Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
File: 201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json)
Hash identifier: 0PZ5zkEjipIkqTj29K77bb4sJ5K20Z9U32YxaUGMhdY=
Subject key identifier: 0C:E2:C9:4F:1F:99:22:90:DC:E6:92:E2:93:DC:13:21:3D:08:6C:D1
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Certificate issuer: /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial: 0196440D079CA5895A1AD8D7BBBE061D422E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
Manifest number: 14F8
Signing time: Thu 17 Apr 2025 14:00:26 +0000
Manifest this update: Thu 17 Apr 2025 14:00:26 +0000
Manifest next update: Fri 18 Apr 2025 14:00:26 +0000
Files and hashes: 1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: fvqnym5IBvYmzVdx5tAX52GxATfz6pl1jkmhOGtx6Rs=)
2: p7ugqnkl0eeyrlpJX13_lCmtLp0.roa (hash: f1GZebrpy+RrPUG5oAnHmyhNSF3EcTIUbcYbxWqO8rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0d:07:9c:a5:89:5a:1a:d8:d7:bb:be:06:1d:42:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Validity
Not Before: Apr 17 14:00:26 2025 GMT
Not After : Apr 18 14:00:26 2025 GMT
Subject: CN=0ce2c94f1f992290dce692e293dc13213d086cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:4d:73:0c:c8:af:92:f3:27:70:77:75:08:
1c:c8:cf:d2:c8:bc:c6:77:b9:ca:ec:cb:e4:17:12:
ee:78:43:1d:ca:c5:48:62:44:51:1a:76:ce:45:b6:
49:70:da:82:90:72:17:c7:93:22:5e:96:80:5a:2b:
5d:6b:44:a4:55:5b:c1:48:62:d3:5f:d6:80:d9:b0:
a6:73:b1:fd:07:16:bf:8a:05:fa:4d:97:f0:df:91:
ff:52:1c:1d:2d:e5:f8:79:96:5e:c3:f7:cd:6a:32:
a4:14:6d:d7:c6:50:a0:f8:e3:ce:dc:15:f7:27:78:
cb:4d:bd:7f:1f:2a:e9:c6:51:8a:51:27:65:b9:19:
f7:0a:08:b6:af:7f:ef:3c:69:9e:16:59:e7:f8:0f:
0d:c3:50:5b:9e:c7:39:d1:f7:29:c5:16:5c:69:7a:
2a:55:a5:f1:7d:6a:09:03:ce:66:8d:33:44:b9:3e:
7d:eb:26:dc:95:5b:19:f6:6a:c4:b4:7c:af:c9:32:
39:21:0c:a5:33:d9:e1:0f:89:cb:66:f9:f9:6c:86:
75:3a:bc:e5:32:02:2e:18:cd:b9:45:5c:39:84:55:
39:16:fa:85:81:a4:d9:4e:bf:b6:ae:0d:fb:78:1a:
5d:ec:d7:51:84:b9:36:de:f8:9c:0b:5e:41:21:1b:
ca:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E2:C9:4F:1F:99:22:90:DC:E6:92:E2:93:DC:13:21:3D:08:6C:D1
X509v3 Authority Key Identifier:
keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:cc:e5:e8:68:2e:46:a9:a5:36:e6:52:67:4f:e7:73:0a:a6:
88:8a:8f:a8:7b:84:d2:35:3d:ae:aa:c8:06:a5:2e:02:72:bb:
5d:52:11:55:0a:d6:96:fc:26:5e:11:33:ea:22:5e:22:8a:2c:
04:39:14:12:e4:50:41:cd:4f:9b:32:ac:6b:73:11:32:a6:67:
ce:84:3f:13:f3:44:54:47:93:d7:b5:67:a7:36:1d:26:39:73:
23:b9:f1:21:a3:4a:52:d1:61:7a:15:49:9e:e1:68:82:7c:a1:
74:05:af:0d:7d:87:ff:7e:4c:64:d5:f3:75:06:5d:58:50:dd:
e3:83:16:44:d3:97:92:2a:0c:69:2a:a2:91:eb:ea:4c:e4:91:
d1:1a:1c:66:1c:7c:a6:3a:3e:4f:43:5b:a3:96:4c:f2:11:df:
76:d3:78:46:ab:de:51:58:82:ab:ad:dd:85:5f:45:ec:63:75:
c0:3a:a4:42:91:39:47:b5:4a:49:25:3a:35:96:ab:32:d4:d7:
67:88:49:39:8d:ed:4f:4c:12:e9:22:76:b8:c7:48:0f:d0:8e:
c8:30:ec:ed:3e:26:4a:36:55:ed:27:7e:d7:ab:9c:c2:f0:0f:
91:f8:d8:e3:f1:0c:7e:b1:5b:90:bd:36:90:ed:5d:fb:f0:4e:
ee:af:90:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:37 2025 by rpki-client