Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
File: 1-TVqludOotcrZUXIfHnSEtcqe94.mft (raw, json)
Hash identifier: LH+BkrvRjDPY/sKdxRz1Z2Kx5+lpoZ93+wtuErsT+3I=
Subject key identifier: 72:35:43:12:E3:F1:62:9A:51:99:B8:AE:BE:77:92:67:F3:73:43:83
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial: 01963F1D5D5D0F9321871AD29DA88527FACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
Manifest number: 13C5
Signing time: Wed 16 Apr 2025 15:00:10 +0000
Manifest this update: Wed 16 Apr 2025 15:00:10 +0000
Manifest next update: Thu 17 Apr 2025 15:00:10 +0000
Files and hashes: 1: 1-TVqludOotcrZUXIfHnSEtcqe94.crl (hash: fgPiUGN3lszX4eH7UN22b41ALqaMLJUhzS3cmwUqKOI=)
2: 40BuKq_ENsetJ0coeTja2uim-XM.roa (hash: jFKs1Nj/rGuvWwuXC1CAsi/+KiI87gmidC/b6O4pmJ4=)
3: Ozsn4JoKAsG2v5UbV7B2BGsrTbM.roa (hash: 3pxKTq3sMKN1NqkN5QM+NnGuUJMn7eGHWu6Nl0xki4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:1d:5d:5d:0f:93:21:87:1a:d2:9d:a8:85:27:fa:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Validity
Not Before: Apr 16 15:00:10 2025 GMT
Not After : Apr 17 15:00:10 2025 GMT
Subject: CN=72354312e3f1629a5199b8aebe779267f3734383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:95:6f:8b:d3:ee:e7:f5:ae:72:b7:aa:08:
ac:8b:e8:b7:3a:26:06:d8:06:82:ee:83:e1:1c:84:
b2:7d:08:55:21:83:1a:26:58:2d:c0:d9:4f:62:f9:
d0:30:20:fd:63:ea:ab:43:36:8d:30:e1:20:19:80:
27:23:22:13:49:f5:19:90:73:d5:79:33:d3:46:4f:
81:08:af:4c:0b:55:16:8e:ff:0b:80:b4:f8:0d:b3:
b5:a5:34:44:8e:31:9b:8d:ce:42:01:69:42:29:46:
65:4d:a8:5c:62:0f:89:60:10:94:45:af:78:8f:79:
e8:0d:ce:1f:6e:c0:30:92:19:79:30:a0:a8:81:a4:
f6:87:56:1e:92:f4:5f:e1:c0:5f:e0:0b:a8:a8:4a:
3c:71:8c:b5:8a:c6:4a:9a:ad:99:72:ca:fc:c1:c9:
f8:da:5f:f1:82:ec:9e:4d:74:18:d6:4e:b4:fa:78:
06:72:47:a7:48:0d:4b:56:da:14:c6:31:8e:25:64:
82:8a:8a:d8:ed:dc:42:13:ac:d1:85:9b:bc:72:5d:
53:6b:14:74:a9:1a:c3:eb:a8:56:86:e9:e7:86:30:
cc:dd:89:87:f1:a5:fd:11:a4:e4:bc:61:54:35:32:
86:49:e2:70:ed:eb:54:1f:44:17:29:9d:96:e9:90:
d4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:35:43:12:E3:F1:62:9A:51:99:B8:AE:BE:77:92:67:F3:73:43:83
X509v3 Authority Key Identifier:
keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:31:63:bd:38:af:3e:3d:b7:ce:ab:19:c2:5a:94:ab:c5:24:
31:fc:90:b4:b6:a7:89:8e:5e:f9:7a:93:94:39:27:87:c4:c0:
24:9f:49:13:7e:c3:08:fd:88:4b:7f:50:34:97:98:ea:e1:8d:
a8:20:95:31:1d:94:cf:f0:85:a2:93:fd:44:d7:d4:ef:42:ba:
17:64:a2:42:24:31:0d:eb:9c:e2:9a:48:fe:8d:85:4d:ad:a3:
51:d5:a1:4a:3d:03:6c:4f:18:98:ec:66:61:7b:21:0c:7a:bb:
42:a5:9e:bf:95:27:5a:ba:e4:5c:29:48:f5:04:ca:8b:d1:c7:
fa:1d:0d:6f:88:72:9e:50:25:94:3e:c9:1a:84:a1:79:af:1e:
6b:f5:c3:3f:39:1e:c0:cd:55:29:85:98:94:ee:12:2b:a2:49:
49:a3:59:8b:aa:05:99:f0:e2:d7:4f:43:8e:e7:58:24:86:e8:
3b:e3:30:79:4c:6f:af:5e:e9:43:47:1c:52:7d:61:0f:88:da:
80:c4:97:73:10:59:a1:af:a4:01:54:6f:4f:44:ab:47:90:e3:
09:10:f2:93:c6:f3:00:3a:54:3c:0a:bc:0c:2f:8b:4f:3a:bc:
90:25:e0:bf:eb:42:96:0f:8a:29:1f:84:14:dd:1e:a7:2c:f8:
f6:69:d2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:08:02 2025 by rpki-client