Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
File: CQggTXz1vEqrOP-jnaOmge0he9Q.mft (raw, json)
Hash identifier: 6dbE5IvwEec0GNTGytZ7LCiK8IW7E3rVaO3zNFJLEdo=
Subject key identifier: 67:E0:EA:98:26:AB:C3:35:E0:10:4E:51:7C:9A:F1:D7:DE:B1:C7:35
Authority key identifier: 09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
Certificate issuer: /CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Certificate serial: 019652A4CAC75B80E7C6C1A4190AB339212C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 10:00:53 +0000
Manifest this update: Sun 20 Apr 2025 10:00:53 +0000
Manifest next update: Mon 21 Apr 2025 10:00:53 +0000
Files and hashes: 1: CQggTXz1vEqrOP-jnaOmge0he9Q.crl (hash: LkBiKNiVlHT2xaJRNenjVCe70ISmbyupB/Lgnnj30YE=)
2: sDPpx-mL_-TYo49AUalN83Hb7rw.roa (hash: TLER53MCgePm+J2o6lGDLT56kpvbjUNH4PxF0iwFFXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:ca:c7:5b:80:e7:c6:c1:a4:19:0a:b3:39:21:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Validity
Not Before: Apr 20 10:00:53 2025 GMT
Not After : Apr 21 10:00:53 2025 GMT
Subject: CN=67e0ea9826abc335e0104e517c9af1d7deb1c735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:b2:d6:9f:c6:ea:82:59:8d:05:d2:3b:82:
16:6a:53:9c:c8:62:63:a2:76:ed:97:5f:02:a8:a0:
d8:a9:bd:03:49:f0:f9:c2:63:5f:94:0a:64:ea:ad:
d3:1d:48:44:ee:41:3c:13:9a:5a:07:c1:6d:19:be:
f4:9b:06:b6:2f:a6:d7:bb:9b:fb:25:17:a7:0b:b6:
0f:23:ed:88:fb:10:30:b3:76:2f:86:7e:e5:bf:4e:
ac:ca:5c:72:ef:6d:79:e8:01:fd:61:ac:5d:d2:32:
57:be:3b:9c:35:4e:da:45:4d:dc:36:2a:8a:f9:24:
ba:51:f8:f7:61:c9:6e:f6:e0:63:7d:8c:2a:12:b3:
98:b3:13:79:3e:6f:62:41:1f:6f:bd:94:4e:13:df:
12:36:2d:bf:04:b1:66:23:47:06:c8:f3:d4:06:12:
8a:b2:1e:18:a2:96:bf:60:6d:c2:4c:5b:19:e3:c6:
40:d9:c6:ae:4f:71:5f:ca:8a:59:03:2e:32:39:47:
7d:9c:cb:e6:ca:42:10:82:e5:bb:ad:31:ec:7b:b1:
e5:83:f2:08:49:24:93:76:4c:65:02:96:b5:50:29:
f6:7c:0a:de:4f:96:67:6a:00:64:9e:b9:27:5e:96:
87:09:9c:22:ae:13:7a:ff:f3:ef:3a:39:00:27:d1:
3b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E0:EA:98:26:AB:C3:35:E0:10:4E:51:7C:9A:F1:D7:DE:B1:C7:35
X509v3 Authority Key Identifier:
keyid:09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:25:40:6c:c1:1e:db:46:ab:ba:ca:53:98:94:0b:6d:fc:b5:
fd:bd:bf:44:10:3c:40:48:dc:98:aa:eb:a0:2a:8e:b8:cd:92:
ca:58:4f:96:1a:a7:7c:38:3f:a8:fc:7d:d1:74:cc:22:b7:08:
db:2e:e2:0e:28:23:8a:e2:37:d6:d7:51:a8:5a:c2:9f:bd:e2:
45:02:18:08:86:bb:44:0a:7f:6d:9b:98:f0:ef:1f:be:8d:21:
a9:8b:fc:c4:d0:11:13:7c:2b:a4:19:d7:89:2e:0c:a3:9a:85:
b5:c7:31:04:72:8a:d3:0d:e7:d8:09:97:dd:0c:f0:f9:4a:f9:
44:2f:c5:36:a7:f9:77:c4:ae:e1:0d:d9:60:30:8b:f5:89:d3:
1e:02:9f:48:18:eb:db:96:67:53:20:8c:21:af:6c:f8:9b:a9:
01:32:92:16:33:51:2d:60:f5:c2:e8:85:cc:ac:5e:ab:04:ef:
61:4a:67:fc:f1:ee:7a:d3:e3:4f:e7:a9:b2:5b:49:80:d2:86:
4d:9d:df:bb:99:ea:25:05:3d:f9:9e:0c:46:6a:e1:50:ba:43:
9a:37:4d:09:b0:f0:36:25:68:59:c9:c4:af:79:67:ae:27:7b:
97:86:bd:5c:a8:fc:25:17:e2:5d:12:3d:5a:f3:48:ca:78:1a:
51:36:c0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:14:58 2025 by rpki-client