Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier: A5VQPWver5ZMokj9ADsohwKMlxHQykKThqmtP2+oDVY=
Subject key identifier: CB:BC:00:35:4D:59:18:50:88:11:DF:06:DA:1B:D2:8C:16:10:C2:D4
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial: 01958C60BAC5E2B7528A440C96B265DDCA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 22:01:44 +0000
Manifest this update: Wed 12 Mar 2025 22:01:44 +0000
Manifest next update: Thu 13 Mar 2025 22:01:44 +0000
Files and hashes: 1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: Ew7zYA8PgU9oB1mH2VY5zTKmwxlo6quO2ersoEf/Is8=)
2: tsQCK0at0tvh2TQxSMohTv0qJJo.roa (hash: 6ge8utmi5hP9DNzFySVDCcGypw9lo+O2IamCCwk3yDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:ba:c5:e2:b7:52:8a:44:0c:96:b2:65:dd:ca:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Validity
Not Before: Mar 12 22:01:44 2025 GMT
Not After : Mar 13 22:01:44 2025 GMT
Subject: CN=cbbc00354d5918508811df06da1bd28c1610c2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:ba:98:bf:02:0c:c5:48:0e:e2:b4:33:89:
6d:fe:d8:14:f4:c9:38:04:fc:a2:d6:3f:0b:96:18:
8c:5f:77:3d:b3:e3:69:fc:56:20:86:6e:eb:11:f1:
8c:ba:df:37:5c:85:32:f3:0c:76:c8:0b:9f:20:50:
9a:7c:ad:47:5d:6a:e2:9b:bc:71:b6:b5:98:77:40:
46:36:2c:b0:58:99:14:02:30:bf:ab:ec:ae:6e:2b:
95:81:ba:9c:78:d8:13:af:86:eb:68:78:72:7c:04:
1e:d6:5f:d2:d5:e0:b9:f8:08:e3:f6:97:c9:de:39:
e8:1c:42:7e:b9:50:f8:53:b6:e8:75:f9:7b:95:96:
70:68:cc:ac:c1:e6:8d:aa:8b:ca:a1:32:11:3b:38:
44:67:5a:91:0f:1c:84:46:07:16:dd:a7:19:7e:28:
44:16:fb:a6:80:b2:9f:18:d1:04:ae:f1:53:16:35:
4d:75:e1:1f:a4:ff:30:2a:c5:87:67:12:f7:52:f5:
12:1f:e3:a0:53:12:4d:fc:59:72:5a:39:fe:df:57:
fd:9c:fc:aa:83:3f:ae:f1:92:17:d7:36:af:84:5a:
14:9a:22:d5:5d:38:c9:7c:fc:30:60:c2:e0:4f:ac:
42:75:87:e7:cb:d8:be:21:dc:30:8c:8d:4e:08:bf:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BC:00:35:4D:59:18:50:88:11:DF:06:DA:1B:D2:8C:16:10:C2:D4
X509v3 Authority Key Identifier:
keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:25:93:d1:49:62:46:8f:ef:2e:29:00:c8:aa:80:c2:8a:3a:
a9:de:a7:cd:20:c2:85:f6:c2:49:30:d6:fe:00:ee:05:8f:df:
22:38:68:4b:44:2b:6b:d7:24:90:36:6a:24:92:26:3b:18:b0:
c1:13:02:bf:7b:a6:2f:72:18:c1:e8:78:3e:cd:fb:01:a2:8d:
82:d8:83:d1:f4:0b:8b:17:1b:e4:ac:2a:c3:15:7c:a3:cd:b5:
72:10:94:50:5d:7b:68:3f:82:3e:dc:1b:b9:36:0c:d3:38:60:
b2:c7:72:18:a7:97:51:53:60:a7:f8:a1:08:60:89:19:3e:75:
49:d2:37:6f:51:f9:84:a2:62:1e:10:5a:bd:f3:2d:97:48:df:
7d:39:1d:20:4e:81:fd:ec:a9:28:bd:e0:0c:76:e2:0a:56:a9:
31:b9:e1:76:90:70:92:64:80:08:67:d4:d9:aa:d3:99:2f:78:
60:c3:ae:92:80:23:9c:a3:7d:2b:78:49:69:56:20:25:f6:16:
9c:ce:4e:d5:2e:87:90:5a:f9:dc:92:cf:80:74:55:c7:5a:7e:
c9:6f:b1:aa:22:dc:0d:25:a3:cd:5b:e9:44:83:17:07:b7:6d:
28:0e:b3:74:14:c2:06:55:3c:79:6d:e5:f8:dd:86:ac:c8:36:
b6:32:58:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:47 2025 by rpki-client