Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: XmdIvsiqnzJ8reWiqEBrY9XGa5JWu62R8qJEKWWIsbU=
Subject key identifier: B0:C3:3A:39:5B:63:21:89:92:1C:F6:49:7F:FA:7E:79:49:3C:EB:C4
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 019629047FDD4E511613ACC61B8DABECBD52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 14EE
Signing time: Sat 12 Apr 2025 08:01:22 +0000
Manifest this update: Sat 12 Apr 2025 08:01:22 +0000
Manifest next update: Sun 13 Apr 2025 08:01:22 +0000
Files and hashes: 1: 1RGgWDKxb5y298L2tt-0tOvqbNw.roa (hash: 2bZZWO6omsg2Mwm30E/Z1rRX+nPqPKuGxYg/2ZzCe0k=)
2: 3sxlJEA8BaERqC36Ubw3FlVF9Ek.roa (hash: YdpNn1ufX9tbeWscBU0U/F4gP263cfdud5JqGKKNPWQ=)
3: 68QeHj6JI2_T8Kr8hKctEhMPtbw.roa (hash: XnmM0ObtZKLV7g04CkYP3n/e5tgHKBrd4Q5O9o5IvnE=)
4: KoGcuhEWGpdaiyvAQhahi6JGn3c.roa (hash: 1hE6GXWKyFKYOi6wNNjRCkxxkmT7Rr3/DXP+/VqRcqY=)
5: ZLxVHxzZvKjjn2s6lQPPZdNzPyw.roa (hash: 9UddYVQskYka8RNl5TAXIUT0fsGnIVLCOhL+P2BIpeA=)
6: cLFXpbvXQ7ewA43ckj0WniT4JUE.roa (hash: MA0V95ed/gECxNSaptpMKxS+abLgaLPgcexWWf8XVhY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: /yzZtDcwgVwmH2lOIhwoQcnGbhbREc19vAVNfOQ7RfE=)
8: ejg2o5Q2dvoWaESAzfB0HEPf7xI.roa (hash: s8Vh1yl+9P0cPDEhtTkn7ElHKgWmn1YwQsHChgTqjlY=)
9: jroeQBPEeliXgg9ubE0_unQjg_E.roa (hash: eYB/F5uzrRsKIyMnsI+GGxiEuN9Ybdn4MwC7lWvrb9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:04:7f:dd:4e:51:16:13:ac:c6:1b:8d:ab:ec:bd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Apr 12 08:01:22 2025 GMT
Not After : Apr 13 08:01:22 2025 GMT
Subject: CN=b0c33a395b632189921cf6497ffa7e79493cebc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:b5:ba:81:df:08:d5:30:05:18:79:38:16:
c3:f7:b6:e3:ec:69:ea:64:ec:9c:af:4f:e2:06:63:
af:3f:93:93:f7:8f:a9:72:32:62:f9:ba:cd:85:56:
0f:b3:44:94:b2:71:0f:2e:55:dc:1a:fb:7a:74:ed:
f2:21:1b:e3:5c:de:e9:9f:7d:56:ef:bc:5a:8c:a5:
81:9e:3a:ea:b5:5d:eb:46:4c:e5:f8:36:51:d5:43:
43:ec:63:1a:06:ed:52:c6:b4:0e:9f:8b:4d:fd:b1:
40:df:24:17:b7:a1:31:0d:a5:61:07:f9:c3:d0:aa:
c6:ac:ee:ab:e9:c0:b9:ca:a0:55:33:4f:94:b5:b6:
48:7c:d9:11:66:60:53:fd:df:0b:a8:e4:38:23:30:
9a:22:46:1a:6c:f8:4a:a9:80:02:5c:be:bc:47:66:
fe:64:10:35:b0:f9:95:c4:74:27:6b:f0:9b:1f:73:
49:e9:28:07:a6:c4:31:60:14:3f:be:a5:f6:96:76:
60:6b:ec:89:b6:5a:e7:89:71:4d:cc:a2:d9:23:2a:
cb:22:6b:e2:d1:f7:0e:47:0d:07:a2:52:cd:91:0b:
e0:07:42:e5:43:bb:6f:9c:5a:13:53:e2:54:d1:a0:
4c:15:a0:5a:f1:51:2c:47:33:9e:12:f9:27:9d:2d:
22:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C3:3A:39:5B:63:21:89:92:1C:F6:49:7F:FA:7E:79:49:3C:EB:C4
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:84:aa:f1:23:40:4d:4a:7e:2c:93:f9:3c:73:ec:22:c4:74:
ef:20:a7:ae:19:50:76:6e:e1:0a:dc:ed:e7:2d:b2:44:d4:8f:
c3:94:57:29:82:2e:91:35:8c:0f:81:97:53:b2:12:fb:d9:33:
f8:8c:60:47:83:66:c6:ed:cb:05:d7:af:ef:32:f1:d0:3d:22:
3f:f2:29:78:fb:4b:4b:3e:c9:3d:33:94:c2:4f:45:ac:5f:0c:
7b:6d:68:79:a9:46:17:21:4d:38:02:be:7e:44:b2:38:5f:1d:
e0:0d:9e:c5:86:4a:74:17:0c:49:aa:53:6c:90:3e:7e:97:39:
16:c3:56:5f:2a:fc:24:8d:1e:d8:51:e6:25:ad:82:52:9d:87:
8d:f7:fa:32:ae:09:86:83:ed:be:29:94:4b:98:8a:08:ff:1a:
dc:93:e6:b5:08:14:51:f7:78:24:a4:2e:25:cb:c3:d3:6a:3e:
53:53:c1:9a:90:20:91:24:38:6d:3e:fc:10:dd:c1:88:10:b3:
da:d3:82:52:b5:74:93:d4:ab:86:a4:86:56:f2:89:2a:5b:4d:
63:0b:b0:ca:47:7f:e8:cb:dd:df:dc:e9:b5:54:1c:81:a4:b4:
a9:b8:09:06:8d:25:6a:44:46:36:8a:96:db:f3:35:be:26:4f:
54:01:32:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:36:28 2025 by rpki-client