Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
File: CsFWWl9sTlTKLxnTZHWbag7WGEA.mft (raw, json)
Hash identifier: so9wwXt0gpwHSjxja2Cb3rhcq2O3WnQMlUmKunHWZSo=
Subject key identifier: 3C:68:30:02:2B:4B:F0:69:81:F0:C9:DF:23:14:7F:7A:B1:53:88:44
Authority key identifier: 0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
Certificate issuer: /CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Certificate serial: 019655A5FCBFBED87E2C5C9B6CA05C609CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 00:01:03 +0000
Manifest this update: Mon 21 Apr 2025 00:01:03 +0000
Manifest next update: Tue 22 Apr 2025 00:01:03 +0000
Files and hashes: 1: CsFWWl9sTlTKLxnTZHWbag7WGEA.crl (hash: 4/g+AKRnqSHOZ6Xd/cnkf5mBSynijYq/0xq9MfWAV2Y=)
2: QP38gNz3xco5qv5nlkhRVeJhNcc.roa (hash: iHHCmYPxx8nMI8Pl/VJqH9lchdWekUpYcRiMjWpeVhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:fc:bf:be:d8:7e:2c:5c:9b:6c:a0:5c:60:9c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Validity
Not Before: Apr 21 00:01:03 2025 GMT
Not After : Apr 22 00:01:03 2025 GMT
Subject: CN=3c6830022b4bf06981f0c9df23147f7ab1538844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:38:15:ff:c9:98:5e:8f:52:a5:dd:8c:42:
de:a5:4d:4e:0b:1f:00:56:cd:0e:78:3c:8c:d5:d4:
c2:c8:59:1a:16:b3:61:4f:b2:80:a3:c4:ed:9b:fd:
7b:bf:72:b3:49:8b:1c:9c:bc:e6:8b:92:b0:af:2e:
d3:f4:64:dd:c3:5d:0a:60:98:d6:3c:a4:8c:be:a6:
cf:d3:7e:20:18:17:e5:a6:cb:37:07:4c:d1:c9:a7:
0f:64:8a:26:d9:41:65:5e:4f:c4:64:dc:42:d7:e5:
3f:35:f6:73:7a:4c:fb:ea:46:76:44:e3:0b:0d:2c:
41:62:cb:2b:0a:01:95:9b:a1:a1:d7:44:90:93:4e:
ec:29:ae:99:a7:58:83:fc:a6:e2:56:c9:63:d5:4f:
b8:99:b8:15:cb:0e:8f:50:34:a7:04:e6:d3:df:1a:
0d:08:3e:52:dc:5c:9a:f3:6d:f0:7a:83:c9:17:89:
9f:05:f3:16:86:75:6a:3a:00:4c:01:f3:db:89:fa:
e9:aa:72:5c:60:66:13:4b:17:8a:14:f4:ff:b1:ba:
dd:82:a6:ca:3d:59:36:38:72:d1:40:96:18:38:0b:
5e:2e:4b:e8:fd:f1:b3:b0:b2:38:96:53:26:45:fa:
b2:1b:85:37:4c:6b:e0:91:39:8d:af:67:ea:aa:e0:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:68:30:02:2B:4B:F0:69:81:F0:C9:DF:23:14:7F:7A:B1:53:88:44
X509v3 Authority Key Identifier:
keyid:0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:50:f1:03:15:ae:03:68:75:60:4c:ee:ba:c0:a6:9d:ba:41:
1a:97:7c:45:fd:07:9d:a5:d2:df:1c:90:37:3f:3e:03:49:82:
a8:6a:a0:42:c1:e1:22:59:b6:db:fa:65:7c:a9:f6:24:86:b2:
