Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
File: 1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json)
Hash identifier: VpwAQU9z+c9dO13/H5doCjNKlDM1Q/i80ZgT9uN7rdE=
Subject key identifier: 1E:EF:02:75:88:19:9C:91:AB:DD:94:2C:C0:88:95:E2:D2:EE:C4:3C
Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
Certificate issuer: /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Certificate serial: 01964556A5C77B3DBBC967DBB30D6D50E8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
Manifest number: 0CF0
Signing time: Thu 17 Apr 2025 20:00:28 +0000
Manifest this update: Thu 17 Apr 2025 20:00:28 +0000
Manifest next update: Fri 18 Apr 2025 20:00:28 +0000
Files and hashes: 1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: 5ANfehx4mvLwcCSbtXdK/HDAbfnbek5eBUFwdFMmvnc=)
2: vIfeAKl09iQuJw6UGqaMNu-i1xM.roa (hash: rnTrCrEZ28gshco/rvGtOCS7V1pX6Xki2r8crF4TWeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:a5:c7:7b:3d:bb:c9:67:db:b3:0d:6d:50:e8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Validity
Not Before: Apr 17 20:00:28 2025 GMT
Not After : Apr 18 20:00:28 2025 GMT
Subject: CN=1eef027588199c91abdd942cc08895e2d2eec43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:af:c0:ab:ef:af:95:0c:9b:47:57:cf:9a:
a4:aa:d3:66:fe:f6:ac:2d:2d:8a:35:1a:8c:8c:0f:
d5:4a:f3:d7:38:57:c8:ed:f5:22:b0:e1:b7:0c:f9:
13:51:4d:ad:c3:3c:0a:78:20:0a:d7:e1:6c:fe:a1:
04:8d:d8:ae:02:29:94:66:57:ba:cc:f2:00:b8:34:
3a:53:56:91:53:3a:41:4c:80:7a:d2:b6:e6:9d:04:
a9:73:31:cd:97:80:7a:1a:a1:fa:3d:de:0b:5d:ac:
97:6a:4d:a1:e4:e8:d0:57:09:fb:0d:81:b1:4b:cd:
33:c4:b5:4a:63:5e:69:b6:48:07:f6:19:9c:83:ff:
9b:ea:0f:78:27:4c:77:98:34:bb:14:d7:ef:9b:77:
67:08:79:44:a0:44:ea:6d:82:6e:7d:45:d8:c9:5c:
be:55:8c:33:a0:94:bb:24:a3:35:8b:79:ee:53:65:
00:61:f5:aa:8e:ce:a6:37:eb:e9:da:26:7a:33:3f:
3b:41:ef:b8:62:a5:5b:53:1b:56:48:9e:a0:05:b5:
a9:8d:7c:14:13:2e:d6:60:30:2b:6a:62:af:94:f3:
bc:4a:ed:6b:b4:21:0b:7c:2d:33:dc:57:05:3e:2b:
f6:3c:82:ec:6d:59:8f:1a:b3:f2:51:12:27:45:a6:
8a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EF:02:75:88:19:9C:91:AB:DD:94:2C:C0:88:95:E2:D2:EE:C4:3C
X509v3 Authority Key Identifier:
keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:61:8c:80:66:75:8c:b2:be:58:5d:36:39:ae:8d:bc:05:19:
0a:e1:75:7a:ad:eb:7c:ea:dc:ae:e2:70:1a:ae:cf:bf:3e:70:
60:6f:6d:d7:5d:4a:61:85:fa:cb:4e:10:37:a5:e5:1a:91:23:
55:75:4e:ae:44:39:58:33:fa:66:a3:7f:1f:c6:71:b8:62:81:
bd:b7:8d:e3:e7:52:8c:bc:0c:00:18:7c:26:d7:1f:e4:22:d0:
ea:36:f1:a7:47:a8:24:59:9e:e4:6b:4a:1c:64:7a:16:02:28:
98:a9:e1:15:c2:fe:9f:8f:ba:43:06:5b:fc:83:21:7a:f4:14:
ee:b3:fa:9d:c0:3f:2a:d0:17:9f:51:e2:b7:62:a1:df:e7:82:
d8:38:53:70:0d:a9:42:c3:b7:1c:8a:51:55:77:cb:41:27:82:
92:94:da:7a:f1:31:39:cc:c0:b7:7d:2b:b7:f8:5f:5b:af:12:
d0:a0:4f:1b:36:7d:b7:d2:97:b7:cd:f8:b5:9c:c8:06:0d:03:
a7:51:b7:1e:21:4a:36:4b:d7:6d:3c:d9:20:9e:a4:21:54:46:
6c:6e:82:0a:64:fa:e5:ca:35:68:90:9b:ac:bb:d1:29:03:5b:
a2:02:26:36:6b:8f:df:bd:11:09:49:36:90:bd:49:ff:63:d4:
60:4d:a9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:47:18 2025 by rpki-client