Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
File: cFtQehAZ98Rlc33FlzbAb93c7-c.mft (raw, json)
Hash identifier: hNby8vlpa47URDHMwXq4ElBhzrU3igipGDAg45DIX8o=
Subject key identifier: 9F:8C:23:28:64:1A:BE:63:4C:09:18:4D:3F:3E:31:54:F5:4E:27:F6
Authority key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
Certificate issuer: /CN=705b507a1019f7c465737dc59736c06fdddcefe7
Certificate serial: 0196729D30614C86962B6EFBF434EAE69B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
Manifest number: 0513
Signing time: Sat 26 Apr 2025 15:00:26 +0000
Manifest this update: Sat 26 Apr 2025 15:00:26 +0000
Manifest next update: Sun 27 Apr 2025 15:00:26 +0000
Files and hashes: 1: I35QWc2nLFeohwH6DngqA3KZZFg.roa (hash: aZgBsm07l1h8BIWKajFFEnRBCv4q5gOkXWvMXnSlf3g=)
2: cFtQehAZ98Rlc33FlzbAb93c7-c.crl (hash: KTF7EjO8GyCkgjyZGeb6AVdfRaQFfLCc68RS8HgJNY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:30:61:4c:86:96:2b:6e:fb:f4:34:ea:e6:9b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705b507a1019f7c465737dc59736c06fdddcefe7
Validity
Not Before: Apr 26 15:00:26 2025 GMT
Not After : Apr 27 15:00:26 2025 GMT
Subject: CN=9f8c2328641abe634c09184d3f3e3154f54e27f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:e9:46:38:3f:36:a0:23:d7:96:15:22:02:
f9:c1:07:ab:70:39:32:bd:5c:33:f7:01:fe:c1:34:
dd:78:7e:a0:e2:e7:75:1c:8e:b4:f0:b5:6f:2f:3b:
5d:82:ad:c1:31:86:e9:52:c7:40:91:83:cd:52:f9:
98:90:ae:f5:92:98:23:cb:e7:31:3c:36:63:80:95:
be:02:49:2d:2d:8f:9d:b5:22:7f:21:23:44:bb:08:
fb:47:00:d8:26:94:1b:aa:f5:41:3c:73:7a:19:19:
e3:12:2d:54:00:10:ac:50:55:a9:42:30:69:7c:09:
f1:75:ed:1b:ea:16:7f:0e:7c:cd:d0:69:82:6f:a7:
6b:ed:b3:0f:82:16:c1:cd:0a:f8:bf:fe:44:b4:f8:
24:a2:06:f8:8f:d1:c8:42:43:c0:30:89:02:92:25:
93:1f:ae:67:6e:0d:11:2b:db:b9:6f:91:27:e6:6c:
a5:7e:9f:94:cb:d0:bd:3b:2c:bb:3a:05:37:20:77:
b4:99:2c:fd:a8:2e:25:12:24:65:12:93:a3:e5:97:
cf:b5:32:67:78:88:32:96:f3:de:1e:5d:69:c3:2a:
07:44:ea:64:06:87:56:e2:d9:a7:21:1b:a8:91:73:
05:c1:f0:c5:02:c7:7c:b0:b5:0c:14:5d:cc:bd:8e:
c3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8C:23:28:64:1A:BE:63:4C:09:18:4D:3F:3E:31:54:F5:4E:27:F6
X509v3 Authority Key Identifier:
keyid:70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:dc:75:27:53:9d:d3:57:70:42:36:f4:cd:60:1d:b6:c1:7a:
8d:6e:09:a9:c5:cf:60:08:5f:8f:cf:02:87:ba:e5:2c:89:5d:
16:e7:74:0b:ec:c4:cf:be:c4:aa:58:12:78:6e:0b:61:2c:18:
60:69:61:75:5b:20:80:4a:e6:aa:be:d0:12:69:9a:64:64:bd:
3e:be:cf:63:9c:1f:a6:70:84:cd:7e:df:cd:5e:16:45:35:7d:
d2:d7:42:cd:8d:81:13:00:73:94:06:e9:fc:0d:e7:ac:2a:2d:
25:80:ee:de:c4:ed:86:41:5b:c8:e1:bb:5d:4c:f4:26:8c:a5:
10:c6:66:c2:c2:8b:b9:35:c2:38:61:00:85:00:98:b6:6b:61:
1d:0f:cf:64:90:65:26:47:9a:01:f4:15:af:be:b7:b1:0b:62:
ea:f0:57:79:84:8a:cb:4a:67:59:e8:ae:ee:f8:9b:e6:5b:01:
f4:9b:f2:55:8e:f5:14:01:25:9c:12:5e:30:20:5b:93:84:ac:
e8:94:93:49:23:f4:fd:33:34:b5:64:29:e4:f2:cd:6c:06:33:
c7:bf:ee:88:74:04:79:52:fc:8e:99:03:3e:bd:78:d3:a6:81:
77:e4:59:4b:af:73:47:49:53:22:17:e1:04:d6:a4:96:3b:aa:
ef:51:c5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:03:47 2025 by rpki-client