Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
File: C-1D9AnLNc6153tW0LvJpMwtJpM.mft (raw, json)
Hash identifier: f1uX1+eilWZiMPrS+UGzoIhz6hcwSrEM5Xe6qiZ6XKM=
Subject key identifier: 03:6D:33:5D:50:43:EE:4F:78:32:19:25:7D:C8:1B:06:DC:55:D5:F6
Authority key identifier: 0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
Certificate issuer: /CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Certificate serial: 01960EA03202472E1B5E5127147300A5B31D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
Manifest number: 1466
Signing time: Mon 07 Apr 2025 05:01:41 +0000
Manifest this update: Mon 07 Apr 2025 05:01:41 +0000
Manifest next update: Tue 08 Apr 2025 05:01:41 +0000
Files and hashes: 1: C-1D9AnLNc6153tW0LvJpMwtJpM.crl (hash: TdInxlFunGzDKNNVpPYMOtzSdulsetzglOTqSE2OmSo=)
2: sBhtRIsrLGDcCHm1OuhjaCUr2_0.roa (hash: Ua22PTmfzyT5DTnVC3xgijxYiy9LNm1nh8SzeYUTwDc=)
3: sZiCl9lv80fsle91xuU3_BKnt_s.roa (hash: FzOmDkg8UvmI+LcJN7K+9dJBFFV57UBgPrTOJAC0yec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:a0:32:02:47:2e:1b:5e:51:27:14:73:00:a5:b3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Validity
Not Before: Apr 7 05:01:41 2025 GMT
Not After : Apr 8 05:01:41 2025 GMT
Subject: CN=036d335d5043ee4f783219257dc81b06dc55d5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:34:6b:11:9b:e7:cc:75:5e:0f:b0:e8:ba:b1:
c1:7e:8f:4d:ae:b2:76:17:3c:e0:6f:de:91:f8:62:
24:cc:26:a7:d7:8c:31:3f:04:cd:d1:18:d3:07:88:
22:1f:77:51:57:bd:2f:32:7d:b8:9a:be:c1:45:69:
7c:7f:ec:18:28:a0:2e:97:f5:be:af:ff:2d:00:2a:
72:af:06:6a:e9:c9:f3:e9:20:f6:07:de:46:3a:e5:
c7:30:2f:fb:6b:ca:59:38:4d:39:43:cd:12:28:e3:
8d:0b:af:83:44:44:94:a0:05:f7:7d:48:13:b2:f6:
f1:cb:74:3e:b0:0d:f5:12:9b:0b:07:a6:55:d1:29:
02:40:7f:18:cb:b1:fb:d5:08:37:3a:2e:9e:90:c7:
cd:76:d1:b5:60:57:21:60:17:43:e8:17:df:c0:32:
99:52:e9:d5:43:e0:19:80:48:60:c1:08:49:ea:05:
25:d8:74:e3:a5:16:9a:fe:2b:47:eb:d0:40:ba:4f:
f9:a3:25:0f:e6:a6:10:c6:ab:da:14:fa:5d:f2:e4:
39:4b:bc:06:6f:7d:a7:82:00:e2:79:77:6c:73:b4:
1a:6c:e8:84:52:3f:2d:c4:f6:e8:d4:c7:7f:89:79:
c7:48:7c:bf:11:66:a0:fb:87:d2:0e:53:54:d1:5e:
bb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6D:33:5D:50:43:EE:4F:78:32:19:25:7D:C8:1B:06:DC:55:D5:F6
X509v3 Authority Key Identifier:
keyid:0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b6:b6:76:a9:52:bd:40:3c:05:e7:1f:b5:dd:46:32:1c:2c:
2d:93:70:31:cd:0f:52:0c:11:d0:66:dc:f8:2b:92:b0:b0:14:
c0:e6:4c:be:4d:e6:5c:09:74:f2:19:9f:69:7a:c1:95:47:e3:
f8:d7:92:0b:05:ec:fb:a9:2a:f7:da:a4:1d:2a:cc:fb:9a:fb:
5d:67:2a:a7:e4:aa:58:be:33:c7:d1:ff:83:ae:9b:85:c2:c0:
a1:a6:fd:9e:26:a2:cb:84:bc:3f:63:23:e2:ad:61:bf:fe:30:
9d:e7:37:ea:5d:b6:23:d9:6f:74:3c:29:a0:a8:6e:be:d8:35:
ed:17:ba:7a:28:00:b5:4a:1e:fb:13:02:8e:21:f5:55:b9:b9:
82:87:57:df:20:ba:f6:05:5e:ce:e3:0d:a2:4c:c6:9f:3e:c7:
fd:44:a4:1b:92:b8:84:f2:ea:1e:6f:f4:27:fc:2b:d0:3e:53:
f7:4f:e0:12:64:a3:10:40:7f:27:5a:e9:86:41:e0:fa:8a:bc:
a8:22:98:43:6e:b6:60:93:07:23:52:64:8f:54:94:e2:2d:a7:
bb:5c:d7:2f:61:b9:38:bc:8f:ad:99:82:48:b8:e8:f7:31:e5:
0b:b2:b3:44:9a:a3:89:7f:4e:d3:87:4b:37:f6:ea:25:6c:74:
85:14:dc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:49 2025 by rpki-client