Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
File: CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json)
Hash identifier: u448Xc+VPYIrlH4b5dWSBcHvldFNc4w9Ycv9D6zozpE=
Subject key identifier: F8:91:5E:12:3F:C6:4F:57:75:60:10:7B:1C:00:F4:74:AE:90:45:2C
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 019649A1CC4F4E74FAB54363498F652EA8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
Manifest number: 12BC
Signing time: Fri 18 Apr 2025 16:01:02 +0000
Manifest this update: Fri 18 Apr 2025 16:01:02 +0000
Manifest next update: Sat 19 Apr 2025 16:01:02 +0000
Files and hashes: 1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: B//4ms1xaIkLlH73yWos3+k1uF/GjTZPbZx2hRol+eQ=)
2: o4Fd53Yi8gf1Z2E5SaQrj9OqD_Y.roa (hash: ju/o7BILnihNNjEqI90onU7QdzoVAl2fjP/NUv+3xWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a1:cc:4f:4e:74:fa:b5:43:63:49:8f:65:2e:a8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: Apr 18 16:01:02 2025 GMT
Not After : Apr 19 16:01:02 2025 GMT
Subject: CN=f8915e123fc64f577560107b1c00f474ae90452c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0b:1e:1a:c4:c7:a4:41:2a:85:5b:e1:9e:c9:
c4:db:4d:9c:12:34:ad:dc:43:8e:3c:e2:bd:bd:44:
95:6f:14:cb:d6:21:51:f6:6b:c4:38:89:33:09:96:
03:c5:e6:05:a0:f4:4a:b6:49:a5:f6:f3:2b:fb:27:
de:c9:e9:47:62:81:9e:09:28:44:8f:04:6e:6e:69:
52:9f:82:ba:85:42:90:a2:a7:3a:d1:62:10:7d:4d:
42:56:20:d8:f1:b0:a6:57:b5:31:36:aa:cc:9e:0b:
30:4a:11:24:ff:4e:e0:1f:85:58:28:81:32:53:db:
9d:e1:0c:60:22:5b:8c:54:c9:fa:da:9f:5c:1c:c3:
26:21:56:07:0b:de:61:d0:de:e3:28:65:e0:6c:48:
46:d2:2e:b8:59:fa:c9:e8:a8:7d:28:7b:fe:40:cf:
38:ae:76:3c:de:00:2b:32:37:1f:f8:56:49:34:f1:
25:10:7b:41:c1:82:f6:32:ff:49:1e:f9:3c:3e:92:
3e:5c:48:6d:7a:84:76:80:3d:be:5a:64:c0:c7:be:
20:f3:29:37:3f:51:85:b1:0a:16:d2:6a:b7:35:98:
ad:93:ca:8e:67:f3:a4:03:48:a7:5d:41:56:ae:13:
01:ed:4e:8f:2f:e5:6f:0b:ea:68:d4:9a:3a:2e:e7:
f3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:91:5E:12:3F:C6:4F:57:75:60:10:7B:1C:00:F4:74:AE:90:45:2C
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0a:ea:64:73:39:63:ce:c7:86:7a:62:b5:16:fb:54:8a:f2:
93:b4:6f:03:d5:79:0a:e1:8c:dc:93:ce:a3:be:a2:b7:f8:69:
f8:75:47:3d:40:64:c4:d9:e6:cd:66:7a:6e:e4:55:d1:1b:69:
14:3c:2e:fe:ee:2d:9f:e5:7a:9c:85:45:1d:f1:0c:67:34:9a:
87:59:08:9c:31:0f:d2:4c:6d:93:d1:f9:17:48:85:36:8a:2f:
a1:ad:30:0b:d7:1c:a5:e5:93:f6:19:3b:ff:ff:d3:a1:94:f8:
32:95:73:d4:48:0b:3f:75:3f:30:08:5f:33:c9:7a:cc:63:45:
c9:40:8e:5c:c4:12:a3:22:c1:c1:f0:b9:46:eb:c3:b9:50:22:
53:8c:ae:ed:a4:01:b4:de:f4:56:9f:d0:df:a6:42:1b:fa:f5:
6e:63:70:2b:71:2b:45:ec:99:ad:ec:7f:a2:74:ae:27:38:b6:
46:5c:37:ff:97:06:bb:7e:b8:32:63:eb:d7:79:e4:42:21:ed:
48:6d:fc:ed:ce:25:9a:88:15:3b:fa:9e:36:d8:b7:7f:e0:d7:
ee:52:ed:a1:cc:c8:01:af:ed:fe:bb:40:c9:11:ad:b2:43:80:
db:ff:b3:21:c7:c3:ab:cb:24:84:b0:6f:ab:31:11:77:41:1e:
9c:4d:da:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:02:38 2025 by rpki-client