Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File: CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier: BsdU6VnrC26hETVXgbH1Scv7eKYkHSvBxC/sGywMXx4=
Subject key identifier: FC:4A:A2:02:6E:56:4E:09:B6:6E:2A:D2:9D:30:CF:ED:03:97:9E:EB
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer: /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial: 01964C6B382DFBDE97BD7A22CB5836075484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number: 1427
Signing time: Sat 19 Apr 2025 05:00:17 +0000
Manifest this update: Sat 19 Apr 2025 05:00:17 +0000
Manifest next update: Sun 20 Apr 2025 05:00:17 +0000
Files and hashes: 1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: xcALKS+Kvm8Uk9ybeRujLJ94AbsOZ2LNwvzPeUSXDn4=)
2: rWZ0G5VOafQid-7UN-2veJfKGgo.roa (hash: DH2O3e2b1+vrztrC2zTAL363y7HUBnCFCMC6xfBGVbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:38:2d:fb:de:97:bd:7a:22:cb:58:36:07:54:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
Validity
Not Before: Apr 19 05:00:17 2025 GMT
Not After : Apr 20 05:00:17 2025 GMT
Subject: CN=fc4aa2026e564e09b66e2ad29d30cfed03979eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:eb:1e:47:f4:f6:92:fa:0a:27:39:0e:89:ee:
b0:3b:88:5b:14:13:85:42:52:c0:5d:b6:41:91:90:
14:a6:6d:d0:0e:30:8b:e6:ce:ef:a7:98:89:43:c2:
de:b3:84:71:37:db:be:a5:26:ed:5f:95:dc:5f:af:
cb:74:17:d9:30:db:b6:ac:dc:7a:1c:34:38:a3:90:
c1:d2:67:52:aa:61:62:64:69:af:f3:8a:61:0b:37:
f5:38:d0:b5:e3:17:0b:fe:56:dd:2b:82:e7:89:48:
66:14:54:9b:bc:01:b6:b3:50:0e:95:62:c8:22:16:
97:74:4e:2f:58:2a:18:e0:81:8d:1d:bd:bf:59:4a:
c2:11:6f:66:49:ca:88:3f:68:e9:a8:3a:65:07:be:
3f:51:f1:36:43:17:82:14:ee:a3:51:c7:68:48:0c:
a8:b3:10:82:00:75:90:14:8d:f6:0b:70:50:91:4d:
ab:1d:42:60:b9:1a:64:a6:0c:31:df:fc:6a:73:9f:
6e:fc:98:53:d4:be:13:5a:30:ce:7c:21:de:24:21:
7e:5f:89:06:7a:26:01:be:da:1d:11:22:66:e5:d0:
00:08:1f:e6:d0:16:25:f8:86:54:20:14:4b:ca:c5:
42:cb:fb:3d:30:e0:d2:c7:df:14:9c:0b:b6:42:1c:
b7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4A:A2:02:6E:56:4E:09:B6:6E:2A:D2:9D:30:CF:ED:03:97:9E:EB
X509v3 Authority Key Identifier:
keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:53:38:63:9e:e4:3c:82:d8:53:90:6a:7b:4e:2c:65:df:f2:
06:f9:e1:e6:a8:84:9b:01:6a:d3:3e:5a:28:9e:de:47:db:d5:
2b:bd:53:7b:72:64:c8:75:19:44:73:a3:09:a2:f2:6e:7f:d6:
c2:d1:6e:fc:3b:34:45:84:b8:bd:b7:64:89:97:87:60:af:04:
cb:7d:06:04:24:ad:e7:cf:01:0a:2c:e6:93:3b:1f:6f:ed:e2:
a3:bd:d2:23:9c:e7:4d:32:7f:1a:01:f4:91:f7:7a:1c:7d:26:
54:58:90:c9:60:13:ec:e8:50:d1:0b:8a:9e:12:39:31:66:da:
5e:a6:ec:0a:69:fd:3c:f7:8d:5c:67:ae:27:fb:18:df:15:93:
14:ad:e5:ea:ea:c4:6d:53:bd:77:92:a2:74:8a:60:ec:39:93:
d9:87:61:30:08:26:e1:ce:24:81:aa:59:0a:bb:27:2b:0e:30:
23:92:ed:f4:81:0d:45:ce:5f:a1:f6:2a:dd:39:fa:20:2c:58:
b2:2c:e4:b2:84:c7:98:1a:6c:08:a8:3a:12:30:db:a8:81:1f:
45:5c:be:15:9b:e2:ea:63:ea:68:45:b1:46:23:e5:b4:6d:88:
66:75:ac:1d:ce:81:56:80:80:1f:b4:ec:10:84:ce:29:78:2b:
bc:e3:65:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:26 2025 by rpki-client