83:d3:4f:7b:05:c4:a2:d2:ad:b4:29:3a:32:f2:1a:f9:99:6c:
c1:3b:82:51:ee:24:7e:12:ab:4e:d1:0d:f7:d3:ca:7c:a5:51:
c5:6e:0a:ab:d4:c7:a8:28:51:2d:38:57:10:8e:63:cb:6c:9b:
42:1a:e9:78:9e:f1:5b:8f:b4:dd:3d:41:6c:fa:51:1b:09:e7:
18:43:85:99:09:4c:11:ff:07:bd:e1:53:31:33:2c:0f:4c:af:
0d:bc:48:3a:e4:a8:48:10:3b:fa:56:ab:08:2f:1e:36:5a:46:
48:4d:5e:4a:0f:ab:86:66:6e:d4:99:31:81:71:81:8b:2f:fa:
7c:cb:54:16:e4:e1:27:db:2f:9a:5f:a5:49:7c:93:8a:3f:20:
62:c2:aa:18:a4:11:c4:12:49:90:26:fd:90:9d:3e:18:ee:64:
f8:47:69:5a:3c:7e:41:b2:b6:39:4d:c3:44:a1:3a:ed:12:d0:
2e:87:40:c9:15:5a:74:27:14:ab:2f:a0:b3:a4:ed:97:49:fe:
34:da:79:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVpfy/vth+LFybbKBcYJyuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYzE1NjVhNWY2YzRlNTRjYTJmMTlkMzY0NzU5YjZhMGVk
NjE4NDAwHhcNMjUwNDIxMDAwMTAzWhcNMjUwNDIyMDAwMTAzWjAzMTEwLwYDVQQD
EygzYzY4MzAwMjJiNGJmMDY5ODFmMGM5ZGYyMzE0N2Y3YWIxNTM4ODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyU4Ff/JmF6PUqXdjELepU1OCx8A
Vs0OeDyM1dTCyFkaFrNhT7KAo8Ttm/17v3KzSYscnLzmi5Kwry7T9GTdw10KYJjW
PKSMvqbP034gGBflpss3B0zRyacPZIom2UFlXk/EZNxC1+U/NfZzekz76kZ2ROML
DSxBYssrCgGVm6Gh10SQk07sKa6Zp1iD/KbiVslj1U+4mbgVyw6PUDSnBObT3xoN
CD5S3Fya823weoPJF4mfBfMWhnVqOgBMAfPbifrpqnJcYGYTSxeKFPT/sbrdgqbK
PVk2OHLRQJYYOAteLkvo/fGzsLI4llMmRfqyG4U3TGvgkTmNr2fqquBvXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxoMAIrS/BpgfDJ3yMUf3qxU4hEMB8GA1UdIwQY
MBaAFArBVlpfbE5Uyi8Z02R1m2oO1hhAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3NGV1dsOXNUbFRLTHhuVFpIV2JhZzdXR0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZWRiMjItZmY0Ny00NjVmLTkwNjgt
NWM0YTBlYjIwMTdmLzEvQ3NGV1dsOXNUbFRLTHhuVFpIV2JhZzdXR0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83ZWRiMjItZmY0Ny00NjVmLTkwNjgtNWM0YTBlYjIwMTdm
LzEvQ3NGV1dsOXNUbFRLTHhuVFpIV2JhZzdXR0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1DxAxWu
A2h1YEzuusCmnbpBGpd8Rf0HnaXS3xyQNz8+A0mCqGqgQsHhIlm22/plfKn2JIay
g9NPewXEotKttCk6MvIa+ZlswTuCUe4kfhKrTtEN99PKfKVRxW4Kq9THqChRLThX
EI5jy2ybQhrpeJ7xW4+03T1BbPpRGwnnGEOFmQlMEf8HveFTMTMsD0yvDbxIOuSo
SBA7+larCC8eNlpGSE1eSg+rhmZu1JkxgXGBiy/6fMtUFuThJ9svml+lSXyTij8g
YsKqGKQRxBJJkCb9kJ0+GO5k+EdpWjx+QbK2OU3DRKE67RLQLodAyRVadCcUqy+g
s6Ttl0n+NNp5xw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:01 2025 by rpki-client