Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
File: 4u1kMJX_plfeBc7spdILJlwbf1I.mft (raw, json)
Hash identifier: k7w5ltIJFHn8Dfn2VVsdpQ796kXkSPeVFhRkwMzQqGs=
Subject key identifier: AF:BA:AF:4B:8B:12:92:23:5D:5B:6E:11:B7:2F:A9:0D:30:4C:DC:C9
Authority key identifier: E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
Certificate issuer: /CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Certificate serial: 01958C972A1556DA04DA4EDBF1D0B68E12AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
Manifest number: 0D14
Signing time: Wed 12 Mar 2025 23:01:11 +0000
Manifest this update: Wed 12 Mar 2025 23:01:11 +0000
Manifest next update: Thu 13 Mar 2025 23:01:11 +0000
Files and hashes: 1: 4u1kMJX_plfeBc7spdILJlwbf1I.crl (hash: ywDSovFYvKqiC3ul6b5ifJJU9spnsGZQOolX5FeFnsM=)
2: m1S7Ig8EoJ-at70vZRF2UbuJi5Q.roa (hash: AiilIUPxxw08sr3kqUjUq/R6OJzvAGqmXWhwnhpEZ7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:97:2a:15:56:da:04:da:4e:db:f1:d0:b6:8e:12:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Validity
Not Before: Mar 12 23:01:11 2025 GMT
Not After : Mar 13 23:01:11 2025 GMT
Subject: CN=afbaaf4b8b1292235d5b6e11b72fa90d304cdcc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:a1:88:41:5d:7e:5b:03:8a:90:dd:ab:33:
7d:45:f9:2b:b9:08:bc:4a:a7:21:15:6b:b9:ea:24:
65:a7:72:43:f4:ab:f7:e6:20:af:9f:ca:3d:40:4b:
4a:27:f7:5d:ca:c3:9d:8f:c8:b9:5d:41:0b:46:80:
67:92:fd:72:db:0d:b5:99:65:56:20:76:a1:a8:a5:
eb:15:b0:2f:9e:69:9c:52:f0:4a:28:d1:79:96:33:
cb:c7:5c:e4:7d:56:5e:61:b2:86:4c:61:ca:65:d3:
0b:79:d4:f3:78:7d:46:6b:c9:6f:d3:81:d8:b6:c1:
99:ae:e2:e4:c7:46:ca:31:74:98:96:65:7e:81:74:
9e:55:26:51:a7:49:fe:91:85:5d:0f:a7:5d:04:c7:
e5:3a:9e:49:ad:93:11:9d:a8:4c:30:1d:52:91:33:
dd:50:f7:8a:73:c4:1c:22:03:6e:6d:12:35:39:5b:
28:13:b0:16:05:46:82:a1:65:43:ae:f4:cb:a1:07:
4a:2d:34:55:99:35:f8:ea:ec:e2:8a:d1:17:8f:bd:
61:81:3d:2f:3c:9e:7d:ed:df:a6:bf:eb:9e:01:cc:
0c:d2:64:26:dd:26:02:3a:20:6e:4f:46:a1:81:2f:
d5:cd:a0:d0:68:1a:7b:98:bd:8c:ff:69:da:d6:d9:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BA:AF:4B:8B:12:92:23:5D:5B:6E:11:B7:2F:A9:0D:30:4C:DC:C9
X509v3 Authority Key Identifier:
keyid:E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1b:c7:5d:20:3b:2c:97:76:07:29:0d:93:c7:10:62:11:ab:
7c:d9:4c:0b:09:6d:44:ed:b1:e2:b7:1e:05:b4:13:36:ff:1d:
52:05:bd:20:78:89:59:1b:83:c4:53:0b:d8:22:bc:c7:84:5d:
b0:04:75:ed:3d:8d:f9:eb:13:38:21:63:b5:52:18:58:68:6b:
1c:20:47:28:e6:db:6b:18:91:bb:32:7b:76:26:7b:97:e8:00:
74:24:c8:21:5a:bf:96:1a:8a:55:26:56:97:f3:55:c1:48:f1:
c5:50:de:f7:77:14:c9:66:f7:af:92:d9:6f:62:8e:23:90:4c:
fe:75:40:b8:b8:2c:ae:ef:f5:e5:f4:72:ae:99:25:9f:33:48:
0d:08:94:34:2a:5e:fc:9a:43:f8:84:cc:20:9b:38:68:77:fe:
03:ba:fa:80:ad:62:b4:a4:53:3e:4c:d2:1d:56:10:8a:be:27:
ad:7f:df:f9:8a:31:b4:dd:3e:53:73:5c:4a:c7:4f:55:8d:fa:
47:e5:ef:86:ed:f4:e6:38:ef:95:24:a3:21:fb:1e:6b:8d:da:
d6:bb:71:a6:52:ee:06:89:3b:62:80:31:c8:93:60:98:9f:02:
0b:88:dd:47:be:8a:c2:14:e4:49:7e:e5:2c:a5:de:cb:e2:de:
16:7f:a3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:38 2025 by rpki-client