Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
File: 6Fgzjepq5N27JIUKBwf0OqF5TD8.mft (raw, json)
Hash identifier: JaqKuM+BbKkj0H9j/+hTtiYRiqNAcC69It4LcZ5NmVM=
Subject key identifier: C1:BB:45:F9:52:7D:23:FC:29:95:17:8C:A1:BC:85:B4:4C:28:F0:0D
Authority key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
Certificate issuer: /CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Certificate serial: 01965B03D51D6784DCE4F1AAAF781668D655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
Manifest number: 14CE
Signing time: Tue 22 Apr 2025 01:01:39 +0000
Manifest this update: Tue 22 Apr 2025 01:01:39 +0000
Manifest next update: Wed 23 Apr 2025 01:01:39 +0000
Files and hashes: 1: 6Fgzjepq5N27JIUKBwf0OqF5TD8.crl (hash: 1qfZgupqRPuHiu4YfTBvxxQ88qrvv6iVHRu3JEfS9ug=)
2: KqaueV9hoJCow2ggLZVEN6Aq14w.roa (hash: m49ywOVO+P5/nCXp3LP+DFkgcnb10IgZ5YOzfhx6zR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:d5:1d:67:84:dc:e4:f1:aa:af:78:16:68:d6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Validity
Not Before: Apr 22 01:01:39 2025 GMT
Not After : Apr 23 01:01:39 2025 GMT
Subject: CN=c1bb45f9527d23fc2995178ca1bc85b44c28f00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:99:5a:71:03:b1:e6:19:3b:ae:6b:e7:ee:
99:9f:ef:86:98:94:3d:52:3c:87:cc:20:2e:3c:91:
4c:42:46:e9:dc:04:7a:a2:42:d2:84:2a:b4:f2:e3:
f1:ca:f2:84:4e:1d:49:2b:66:bf:18:03:7b:5a:ff:
f0:c8:f5:3a:58:86:6b:1c:9c:a7:0d:23:95:a1:77:
a5:c1:91:40:23:e8:c6:3d:02:25:0b:53:71:e7:ff:
6a:c4:57:f6:0b:6a:fc:b1:bb:6f:80:fb:23:96:ad:
25:77:f1:b9:14:91:0e:46:8a:02:d7:aa:86:a7:8c:
dd:2c:a2:16:f8:8e:fd:1a:0d:71:97:f3:5a:04:ea:
d9:9e:a0:ee:23:2f:ac:cc:ec:08:f8:39:67:fb:75:
28:91:49:57:53:07:f1:9c:9b:a3:43:e7:d6:7f:23:
69:bf:f9:c9:28:42:43:3e:75:55:68:de:ee:6a:e3:
3f:7e:a8:e2:92:71:20:f4:ed:ef:87:ec:8c:41:7d:
04:f7:32:73:49:fb:8f:b6:fe:aa:09:bc:60:1c:db:
06:c5:b8:2c:fb:bb:6a:76:25:dd:95:1d:c8:32:14:
74:a3:2a:6d:ef:df:80:be:6c:9f:3f:ef:c2:ed:5a:
d5:10:b9:76:ef:27:1d:98:6c:cd:84:60:fd:d5:ec:
76:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BB:45:F9:52:7D:23:FC:29:95:17:8C:A1:BC:85:B4:4C:28:F0:0D
X509v3 Authority Key Identifier:
keyid:E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:58:6b:75:e1:80:da:02:80:ee:02:34:78:a1:61:2e:e1:13:
24:1e:f4:48:a2:76:47:8e:71:43:2f:0b:09:ae:00:13:3f:a6:
1f:97:9e:3c:e5:92:cd:f7:d6:0d:89:3e:86:b5:a9:dc:e3:1a:
d8:02:4b:a5:21:9f:d7:74:09:03:03:cb:95:50:d7:fe:3a:30:
10:08:16:13:6c:c4:4a:fd:f0:7b:7a:2d:69:63:3b:6f:1a:db:
a9:39:cc:02:0c:06:24:78:fe:68:da:d8:74:8f:09:d1:81:c8:
6c:24:eb:6e:9a:fe:74:5a:9c:f1:0a:aa:6f:af:8e:d3:28:f6:
9b:05:25:5e:0d:ad:61:40:d0:e3:ba:ca:b6:6b:d7:9a:41:d7:
fe:ad:b7:c2:f5:22:2a:8b:33:dc:d6:a7:fe:a7:6c:7e:c6:37:
fc:e2:be:d0:e9:aa:63:d3:d8:17:70:a0:8e:b0:af:85:85:f2:
c8:10:8f:a7:a8:67:75:10:a3:1c:61:dc:c7:a2:64:10:e4:74:
e2:63:44:ce:ec:00:7c:3d:6e:fc:8f:b8:9d:71:a3:db:99:f9:
77:dd:1b:f7:7b:f3:5d:2a:c4:e7:16:aa:8d:11:af:00:c8:08:
a6:e7:19:80:9b:c3:ac:e2:f5:4f:24:b0:c8:c8:f4:e9:29:de:
2d:82:ba:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:26:24 2025 by rpki-client