Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: nNOgC9Iod20Y8cWBUTGz51m8HBVhEg9gOQmZtl5lp2o=
Subject key identifier: 45:86:3E:5B:3A:E5:22:33:30:11:58:C0:D9:37:ED:32:10:EF:2C:FD
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 019680FD885848866ED888E93CF4A763C5BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 0F4A
Signing time: Tue 29 Apr 2025 10:00:21 +0000
Manifest this update: Tue 29 Apr 2025 10:00:21 +0000
Manifest next update: Wed 30 Apr 2025 10:00:21 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: U0a1pKyvy9G6Wp+c7XstY1n+XznhyLsY3tx2YyEB91U=)
2: ExdpCTXCt8uJ4Z_M2-EkieqhjoE.roa (hash: gUhwwwHnIVltW5e0SpmF0lPF2Gg7aGGIP9a0IVe5wqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:88:58:48:86:6e:d8:88:e9:3c:f4:a7:63:c5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Apr 29 10:00:21 2025 GMT
Not After : Apr 30 10:00:21 2025 GMT
Subject: CN=45863e5b3ae52233301158c0d937ed3210ef2cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:b7:1c:da:e7:95:f0:74:a6:e4:88:04:9a:
9d:51:6e:c7:ab:06:b2:93:f9:19:54:d9:8a:d6:c6:
49:c3:78:d7:d8:e5:b7:29:68:07:78:f6:7d:ef:0f:
7b:fc:a7:cb:c6:a8:ee:9e:04:10:40:e8:9e:ba:81:
83:c6:9d:4c:72:c8:58:56:e4:32:d5:79:de:84:a9:
fe:58:dc:9f:9d:9e:a7:25:82:fc:9a:01:19:13:a7:
6d:98:a1:eb:e2:56:2e:9b:95:02:2c:ef:65:2d:4f:
48:63:e3:87:f0:9f:f8:26:cd:12:a0:32:c5:c6:4e:
2b:6f:9e:be:21:c8:6d:56:7e:26:52:f1:37:49:b1:
8a:88:b9:38:e5:f7:7e:c5:41:a1:e3:f2:7c:c9:a5:
b7:d7:7e:b8:e8:e2:51:21:a1:eb:bc:b5:23:ba:4c:
45:4b:68:ec:8f:bf:2f:49:c8:d9:a7:3f:8c:92:9e:
de:e5:a6:51:ef:6e:9c:b7:a0:b3:ff:b4:ce:de:2f:
ba:f9:d5:a5:5a:0e:09:c3:97:96:a7:3a:e7:57:6a:
94:6b:25:e5:e6:4d:c1:3b:20:9a:7e:90:d4:44:e5:
24:30:8d:04:a5:16:e0:50:f2:3a:d9:8d:e3:61:77:
10:16:1f:1d:a0:02:61:b4:de:6d:43:f0:aa:16:6a:
39:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:86:3E:5B:3A:E5:22:33:30:11:58:C0:D9:37:ED:32:10:EF:2C:FD
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:87:3a:f1:01:9f:9f:04:95:04:1a:da:d0:c6:ec:a1:e6:ca:
ee:30:ca:1e:17:0b:64:ce:78:82:48:5b:c0:52:49:ad:11:3e:
cc:f6:b6:e0:c6:cf:b8:33:f1:08:d9:0f:31:71:f2:a8:db:b1:
13:af:63:43:be:e1:cb:1c:a7:f1:b8:ae:0e:9b:75:b0:c2:5b:
f3:48:d0:10:c1:3b:59:47:52:51:94:ac:54:0f:46:33:56:99:
73:11:a5:ca:1c:b6:cc:76:ee:12:f2:77:96:b6:be:aa:eb:5d:
32:c6:43:b3:4e:2a:ad:04:f4:8c:8d:ee:22:e7:40:9c:7e:c6:
f7:c3:91:75:b4:24:ea:b6:5f:d1:b7:3c:47:6c:f7:73:19:54:
43:3a:fb:d8:89:1a:30:df:b3:69:68:15:cd:66:6c:3a:d7:f9:
ac:b5:1b:a6:49:bf:c7:a0:99:7f:2a:47:32:7c:7c:24:a5:45:
59:48:d9:d4:8d:c6:cf:e4:f5:83:bc:ed:f0:c9:0b:67:64:14:
4c:79:a2:bd:c8:f1:aa:81:38:c3:a4:37:7c:e0:22:1a:df:bd:
af:2e:38:4d:2c:1a:fc:08:a8:5a:83:27:cb:9c:67:1b:03:83:
bc:c4:0d:8c:64:84:19:af:89:a0:ea:b4:aa:59:4e:b7:22:07:
49:ee:e7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:46:27 2025 by rpki-client