Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
File: 01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json)
Hash identifier: eBLS4JNuUZDYyE2b4vkfbIEIyNnjb5Nd3CA37QAi7jY=
Subject key identifier: 70:53:CF:F6:02:52:43:13:B4:F5:69:3A:E9:C4:5E:40:3B:D7:1A:F9
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Certificate issuer: /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial: 01964E2308823D811AD17DBA541E1FB3A604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
Manifest number: 0404
Signing time: Sat 19 Apr 2025 13:00:40 +0000
Manifest this update: Sat 19 Apr 2025 13:00:40 +0000
Manifest next update: Sun 20 Apr 2025 13:00:40 +0000
Files and hashes: 1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: zpeqQQKbjVJN1IJPxLlpeot0d+c2RubD3Nkre5j6xrA=)
2: WJYo92ZVpAUd1BuZPEnAl356iuU.roa (hash: zcoBYroeH3hhjkU4dDCY2xfjvG2eq71PoTaXan33w2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:08:82:3d:81:1a:d1:7d:ba:54:1e:1f:b3:a6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Validity
Not Before: Apr 19 13:00:40 2025 GMT
Not After : Apr 20 13:00:40 2025 GMT
Subject: CN=7053cff602524313b4f5693ae9c45e403bd71af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:77:0b:6a:77:b0:3f:cf:f8:54:b1:15:ff:b1:
9a:09:26:25:df:2d:97:8d:09:fb:dd:fc:ba:ba:89:
74:85:d5:82:96:7f:9a:2b:9a:e1:43:d5:a3:36:01:
d8:d0:9c:9f:e5:b0:c4:ee:f0:7b:97:d2:f3:8d:54:
c1:8c:3f:7a:2d:ff:bf:45:ad:51:7b:e6:03:70:25:
b7:65:09:a1:5c:32:34:e4:38:c2:8d:35:ec:31:3d:
0e:66:a7:31:ca:7f:f8:ba:af:81:17:f7:25:16:81:
09:dc:37:fa:2d:7f:17:eb:df:d2:78:5c:0d:98:97:
52:af:84:16:27:18:32:14:d8:05:57:60:5a:e0:3d:
0a:a3:fb:0d:77:bc:76:3a:36:15:36:22:d9:c6:9e:
f7:96:c9:21:65:e2:9d:78:e5:6e:09:3a:5c:73:06:
24:75:ab:2a:a5:e7:28:76:44:2c:35:e6:5c:08:43:
90:94:e2:84:00:95:7e:fc:11:2b:8b:00:57:53:19:
a9:72:31:72:80:78:32:67:ca:13:ec:e0:29:dc:46:
30:a8:47:2a:cf:49:c2:f4:2d:bb:e7:c7:4a:12:f9:
46:d8:af:da:d2:ef:fc:1c:34:26:4b:10:30:ad:1a:
85:d4:16:6f:61:23:c4:53:7a:37:41:ee:a7:36:34:
06:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:53:CF:F6:02:52:43:13:B4:F5:69:3A:E9:C4:5E:40:3B:D7:1A:F9
X509v3 Authority Key Identifier:
keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:da:32:47:02:5e:a7:20:ea:02:eb:89:a4:58:76:2c:5f:0f:
5a:a4:12:12:f4:2c:0a:42:0c:94:3d:64:c1:2d:3b:67:c8:12:
26:9a:60:50:1e:6a:d4:dc:66:6d:af:72:a3:f7:32:e8:b6:28:
bd:0e:f8:0c:d9:2e:f3:9d:ca:9a:59:6c:ca:2f:75:7a:75:f6:
b2:90:6e:34:de:7e:e3:3f:9c:05:67:4e:a7:af:1a:1d:41:96:
4a:e3:cc:8f:e4:0d:49:43:cd:dd:6b:34:86:b2:54:ac:85:b7:
b0:63:37:7f:14:ca:79:cf:59:81:61:06:d9:9c:bb:0f:7c:e8:
7c:ec:c1:8d:e4:4b:5e:ba:b8:a2:c3:e3:c8:5e:46:08:cc:93:
7e:fc:7c:c9:85:8e:47:b6:92:15:33:23:70:29:af:05:10:35:
57:cb:3d:e5:c7:64:ca:4f:c8:dd:7b:7b:ad:61:cf:9c:13:a5:
38:01:03:98:e6:ef:e3:f1:da:40:b1:b6:2b:75:a5:24:f2:f1:
f0:ae:9f:6c:89:d3:f1:0e:0f:22:0e:cd:05:1c:14:00:72:01:
cc:d3:b4:72:c6:fb:c7:f3:5f:d5:93:b6:bc:7b:6c:11:bb:5b:
3e:5b:2f:d6:ef:34:ee:f6:12:c1:93:b6:52:cb:c8:e0:90:04:
46:36:49:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:21:39 2025 by rpki-client