Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
File: CYsceb-uEqW4fzXJmLtgs_pOZiE.mft (raw, json)
Hash identifier: ahtz9wTvr0eJW9IQPpbkBXQtt6rHLgyLR74D6cVYY7E=
Subject key identifier: 3C:6F:0E:59:A9:92:B3:9B:95:D5:59:96:53:04:C3:6A:E4:DE:7F:44
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial: 01964F6D4D6493FA5EE82E3BC5C0FCAD651A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 19:01:25 +0000
Manifest this update: Sat 19 Apr 2025 19:01:25 +0000
Manifest next update: Sun 20 Apr 2025 19:01:25 +0000
Files and hashes: 1: CYsceb-uEqW4fzXJmLtgs_pOZiE.crl (hash: AtboCdJ4ohr2N0g3uLtDWy22Xv3NxMPAbZzmqf6S264=)
2: azMfriENBDiIJYosRP-8DXKTAfY.roa (hash: SyiAg9Yx6L4V6Q7e4+QQHSJOd2fmFI1gwl+oA6hcHVg=)
3: ibvrneMp14yx1aeNF9L_aPTpyR8.roa (hash: VZVseX73bEIVKUE/+ZPW5JNub6b1T9krDYglkTTQtpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:4d:64:93:fa:5e:e8:2e:3b:c5:c0:fc:ad:65:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Validity
Not Before: Apr 19 19:01:25 2025 GMT
Not After : Apr 20 19:01:25 2025 GMT
Subject: CN=3c6f0e59a992b39b95d559965304c36ae4de7f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:7a:f8:46:93:dd:03:53:48:eb:08:72:0a:
fa:1f:71:36:dc:de:77:57:32:4e:df:bf:1b:bd:e2:
58:e0:7d:9b:9c:8b:40:c6:68:af:62:e9:88:e9:a0:
b8:9c:d6:6b:e1:52:28:50:90:ea:32:b2:96:02:8c:
25:38:01:58:be:af:44:24:a1:9c:d1:9e:43:c4:78:
23:1d:17:d5:fa:7d:eb:60:0f:e2:ef:fc:87:58:f2:
dc:c9:ef:e1:c9:c0:3d:37:e8:79:2e:49:b1:5b:70:
3a:67:c3:74:7e:7f:7d:da:4f:32:1d:95:15:49:2d:
04:a8:fa:8e:2f:72:a5:e6:ee:9d:58:24:95:fc:7f:
a7:7c:60:a0:4b:96:52:c5:8a:d0:59:ec:7d:bd:c5:
54:b0:5e:c0:a6:3c:66:06:6d:3a:c1:9f:47:ee:b1:
52:f0:02:44:a7:31:73:5c:a9:8c:1b:02:27:94:ad:
64:96:08:b4:ec:00:fc:27:38:b2:08:d1:47:fb:91:
68:21:54:1b:03:dd:8b:5f:7d:3a:1d:a1:88:6e:e9:
52:ae:d3:cb:72:24:46:ef:e4:1a:24:e3:70:c6:a2:
f5:14:56:6a:cc:78:6d:0a:8c:e7:94:10:bd:9b:f9:
42:50:38:25:21:79:36:f3:7e:57:20:cb:9b:cc:e8:
1f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6F:0E:59:A9:92:B3:9B:95:D5:59:96:53:04:C3:6A:E4:DE:7F:44
X509v3 Authority Key Identifier:
keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:89:58:77:4c:1b:eb:4a:f7:69:49:83:84:00:a0:74:18:05:
03:b5:b3:fb:73:95:37:12:e7:70:6a:5f:9c:51:9a:dd:50:bb:
a6:26:2e:f0:75:85:ca:12:55:1a:0b:6a:51:c8:30:c4:19:f0:
63:4d:ff:47:92:6b:d6:c6:2a:23:de:2e:5d:b6:93:90:9b:ba:
13:e7:78:c5:bd:39:5f:d5:18:6a:82:e1:69:81:fb:56:20:91:
21:9c:f1:a2:9e:0e:77:ae:14:09:57:4d:8b:4a:bf:04:be:b1:
3e:ee:d1:c0:d6:23:eb:be:36:f4:26:9a:52:05:e9:08:ab:8b:
bc:5d:92:fc:eb:98:32:d6:ab:a0:4c:6d:c7:c3:b3:da:4a:b9:
34:80:5f:ed:53:a1:fb:c8:3d:18:e4:04:6e:c2:2f:ca:df:0a:
8a:92:2f:2e:c2:a2:db:19:2f:8a:a8:58:e7:7b:b1:9c:2a:04:
53:00:bd:75:ef:c2:0c:06:1b:a8:66:97:8e:8e:2d:58:5e:8c:
1b:96:18:8f:a8:81:a4:f9:64:c7:3c:6a:06:01:07:42:d8:5e:
c5:65:e3:f0:76:50:90:9c:56:d7:ce:5e:0a:26:17:1c:7a:2d:
0c:f8:e4:bb:b8:ad:44:4e:de:55:9b:78:69:de:ed:a0:a3:26:
99:ac:15:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:01 2025 by rpki-client