Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: zsQMOwIkDcPiUilV9EK2FORXMDZqYYD9m62p4je75Mc=
Subject key identifier: FB:A0:F7:99:42:65:8C:B9:1C:24:F6:A7:AF:98:13:5C:B3:C2:A8:93
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 019650483453411E7402E768313F770D6840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 14BA
Signing time: Sat 19 Apr 2025 23:00:31 +0000
Manifest this update: Sat 19 Apr 2025 23:00:31 +0000
Manifest next update: Sun 20 Apr 2025 23:00:31 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: 3MODJ/ykg7eJf/gA4yd57lRKHRs42z6JDiYM0x0EHqY=)
2: 1-kqFnbhB2LCPJU3KtgP3OhHNEbM.roa (hash: sYai5O0I+e4s9fEjeNx81CRmECPgFmQDJeWhDrbRAeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:34:53:41:1e:74:02:e7:68:31:3f:77:0d:68:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Apr 19 23:00:31 2025 GMT
Not After : Apr 20 23:00:31 2025 GMT
Subject: CN=fba0f79942658cb91c24f6a7af98135cb3c2a893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ed:1b:4d:b2:80:f0:e9:0e:94:21:9c:69:72:
ab:0b:ee:a5:b2:e7:95:33:5b:0b:54:95:f7:a2:4e:
1d:f8:c1:bd:3f:00:20:69:53:27:34:4f:b4:0d:62:
27:ca:a3:9f:11:87:a8:1b:da:e9:f7:aa:f1:75:1f:
fc:f8:97:a4:13:7a:54:85:da:9d:10:f5:82:dd:2e:
61:e5:da:11:71:72:bb:33:05:22:94:08:dd:1d:db:
a8:c9:25:90:ed:9f:b7:f5:17:2a:f0:0b:82:9d:58:
b3:9a:3e:f9:9f:9e:b5:da:5d:29:b8:19:ba:57:e3:
52:2c:cd:f2:8c:4f:17:de:15:fe:38:7b:ec:1d:27:
64:c6:c0:cb:3b:fd:eb:66:4e:ec:80:27:2f:1e:6d:
be:60:f8:ce:d2:e8:de:9b:d1:a9:ab:20:00:94:a7:
4f:0c:e7:a0:19:13:3e:13:e6:e3:f7:69:e3:4e:bd:
be:bd:cd:6c:b8:e7:71:69:a7:9a:0b:0c:58:76:0e:
f2:30:53:50:c2:ad:95:8f:72:83:05:19:f4:52:90:
2b:1d:3b:16:91:ef:59:5b:be:da:89:79:ea:86:23:
e8:4c:37:49:79:0f:c2:9f:88:7c:b2:56:7c:5d:98:
8a:7f:50:56:4f:fd:a3:04:ee:39:34:20:2f:8d:23:
35:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A0:F7:99:42:65:8C:B9:1C:24:F6:A7:AF:98:13:5C:B3:C2:A8:93
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d2:50:14:31:af:63:94:98:2a:4b:93:22:08:33:fc:8d:4a:
57:4f:0d:8e:20:af:ba:a2:e9:e3:50:55:3f:4e:63:7c:27:a3:
23:f9:19:2c:d3:37:03:41:76:78:da:d4:8e:a9:70:c9:f1:07:
8a:13:ae:4f:2d:82:e8:61:80:9f:ed:3b:77:fd:bb:bb:77:bc:
b5:34:6a:5c:fe:4a:18:55:c8:4b:67:3b:d8:03:2b:61:5e:93:
53:48:f5:9a:ea:a0:f1:e1:15:6d:71:86:db:02:d5:5b:fc:5f:
56:0f:75:ed:07:3c:10:d2:bb:88:50:ea:02:ce:a8:21:e5:5d:
06:e8:30:9c:cd:8b:80:0f:ba:1e:15:13:e1:c5:ec:56:a1:c7:
22:54:63:38:35:ab:f7:d7:64:c6:7d:ba:4e:8a:a8:8b:61:de:
73:6d:9c:f5:47:34:f2:fe:95:0e:59:cc:75:f9:cf:bd:cf:ae:
d2:c6:78:bf:ad:c5:e8:9a:6d:1f:50:73:7c:74:17:f6:ad:7d:
6b:52:d7:75:f1:0b:73:75:ff:9f:af:ae:b3:b6:4a:78:20:1f:
a1:0c:61:74:81:ca:b8:4e:ab:5f:56:fb:fb:35:ab:1c:da:f1:
3c:82:b6:86:40:6e:be:7f:4a:10:7b:d0:3d:6e:f1:d1:02:48:
a3:e9:5c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:28:24 2025 by rpki-client