00:64:9d:06:71:e9:ce:3a:4f:70:42:06:f8:79:
75:f4:c0:4a:a0:05:d3:2d:85:66:cb:bb:b8:7d:73:93:0a:3a:
1e:73:cb:0b:02:87:e1:63:99:0c:14:a0:13:9a:d2:2c:32:5b:
56:c5:34:36:62:95:72:a0:b9:24:7a:29:42:2e:a2:96:2e:7a:
c0:1b:e5:6c:53:8a:01:8a:09:c0:e4:d8:3f:eb:42:09:22:f6:
d3:2b:ec:da:d9:85:91:bf:f2:61:31:2d:e0:48:53:c0:79:8e:
f9:b5:33:04:b2:01:19:c9:75:0b:b6:aa:29:87:17:f8:e4:6b:
a0:84:4d:1f:9a:cc:dc:45:cb:fa:16:91:9f:60:0a:8e:e0:26:
3d:d8:25:6c:7f:7f:fa:31:d2:fe:bb:b3:50:51:c1:6b:f5:c7:
43:24:d2:fa:2d:4f:7f:83:0d:a7:5f:3e:10:10:d0:61:53:db:
80:cd:ed:4b:c2:ca:b6:ec:13:7f:52:53:56:8b:19:71:64:f5:
18:77:23:d8:ae:74:7b:30:8d:0b:3a:e2:f7:23:fb:8a:3a:f0:
05:93:01:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:31 2025 by rpki-client