Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
File: c271cwBQxyD4x5BGbri4pI7750k.mft (raw, json)
Hash identifier: 0fE/U8/X2O0ozMCnArv2IyEUal98RX1qcM9KUyiOb8k=
Subject key identifier: 4C:1D:75:5E:93:FB:75:FD:0C:56:44:A3:41:09:A2:E9:94:A8:8F:AC
Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749
Certificate serial: 01967CB2FCE187B8946CC3F0AAD80FACC87E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 14:00:26 +0000
Manifest this update: Mon 28 Apr 2025 14:00:26 +0000
Manifest next update: Tue 29 Apr 2025 14:00:26 +0000
Files and hashes: 1: U_EXFi0_K3LJzzOGjdd59sx5hhk.roa (hash: InLExGG/VRrfIxx+5P3BkdCZ9LeR0AfhLMm27/EtRM8=)
2: c271cwBQxyD4x5BGbri4pI7750k.crl (hash: HUjO6HXVNL3kIvDGreQDrgIz28bp1WhtR+ZDKTofh6A=)
3: fpEtFF5tn_F6AS7ORtQk_79zOLM.roa (hash: ecIVoFs7h4RkV6LSwkMSO/FMl9ZMbuW6Wd5+RjOOYhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b2:fc:e1:87:b8:94:6c:c3:f0:aa:d8:0f:ac:c8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749
Validity
Not Before: Apr 28 14:00:26 2025 GMT
Not After : Apr 29 14:00:26 2025 GMT
Subject: CN=4c1d755e93fb75fd0c5644a34109a2e994a88fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:43:69:c0:14:26:0d:16:e2:75:df:67:11:88:
00:87:6c:8d:c2:01:1a:67:9d:09:13:d1:17:59:e5:
07:98:7a:26:d9:b9:42:08:9a:ef:ee:a3:6d:73:a2:
f3:5b:e7:ca:54:ec:01:5e:77:8e:b4:c6:a4:25:d5:
79:14:b1:43:1e:94:cb:1c:7e:8c:fe:b7:b7:fe:78:
24:2b:24:ba:89:e7:95:98:0d:9b:9b:c8:ce:8e:4c:
3c:66:d2:11:04:5d:3e:b6:29:1d:1e:87:aa:2a:84:
c1:86:51:a5:b6:29:ab:be:8b:54:ad:02:79:cd:74:
f4:87:ea:17:98:73:c1:2b:7e:2c:ec:8c:35:aa:15:
20:b5:9d:b1:9c:fe:cc:1b:9e:5b:37:f2:b7:53:5a:
c2:fc:da:ca:94:26:cc:11:91:9a:06:77:b7:b8:93:
96:08:33:03:80:d4:82:29:e5:21:de:80:b8:7c:f6:
35:e1:4e:5a:8c:6d:95:f9:ac:c7:93:c6:aa:92:55:
98:67:61:27:08:99:6b:71:94:2f:cf:6b:f1:52:57:
aa:d1:93:5e:51:3c:a1:e1:77:ba:ef:65:2f:7d:46:
8b:76:56:e2:60:08:ac:0e:bf:3b:0d:d2:c2:c6:c9:
73:24:af:96:b2:eb:f3:ad:93:6d:41:f5:6e:08:0b:
e6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1D:75:5E:93:FB:75:FD:0C:56:44:A3:41:09:A2:E9:94:A8:8F:AC
X509v3 Authority Key Identifier:
keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6f:53:9d:97:91:dc:43:ee:22:ff:aa:2e:e3:db:88:1b:a4:
25:dc:fd:fc:46:87:0c:04:59:e2:e0:36:7b:0d:ba:8c:5a:41:
83:66:42:97:2b:ee:8b:f0:42:a7:63:3c:36:53:7e:08:af:b4:
63:59:cb:23:55:72:f1:0d:a3:34:66:d7:c9:fc:45:71:c1:a6:
0e:0b:98:71:78:3b:84:15:49:43:7c:0d:b0:c3:98:ee:aa:a5:
d4:91:ce:66:08:a5:b3:1a:fc:55:70:01:54:2c:fd:83:f6:f2:
f4:05:80:f9:65:32:78:35:48:38:54:96:7e:0c:27:3c:85:ff:
ef:7a:9b:69:54:48:84:5d:09:2a:e5:c5:b3:fb:83:c9:40:bd:
d5:c7:c3:ce:62:94:84:94:92:76:44:3b:e2:31:1b:b7:3b:08:
60:b2:1d:05:04:63:45:53:05:f2:ce:8f:87:36:3d:01:01:46:
d7:52:74:6c:29:ef:f8:72:c0:da:d7:ec:bf:ff:43:f3:a6:35:
f5:a6:96:fe:82:4a:99:93:84:69:b4:b6:f9:a0:2f:81:ea:6c:
91:4d:dc:7a:b4:24:3e:8b:3d:a3:2f:b7:90:b2:b8:24:cb:d8:
49:49:8b:4e:4f:07:87:49:99:1a:13:88:26:8d:45:80:7f:61:
af:c5:fc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:53:24 2025 by rpki-client