Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: JVBYErLYQT5V24teR/L96jJIXCCLiQBlqXcDsoXUgkg=
Subject key identifier: 34:3B:DE:31:01:13:A2:C5:9E:FE:95:F8:B5:54:6A:26:DB:85:AC:D1
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019674C2972FD47A5530D052478044CAAC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 0C54
Signing time: Sun 27 Apr 2025 01:00:31 +0000
Manifest this update: Sun 27 Apr 2025 01:00:31 +0000
Manifest next update: Mon 28 Apr 2025 01:00:31 +0000
Files and hashes: 1: Mep_oW6oSHpfM-EqADqLPxvIqFs.roa (hash: 6a8TBTQQpOa0vAb9MxuUWCM81ytCduZcl8Sm4ouPZoY=)
2: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: uU4Mo4dPWSw1AVhjeKoVKP16XqB+D6KUR9SHKXPXfoA=)
3: ecFUW2z0XsJzdPaPmfmi1NbravY.roa (hash: B/1KiGYT9I28lQbSFekF4v776yFSZOm/z2BZeazx7uo=)
4: pqlbIbNJ9fb6HI0B5-w4UgSYcbY.roa (hash: mcYLCtbaBwaS/xS6dmXpUntAVPZrHZ1andB/RjcjVcA=)
5: wH7YjQGC2kPbicIfKx1K6Iv4sBs.roa (hash: YR8jN4lQpTriIrl6/luq+DdE8e4Qj31ZZIIQj98pQoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:97:2f:d4:7a:55:30:d0:52:47:80:44:ca:ac:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Apr 27 01:00:31 2025 GMT
Not After : Apr 28 01:00:31 2025 GMT
Subject: CN=343bde310113a2c59efe95f8b5546a26db85acd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:2b:5f:ce:e0:e6:53:1d:fb:43:9b:d5:17:
0a:36:cf:bf:d7:6b:b4:be:2f:14:94:71:4b:e8:d2:
53:0a:75:87:b3:5a:39:1f:b9:ef:0f:21:f6:af:1d:
4f:25:d9:82:09:8e:78:9d:8e:b0:47:2f:ef:35:26:
91:56:9f:08:75:f9:92:46:dd:b8:e7:66:9d:8e:2d:
2b:df:78:db:c4:f4:53:3a:cd:7c:c5:45:53:e5:d2:
ea:ff:76:88:73:dd:72:f8:a4:c8:08:b1:03:7a:ef:
ea:29:78:b1:6b:66:da:4a:9c:9f:ad:64:d6:33:c7:
f0:73:c3:87:a8:a4:6d:00:be:d4:3c:5d:74:dc:c8:
40:06:db:7d:2d:4c:3e:f9:a6:b7:8a:fe:b5:87:01:
ea:2a:cb:c4:4f:2b:ae:16:d4:63:96:f8:a7:e5:f1:
e6:6d:20:0a:7e:1e:09:e6:36:68:84:48:c2:7b:1b:
ed:9a:12:ee:e5:d1:08:f6:ba:d6:8c:f8:f7:a5:61:
91:5f:75:f3:d5:61:4c:53:f0:88:80:b0:9a:68:ce:
21:28:a9:08:3e:2f:f5:5f:cf:8a:6f:1e:1b:4c:45:
0b:40:3a:2e:77:73:90:16:65:46:c3:0f:20:ac:38:
b8:9c:3d:28:d3:55:34:4e:a4:63:97:3c:a4:60:cc:
01:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3B:DE:31:01:13:A2:C5:9E:FE:95:F8:B5:54:6A:26:DB:85:AC:D1
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c9:b4:fd:06:ca:3c:92:54:6b:96:2b:29:ba:4d:f3:a9:07:
cc:f2:e5:0f:ae:3d:de:b8:42:c4:52:d7:7f:7c:53:37:af:fb:
05:23:05:a2:f2:00:b6:30:72:31:51:53:f1:26:f9:ad:8a:a9:
82:ba:97:56:0e:81:1b:d4:d4:b8:55:26:bc:bd:28:45:21:6d:
f7:a5:09:ca:ef:d2:a6:67:8f:6f:d2:b6:a8:20:f0:81:e7:22:
52:11:6c:84:e9:39:7c:68:c0:b5:67:fb:5f:9c:45:95:a2:9b:
e7:7b:50:82:19:b7:c1:08:00:5b:e3:cd:09:40:1f:28:a0:07:
13:c1:b1:7c:fc:c2:62:ff:86:f8:ec:dc:cb:96:b2:ed:a2:39:
6c:61:87:a5:81:5d:56:7b:4b:04:38:91:bc:49:25:a6:ce:c9:
48:e3:b0:b9:ee:6e:5c:0f:37:91:93:b9:26:3a:9d:56:aa:31:
df:f4:82:52:33:d8:b2:4b:d9:95:a0:3b:f9:34:9d:bd:9d:19:
ad:d9:9d:81:62:66:10:47:a0:e0:f4:2f:2e:a0:50:1d:a2:b4:
fc:fe:b3:62:5e:5b:6b:23:1c:cb:d3:c8:10:9e:e2:0e:0e:b6:
6d:97:6e:52:30:5f:cb:63:f5:f1:4f:62:18:b0:69:29:99:7e:
d8:76:a2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:33:03 2025 by rpki-client