Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
File: V0AEDht6Uy3SrsIuk6YisuGzve8.mft (raw, json)
Hash identifier: +vXWSgmb2Z0D68e7yWD8zP47ca8h4eK0o6SNbROPhV0=
Subject key identifier: CE:B9:04:EE:83:7A:B2:5C:BE:04:52:91:BD:4A:4C:A8:BF:CC:10:E8
Authority key identifier: 57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF
Certificate issuer: /CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
Certificate serial: 01968AA5C722E5E24D05FA6865A76AFCE92F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
Manifest number: 14AB
Signing time: Thu 01 May 2025 07:00:42 +0000
Manifest this update: Thu 01 May 2025 07:00:42 +0000
Manifest next update: Fri 02 May 2025 07:00:42 +0000
Files and hashes: 1: V0AEDht6Uy3SrsIuk6YisuGzve8.crl (hash: m8z5pQlpdhRICxt4IaOrnKeBBAsErNCwJ32/pm3TmAY=)
2: wjijn454ptb7YjSwbgYustwNzJI.roa (hash: q85TNLC9Fv889V7DCE+ssvZg83i29aUc5JCe0NjjzpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:a5:c7:22:e5:e2:4d:05:fa:68:65:a7:6a:fc:e9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5740040e1b7a532dd2aec22e93a622b2e1b3bdef
Validity
Not Before: May 1 07:00:42 2025 GMT
Not After : May 2 07:00:42 2025 GMT
Subject: CN=ceb904ee837ab25cbe045291bd4a4ca8bfcc10e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a2:c3:83:96:1a:6c:71:ee:ff:99:3e:b7:d3:
d7:e4:1e:2e:0e:43:a9:56:e4:8e:ee:45:32:8e:f7:
47:7a:fd:a7:aa:3e:38:3d:a8:14:88:45:0d:f5:64:
91:9b:be:5f:44:ab:ab:72:39:a8:37:9d:b8:9f:d8:
00:5c:dd:1f:2b:2c:31:46:e6:a2:9f:b9:b7:96:a6:
19:9a:25:cc:45:62:f0:39:83:f8:bc:e3:50:ad:97:
4d:37:42:ec:b6:de:cf:e5:64:12:87:d2:73:56:fc:
5f:41:ac:d8:4f:71:2e:7d:0c:38:71:23:f0:ad:4a:
c5:84:9d:9d:4b:81:3b:f2:ad:fb:76:be:2f:42:2f:
c9:10:42:91:24:e2:68:d7:76:66:74:0d:f3:9b:8a:
5b:b3:55:c5:f5:0d:3b:88:27:c9:71:a0:32:9d:c3:
ae:65:a9:bd:27:94:fa:99:0e:01:61:c2:e7:6f:e9:
5a:7b:f8:f8:61:46:b0:07:9b:33:7c:f5:9f:3f:be:
73:4d:c4:e0:4b:0f:db:f0:e9:35:cf:9a:32:cd:f0:
77:54:77:26:e7:86:bc:00:ad:8e:31:c6:20:1d:59:
e6:d3:46:7a:e7:43:21:f6:68:b5:64:72:09:70:d8:
30:46:9a:2c:da:55:d8:dd:5b:f9:63:db:8f:fe:11:
68:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B9:04:EE:83:7A:B2:5C:BE:04:52:91:BD:4A:4C:A8:BF:CC:10:E8
X509v3 Authority Key Identifier:
keyid:57:40:04:0E:1B:7A:53:2D:D2:AE:C2:2E:93:A6:22:B2:E1:B3:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0AEDht6Uy3SrsIuk6YisuGzve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1c0205-5c65-47cd-b1b3-27c26b23b845/1/V0AEDht6Uy3SrsIuk6YisuGzve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ae:8d:de:7b:75:ce:09:b2:b5:ad:b8:8a:5d:65:5a:9a:15:
d4:e9:6f:b2:ab:e8:0c:62:b6:43:16:15:c5:ce:da:ed:8e:96:
dc:14:cc:aa:04:3a:96:fb:f8:4e:1d:23:61:c1:51:5d:a9:6a:
15:ad:04:43:a9:5f:84:67:ff:73:9b:cb:94:ee:42:54:3f:81:
6e:3d:f0:91:88:d8:5f:b4:46:91:c7:ab:0b:a6:95:62:8d:20:
8b:92:2f:d6:d7:bf:7d:f6:c5:87:cd:f8:48:1a:69:ea:4e:22:
d4:81:ad:90:38:33:87:4a:f3:fc:f9:1c:75:a2:51:31:c2:47:
4f:13:83:26:69:60:2b:ed:fa:67:cb:0f:0f:fb:fa:7e:db:eb:
20:29:73:ae:c4:fb:31:22:7d:16:31:e5:fa:47:f9:1b:43:21:
8b:21:27:6a:d8:71:8d:f7:56:9b:a0:90:e9:13:22:be:a7:74:
d8:a0:19:24:e9:a9:a0:69:a2:db:2d:3e:59:db:29:47:10:db:
21:d3:88:a1:78:15:d2:fb:a1:db:de:a2:75:f1:48:f2:a7:21:
ab:b1:15:14:c3:cb:68:8c:77:4a:33:7c:85:3f:7f:e5:6c:41:
e1:0b:ee:2b:49:ba:a6:2f:74:c1:a8:15:11:7c:90:e6:27:59:
a7:b0:67:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:50:11 2025 by rpki-client