Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File: dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier: ZiagzcJLfVbZe2z1O3vQhfKm5HfiC+7kraBa184oB3Q=
Subject key identifier: C6:5D:94:BA:07:57:54:9B:70:95:47:CB:2D:92:DF:8F:38:CD:F8:72
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer: /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial: 0196436822CF952BA27C5DF7E42A6CD6B91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number: 122C
Signing time: Thu 17 Apr 2025 11:00:20 +0000
Manifest this update: Thu 17 Apr 2025 11:00:20 +0000
Manifest next update: Fri 18 Apr 2025 11:00:20 +0000
Files and hashes: 1: 40QNfW5uxL4jypZTwjAvEPXJ-ss.roa (hash: scLT9GShE++kyEVNQ4Xr6VT4pmzB0wfzNMHjViw3ltA=)
2: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: HUsyME4OuqUkQQdBkTwDHZ/vxZrfi6sfVn0Ir7FUjgs=)
3: to-C9o8M7rUM05HxGikjjRHVAbw.roa (hash: JaaGI9qnzexOYc7maJGwDizpvZfHfNfRXKpM/h4aHAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:68:22:cf:95:2b:a2:7c:5d:f7:e4:2a:6c:d6:b9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Validity
Not Before: Apr 17 11:00:20 2025 GMT
Not After : Apr 18 11:00:20 2025 GMT
Subject: CN=c65d94ba0757549b709547cb2d92df8f38cdf872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f5:e6:05:0f:ff:2d:a6:a5:63:71:ef:6c:e7:
02:77:25:0a:ad:db:d8:e2:0e:f7:fb:2c:4c:63:7c:
74:30:e1:e5:5b:25:5e:09:42:88:c2:28:0e:8e:17:
44:dc:28:a1:71:8f:4f:de:62:8a:13:6b:aa:45:1b:
d8:ec:a5:71:1a:fe:d1:56:15:4c:69:25:57:7f:06:
ba:07:68:4d:02:0c:3d:c7:5c:ec:4e:4b:bb:f9:ac:
8b:24:a1:38:85:6e:1f:7d:72:71:4e:84:69:8d:f7:
dc:4c:4e:31:91:ec:58:da:99:10:b4:e1:35:74:26:
ab:61:07:df:72:9f:1c:ee:e9:cc:99:61:ef:ea:9b:
44:0e:c9:54:fb:39:30:3f:b0:88:2b:07:17:e2:b4:
4a:a9:28:e5:81:f0:60:28:8b:53:ce:3e:01:32:d1:
ca:c7:3c:95:24:9b:31:fe:ba:fb:d7:c3:5c:c1:f1:
33:91:f9:a3:1c:88:2d:57:ef:c8:28:e7:6e:b5:53:
15:c7:dc:7b:30:ee:88:01:28:ea:99:66:55:03:37:
ca:f4:d6:0a:db:70:43:78:1e:4a:c0:b1:8d:3f:a7:
0e:db:9f:d8:06:8f:1d:9d:91:15:82:aa:65:21:0b:
93:11:9c:9b:d8:d9:84:20:77:9a:d2:93:9f:cc:bf:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5D:94:BA:07:57:54:9B:70:95:47:CB:2D:92:DF:8F:38:CD:F8:72
X509v3 Authority Key Identifier:
keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7c:b3:88:9e:03:7d:67:c4:3c:c9:3b:8b:d4:90:3d:e6:e6:
92:63:02:57:15:60:9a:36:85:75:ce:48:dc:9d:91:78:48:fa:
c2:b8:96:dc:ec:39:f3:a8:3d:1b:96:33:04:ac:9e:5b:7b:41:
bf:fe:a3:8d:4a:0d:e3:d6:a4:87:10:7f:c6:bf:c3:ce:38:1d:
d0:b4:4e:0d:3e:df:0d:b1:fd:3a:d3:81:c8:13:87:0d:bd:3e:
f4:fd:c4:70:0f:c3:3f:66:33:1d:be:fb:b8:c6:54:0d:2e:fd:
32:22:33:4d:8d:7e:b8:83:5a:47:44:49:0a:8f:4d:a0:c4:5e:
b6:2a:00:ab:b7:ed:53:71:5d:71:e3:df:69:4a:c0:18:8f:ac:
c0:8e:7c:83:47:ca:4d:21:b1:18:06:aa:6d:30:e1:f4:a7:ba:
29:96:15:51:d0:7b:19:3c:cf:95:96:0b:7c:6c:1c:79:d9:a5:
aa:b0:88:81:09:30:79:58:07:37:26:a2:c9:51:4e:1d:c3:08:
cc:d0:9e:1d:5a:91:70:14:9a:b8:3f:6c:2e:b7:7d:a8:31:15:
33:46:2e:73:3a:f2:74:cb:68:eb:ce:89:29:07:5d:c7:1f:e8:
78:e1:2c:cd:1c:60:ea:aa:9c:d7:94:cd:9e:76:34:87:b8:ed:
4f:50:2c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:59:00 2025 by rpki-client