Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
File: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json)
Hash identifier: y6uaQRlt1GtpZAVp/X5LUSVwPVom3ufk1YIklFFD5jI=
Subject key identifier: 10:9C:3C:80:05:49:0E:FC:F9:DB:CC:7B:C1:36:71:09:5A:A4:24:7D
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial: 01958F2AC9502F7D66495754E7E56E3670BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
Manifest number: 149B
Signing time: Thu 13 Mar 2025 11:01:40 +0000
Manifest this update: Thu 13 Mar 2025 11:01:40 +0000
Manifest next update: Fri 14 Mar 2025 11:01:40 +0000
Files and hashes: 1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: +7SPsmGErNYVvB1lMPTkbPMraIZJXkGrvAXLSYLPipo=)
2: 39JKIfKrg-FtnGzVEc-4CP0zYyw.roa (hash: Im00znI9YGKHOr4RaKPPD+/nog1aDzKpzBikMvxHIzM=)
3: FFxk-BcPBkUgJFwE14_BuXHfh6w.roa (hash: 9SK+9whhVgM4K8SPp7ixcuhtvspcdI8sVfJA0hKgVC4=)
4: nJAiq-PWagml6U0XgPLvEMeetqY.roa (hash: slEmYICQOiKGbuOd4bkjw5nPBfad31ZvqqX336YhZsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 11:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:c9:50:2f:7d:66:49:57:54:e7:e5:6e:36:70:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Validity
Not Before: Mar 13 11:01:40 2025 GMT
Not After : Mar 14 11:01:40 2025 GMT
Subject: CN=109c3c8005490efcf9dbcc7bc13671095aa4247d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:97:e5:4d:35:91:12:d6:67:04:99:a9:a1:
f1:2d:ed:72:f8:14:26:e8:03:8c:1f:af:ae:90:c0:
8b:41:84:d5:03:a3:f7:f4:60:77:b3:4f:1d:35:9c:
67:da:5b:51:a0:7f:1d:35:46:14:82:08:93:58:ca:
02:a0:7c:09:96:2c:b0:3b:ea:cc:39:ec:db:97:a1:
52:c9:58:0e:dd:d4:34:a5:8a:e3:72:cb:ed:60:62:
ec:a4:00:ef:92:e6:a6:aa:19:89:a2:e9:59:f4:7f:
8f:ff:3b:9c:cb:38:de:49:25:96:65:01:8b:60:46:
42:54:94:65:73:60:03:1a:b4:67:1c:9a:d2:9c:46:
9e:f1:b7:35:e8:de:63:f4:42:36:9a:47:41:7b:77:
80:33:5b:64:4c:89:6c:51:61:65:02:84:d4:3b:6a:
b8:ec:4e:86:e2:33:8d:38:6d:1e:5f:73:b6:34:e2:
aa:5c:59:59:95:02:01:9b:63:43:f5:36:b0:c6:6c:
32:b1:1d:e7:90:52:f2:01:ab:df:8d:e5:96:2f:dd:
55:2d:bc:be:01:6c:89:21:8f:2d:e0:5c:2b:de:30:
ca:cc:18:5d:f7:c8:15:80:ff:70:ac:13:8b:29:a5:
2e:58:97:2d:ed:a3:ee:b2:87:85:d0:15:6b:38:3f:
d0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9C:3C:80:05:49:0E:FC:F9:DB:CC:7B:C1:36:71:09:5A:A4:24:7D
X509v3 Authority Key Identifier:
keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ae:b5:1a:ff:aa:2b:a3:d6:13:66:a1:bc:9a:39:81:9f:9d:
09:59:55:70:b9:38:f2:09:c0:98:7f:cf:a3:9d:22:3f:d4:89:
5b:a5:43:b7:e7:1e:67:09:30:c6:3d:49:07:06:eb:75:b3:d4:
bc:98:1c:a0:b9:32:42:c3:c5:41:d1:55:99:15:75:96:8b:07:
d0:d7:ee:33:ba:a2:5b:9f:2b:b8:bd:12:cc:a2:d7:fa:07:84:
19:95:77:86:9d:f9:66:8a:8f:e1:c8:46:02:20:ab:e1:86:4e:
15:05:0e:20:50:eb:59:05:69:68:75:cc:30:d8:97:e4:72:ce:
fc:17:23:e2:f5:0b:23:5a:c1:58:be:25:d4:17:f8:ff:68:a4:
c0:74:9d:a8:20:81:cb:24:24:1b:82:e3:a8:46:12:fd:0f:78:
b5:84:6e:aa:c4:35:f1:d6:49:50:90:e2:73:a1:34:74:9a:42:
27:17:9f:bc:38:21:3c:d9:c3:5c:a3:46:ce:95:c0:3a:b6:34:
7b:86:e7:53:e0:2d:42:9a:89:b6:dd:dd:49:b7:0d:01:2d:0c:
24:a8:fc:c8:ae:98:91:bb:20:a1:7d:20:11:78:c5:ff:02:f7:
35:4f:8f:f0:50:d5:65:c4:39:f3:86:ef:be:00:9a:29:62:10:
78:ce:d4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:15:08 2025 by rpki-client