Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
File: clLH1e2MWivCrQMGXUHD5LOsFXU.mft (raw, json)
Hash identifier: KcT+mG38l7v0ZHYd7adHZf+Edx/gUxxBzTcqbXWmWVU=
Subject key identifier: AD:60:B6:EC:DC:C2:8B:87:76:41:DC:CA:55:23:A4:65:20:44:D5:42
Authority key identifier: 72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
Certificate issuer: /CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Certificate serial: 01968E14C860B4CBE4E88FE216659ACE51A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
Manifest number: 121B
Signing time: Thu 01 May 2025 23:00:48 +0000
Manifest this update: Thu 01 May 2025 23:00:48 +0000
Manifest next update: Fri 02 May 2025 23:00:48 +0000
Files and hashes: 1: clLH1e2MWivCrQMGXUHD5LOsFXU.crl (hash: JIaclUb3cAF/oiu0H+aq0UBgS69aP5tnRS4dZ2xIyjM=)
2: pEayhHqE2LsS2JqNOu8wTigFXWQ.roa (hash: xO5IfYrXWQX7NXGLAWvUM5o4fMaOdr7urJcP0f6HOKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:14:c8:60:b4:cb:e4:e8:8f:e2:16:65:9a:ce:51:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Validity
Not Before: May 1 23:00:48 2025 GMT
Not After : May 2 23:00:48 2025 GMT
Subject: CN=ad60b6ecdcc28b877641dcca5523a4652044d542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:6a:87:cf:06:bd:76:c9:0c:13:38:6f:b8:
49:4c:ac:8b:62:c9:7f:2f:a3:0f:87:ae:b9:34:5c:
ae:64:41:ca:03:40:48:1f:c5:be:6a:de:08:08:fd:
52:de:d3:18:88:74:a1:96:74:16:27:85:73:a4:ba:
bb:76:1c:48:b7:05:f5:5c:d4:ed:62:74:d3:b0:44:
e9:f7:3d:55:43:5f:69:0c:65:3d:02:ee:72:e6:77:
b3:c4:0c:42:fc:4c:dc:8d:c1:a4:87:a1:d4:84:36:
f2:07:f8:4a:7f:e5:05:ea:2f:e1:0b:f0:98:cf:cd:
70:78:93:19:63:35:0f:48:8f:81:c5:bd:30:c7:7c:
cf:29:63:d2:2c:1c:48:a3:7d:68:45:ad:5a:0c:a3:
5b:4f:1b:d2:74:71:63:d6:a5:8d:35:bc:a0:ab:b6:
1b:b3:9b:80:02:dd:1b:6e:0c:4f:d0:83:a5:03:67:
02:9a:3d:2a:42:71:d3:4f:97:ea:0d:24:09:79:6a:
19:0a:82:18:77:63:07:c8:8d:c7:77:5c:67:1b:d4:
00:49:95:5b:1f:68:79:77:7f:75:98:f5:b9:64:9b:
40:6f:a2:f7:b8:ec:56:a0:dc:61:85:e8:c1:b5:6a:
0d:e7:af:ef:12:19:dd:b3:a8:70:b4:4d:17:60:14:
eb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:60:B6:EC:DC:C2:8B:87:76:41:DC:CA:55:23:A4:65:20:44:D5:42
X509v3 Authority Key Identifier:
keyid:72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7b:53:ab:03:ce:52:6d:e9:ba:66:4e:57:aa:af:68:82:60:
ec:81:99:69:87:98:a1:91:4b:dd:8e:d5:be:07:04:15:60:c5:
23:db:92:66:6d:5e:46:d1:32:08:c3:fc:dd:3d:75:70:fe:65:
5f:a7:c4:0f:1f:7b:04:84:6b:f0:2d:6f:91:ce:d4:4b:ae:dd:
11:0f:21:9b:53:9a:86:ee:82:b0:07:46:2c:ed:b5:45:38:fa:
31:02:b1:c9:7b:63:da:ff:a6:86:b3:33:2d:6e:4c:d6:d3:64:
bb:aa:e9:97:aa:28:1e:c8:bf:5e:19:c7:1b:71:01:2f:d9:a5:
b1:c6:d3:0d:94:44:3c:06:e7:36:62:1e:a4:85:4c:33:b1:3e:
fc:c6:64:6d:fe:f8:95:1c:d4:fc:4d:f9:2e:55:9e:00:56:93:
21:b9:0b:10:30:e7:90:59:49:2d:52:4e:ea:3d:c4:f3:63:21:
74:1f:06:a1:44:ae:62:b0:bf:d2:1e:7c:0d:8d:60:be:e5:d9:
77:5e:19:e0:1d:bc:ff:26:ac:49:9e:2b:8d:4e:c8:1d:a3:d7:
8c:10:d3:72:5e:68:9a:23:9f:6e:83:9f:30:e7:78:b8:47:18:
9c:ae:cd:3e:fb:4b:f8:c7:52:1e:ac:07:8a:8c:f6:3b:52:fb:
26:2e:3e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:00:25 2025 by rpki-client