Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
File: CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json)
Hash identifier: fL2Bi/9Rgrc3tm/oU0B9zaZgS4G451UjIgJgjvy1d/4=
Subject key identifier: 1C:25:F1:27:B4:14:90:2B:FE:A3:A0:20:0A:AB:8C:1A:61:65:85:DA
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial: 019688499A7C886FAD6B5F651178CC9ACB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
Manifest number: 0614
Signing time: Wed 30 Apr 2025 20:00:47 +0000
Manifest this update: Wed 30 Apr 2025 20:00:47 +0000
Manifest next update: Thu 01 May 2025 20:00:47 +0000
Files and hashes: 1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: 26whloqCdXt29Y+Lga44dASt3PmpJFm3Af/8oVQ3st4=)
2: CepTD_sRHzQKM1km_XqGFUiFw_A.roa (hash: 6VmSpRvYGLL0kNu4j1w0e4FEukjB/A4DJqf8FlG66dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:9a:7c:88:6f:ad:6b:5f:65:11:78:cc:9a:cb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Validity
Not Before: Apr 30 20:00:47 2025 GMT
Not After : May 1 20:00:47 2025 GMT
Subject: CN=1c25f127b414902bfea3a0200aab8c1a616585da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ff:6b:16:71:d5:0d:75:a2:d1:88:90:9a:8b:
25:43:3c:0d:f9:cc:da:47:53:24:4c:1c:f9:60:bb:
af:f9:96:56:90:7f:73:ca:48:8b:f8:1e:d8:d6:19:
b5:33:da:8b:7a:a2:94:7f:c9:a5:20:09:b4:45:1d:
ce:ba:2a:98:bf:62:ca:a3:41:1b:23:2b:81:71:4a:
37:5f:a3:63:aa:9d:ab:fd:78:62:14:73:dd:e7:77:
06:a5:fa:61:e6:5a:f6:2f:27:8c:18:9c:c5:f3:13:
dd:bb:a8:02:d8:ca:c2:4f:74:2c:3a:b5:99:a1:9b:
b1:b4:17:46:8a:db:aa:6e:42:81:c5:b8:55:f1:d1:
98:a6:15:62:02:02:ba:9e:66:49:1f:19:51:c9:bb:
18:5c:14:96:0f:1d:c0:bc:e9:a3:87:30:b8:9c:7a:
02:07:ff:95:d3:9c:00:7b:05:ab:86:b0:f4:f4:71:
f0:5d:e7:eb:16:b6:62:0e:2b:ba:65:05:55:39:35:
e8:ab:bb:a9:a3:a4:95:d8:a7:bf:72:c4:b6:17:43:
57:18:12:37:7a:58:f8:b9:cf:be:25:ff:57:74:0b:
77:c2:2f:58:e1:81:dd:69:47:28:a6:fe:a8:bc:f8:
e8:6f:2a:e9:0d:d1:29:55:0b:71:5c:86:29:52:28:
d9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:25:F1:27:B4:14:90:2B:FE:A3:A0:20:0A:AB:8C:1A:61:65:85:DA
X509v3 Authority Key Identifier:
keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:97:9b:5e:6a:0e:b6:08:d7:91:82:b4:41:80:2e:39:f5:d4:
f5:41:78:1b:2f:bf:6e:27:c5:9e:e2:b2:8c:5b:3c:76:c5:65:
4d:3e:cf:e1:e3:92:31:e9:3a:87:85:5b:00:8a:a5:75:57:72:
7e:86:5d:29:e5:4a:89:0f:30:01:9b:a8:54:a3:b3:00:17:75:
09:94:81:70:91:ba:bc:01:2d:ce:55:11:f0:76:52:ec:85:5e:
91:e5:86:d1:21:ef:ae:29:20:8d:4f:20:92:55:f7:02:0d:7c:
d6:fd:ae:6f:71:b6:79:bf:f7:f7:49:bd:50:80:85:5e:f6:b9:
36:d1:6f:d6:d3:8d:85:58:d9:c8:53:2b:fe:8c:8a:fd:bc:4c:
30:30:80:79:95:9e:97:de:40:00:7d:c6:6e:77:5a:27:4c:39:
96:2c:d0:7a:8b:48:90:94:c0:e6:f2:13:ea:50:ff:72:d3:9e:
d8:25:ee:e3:ba:34:01:ca:e9:2e:e5:7c:e6:26:b7:5b:50:94:
70:42:bc:1d:8e:02:38:2d:5b:db:f3:a1:50:21:0b:08:73:9b:
84:60:b8:7f:74:c6:bf:17:d2:a3:f5:46:90:f6:c9:12:94:97:
e3:8b:b4:4b:d5:19:51:49:7c:de:09:c0:95:54:a3:c6:91:07:
08:86:40:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:04:31 2025 by rpki-client