Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
File: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft (raw, json)
Hash identifier: zbrYjLUGynbOyyKb5IsfWcWI+4S/t9ya4h5ZBOP/vR4=
Subject key identifier: EE:22:06:EF:ED:CC:D9:76:A1:85:16:DB:15:AF:3D:D5:F6:25:B3:63
Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Certificate issuer: /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Certificate serial: 01964C34EEDE414005D67E7416E56055C6F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 04:00:59 +0000
Manifest this update: Sat 19 Apr 2025 04:00:59 +0000
Manifest next update: Sun 20 Apr 2025 04:00:59 +0000
Files and hashes: 1: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl (hash: 8Su3Gn+1WNfEd4yzmjOMVOygJ1zIsojVCozzY/plyq4=)
2: lmn9m784OLvYNEmoODCEhtK7M6Y.roa (hash: SMHhc3f9U107wkgd7T3SBk2Npa8W1MMzuYgHU/NZOn8=)
3: thiVarAMBeEnqBDpZfGbu3w4ANA.roa (hash: dysQvxWNncFFefbso/9XEjKk2c3ldxSqvGZG35iip3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:ee:de:41:40:05:d6:7e:74:16:e5:60:55:c6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Validity
Not Before: Apr 19 04:00:59 2025 GMT
Not After : Apr 20 04:00:59 2025 GMT
Subject: CN=ee2206efedccd976a18516db15af3dd5f625b363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b3:b0:20:3a:90:eb:95:93:d4:48:54:30:e1:
8e:46:2b:d4:68:20:cb:b7:1c:c8:24:11:4d:32:2c:
e9:5a:1b:f8:b1:9b:5b:9c:70:a8:fe:7f:e8:2a:02:
20:9b:62:36:e8:13:a3:64:58:e3:ff:93:7b:e8:96:
24:2a:6a:78:59:44:91:91:ae:ab:e4:81:41:dc:14:
6e:33:e8:ed:86:e3:ca:93:75:c3:88:31:92:7d:e1:
2c:c4:33:f1:12:05:13:c5:da:a5:9c:9c:89:15:e0:
2b:e4:b4:04:ac:f0:23:d5:f6:d9:a4:34:2a:25:94:
09:5d:85:d1:70:12:23:60:90:16:ed:74:16:db:28:
80:c7:68:5f:7b:62:e7:d2:81:ba:6e:f6:1f:94:23:
7e:06:20:31:a7:5d:be:84:dd:46:0c:c8:c8:00:e9:
8c:74:ef:7f:db:fd:9f:4a:14:57:3b:97:b0:3f:fd:
91:6e:63:75:42:f3:37:34:8a:85:3c:ee:b6:9d:dc:
01:c3:f7:26:f3:e3:03:72:b8:bc:8d:9e:5f:05:6a:
bf:18:f7:15:08:fd:7d:54:2c:d4:f6:fe:63:8b:e9:
4d:8f:29:6f:38:f4:b1:26:90:81:80:9a:40:37:c0:
77:2a:fc:af:4d:3c:85:e4:9e:d6:f3:70:41:b4:2a:
12:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:22:06:EF:ED:CC:D9:76:A1:85:16:DB:15:AF:3D:D5:F6:25:B3:63
X509v3 Authority Key Identifier:
keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:70:c8:4c:e4:ec:5f:0e:c4:11:2a:e6:24:96:92:79:c4:7c:
7c:31:eb:64:81:a2:e5:80:f3:4c:e3:37:29:cf:bc:36:da:f3:
c0:c5:0a:63:0e:5c:f0:7c:0b:2d:c0:db:b3:d0:1c:c2:95:0c:
d5:89:98:1c:b1:65:b6:25:62:cc:e6:d5:af:b5:d6:e4:59:1e:
1f:09:b6:e9:26:54:43:1f:fd:fb:ab:74:83:7d:ab:eb:40:23:
aa:97:38:f2:b7:a3:a2:eb:2b:8e:e2:35:7d:b6:e1:87:c9:9b:
67:d1:f4:48:e6:48:21:eb:c3:88:2b:44:18:4b:b6:6a:b9:fd:
68:69:cd:2b:6d:32:b5:64:db:62:9d:7e:71:a2:f6:a9:9b:b1:
9e:64:2f:6e:74:5a:30:23:13:db:db:39:7a:44:85:4b:87:17:
48:c6:8a:62:42:fc:a3:30:2b:f6:10:f4:67:a9:f2:2f:de:d2:
f3:c2:1e:f3:1f:ec:15:98:41:ef:1b:aa:98:45:7a:08:76:ef:
fb:a5:15:31:36:fb:1f:f1:b2:f1:2d:5b:35:00:16:49:31:ce:
84:82:28:8d:8d:d4:ac:f3:e2:3d:24:4d:b3:d5:17:f4:89:a1:
f3:eb:48:52:c3:97:99:c5:58:ad:df:8c:7a:e7:1b:4d:5e:1b:
db:ae:ce:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:15:03 2025 by rpki-client