Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
File: cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json)
Hash identifier: 8sFMQXzZH662jxywDJ8YNFJolISxv+g8OEvRGJcV3o4=
Subject key identifier: DC:86:66:DB:EA:C9:8A:3D:6E:BB:23:34:29:9F:A7:93:E4:09:5F:06
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Certificate issuer: /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial: 0196477C194B6365FA82774FC25F68A8187D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 06:00:37 +0000
Manifest this update: Fri 18 Apr 2025 06:00:37 +0000
Manifest next update: Sat 19 Apr 2025 06:00:37 +0000
Files and hashes: 1: F94-zZFEc6qh0jKnwFf7o1uXF7I.roa (hash: w7SpfiHOXF1SxdkUidpIylH68mEs/yNWYY/p77Td/KQ=)
2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: iXocTk/vNASEYOlKhMCBqK4xW1dEijNjOgrKEOzTg/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:7c:19:4b:63:65:fa:82:77:4f:c2:5f:68:a8:18:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Validity
Not Before: Apr 18 06:00:37 2025 GMT
Not After : Apr 19 06:00:37 2025 GMT
Subject: CN=dc8666dbeac98a3d6ebb2334299fa793e4095f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:f2:72:f6:6a:d4:00:a7:7e:71:a4:ff:69:
30:d5:f3:c9:93:7a:cf:93:88:80:bf:69:f3:30:01:
d2:08:a5:69:5f:2b:35:da:4c:08:34:16:05:32:9b:
cf:f5:92:72:92:28:af:9e:67:a6:6f:63:0d:65:41:
0e:8a:42:11:b5:41:c4:b1:f1:76:c4:92:44:fe:00:
9b:7c:46:00:96:4c:4f:4a:c3:2a:3c:64:6b:a8:ae:
97:bb:9f:ec:a8:26:6d:74:d5:3f:bf:a9:7c:fa:ae:
29:ad:7b:37:f7:a5:23:fc:fa:a5:23:9d:af:03:a0:
35:93:76:61:77:ff:7e:1c:78:eb:f3:5b:5b:7d:16:
7a:f6:2f:89:ba:2b:98:e5:dd:5e:dc:69:7a:9a:56:
95:c3:de:cb:f0:54:cd:62:60:d0:29:12:2f:c4:84:
34:50:5a:e3:e7:2d:2f:2a:78:cc:47:fb:1e:8e:4a:
82:de:16:04:a9:29:e0:4d:5e:23:94:0d:f3:91:11:
6e:db:10:7e:19:a0:45:a8:e1:6d:4f:22:59:11:89:
21:69:e4:2d:ad:4b:fc:1a:77:5c:96:f1:12:fd:9f:
70:f8:7b:8d:fb:93:24:ef:fe:f2:f2:f3:d6:93:1a:
d0:bb:58:df:bf:92:e6:f4:41:08:0b:59:24:79:a9:
a9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:86:66:DB:EA:C9:8A:3D:6E:BB:23:34:29:9F:A7:93:E4:09:5F:06
X509v3 Authority Key Identifier:
keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ff:13:99:b6:40:cb:33:66:35:66:36:69:53:26:3e:34:03:
b8:a1:d4:7e:5d:6e:e2:d2:de:57:55:05:7c:b1:e1:24:2d:ad:
ee:af:8f:87:71:c6:c3:e5:eb:ec:b1:b6:e5:df:2c:a1:80:ab:
fe:bc:a6:9d:1c:d4:82:83:2e:a3:ac:37:7d:59:7b:e0:e0:15:
13:bc:af:5a:07:45:ec:db:56:6f:69:f5:08:d5:e6:fd:1e:26:
b5:f1:04:7d:12:a0:94:b6:df:14:2e:80:19:0a:b8:1f:4b:cd:
16:5d:4d:4f:f9:be:ae:22:41:9a:a6:06:78:cf:48:5e:a8:54:
de:a4:75:9d:1f:b4:aa:11:34:38:a0:9e:6b:bc:ca:ae:17:69:
be:f9:13:49:93:08:fa:da:d5:ae:48:b9:8d:8e:96:26:e7:2f:
72:2d:c9:13:da:07:b4:88:cb:fc:c7:db:99:b8:ee:af:e6:b3:
3c:ae:c0:d0:f6:ac:5b:93:e4:ea:e6:7a:1f:2f:11:c3:f9:d8:
d7:d6:0f:47:f2:8a:1f:10:ba:21:01:2c:d7:15:4b:88:c7:78:
a7:95:67:70:87:41:c6:17:98:fc:d2:d0:95:8e:00:5f:c4:c8:
9d:08:58:cf:77:e8:50:a3:18:1a:e6:0f:00:c7:32:f6:d0:e4:
59:25:2c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:59:23 2025 by rpki-client