Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
File: CsFWWl9sTlTKLxnTZHWbag7WGEA.mft (raw, json)
Hash identifier: FAmOUrFaVASHFH4CC4HYfA8W8yCmiGc+sFWd3s+BQ7A=
Subject key identifier: 4D:7A:A7:60:6C:7E:0F:E0:5A:87:EF:EB:D4:60:9A:C2:B2:43:1E:39
Authority key identifier: 0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
Certificate issuer: /CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Certificate serial: 0196748BAAEBD4637428E488F8CCC19C661B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 00:00:32 +0000
Manifest this update: Sun 27 Apr 2025 00:00:32 +0000
Manifest next update: Mon 28 Apr 2025 00:00:32 +0000
Files and hashes: 1: CsFWWl9sTlTKLxnTZHWbag7WGEA.crl (hash: Hz1O7h/uBt//VINj0dQvPMSQb2oscbt3eLJwwNf4SLA=)
2: QP38gNz3xco5qv5nlkhRVeJhNcc.roa (hash: iHHCmYPxx8nMI8Pl/VJqH9lchdWekUpYcRiMjWpeVhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:aa:eb:d4:63:74:28:e4:88:f8:cc:c1:9c:66:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Validity
Not Before: Apr 27 00:00:32 2025 GMT
Not After : Apr 28 00:00:32 2025 GMT
Subject: CN=4d7aa7606c7e0fe05a87efebd4609ac2b2431e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:db:0a:9f:0b:79:30:73:95:fe:82:d4:cf:
43:f3:34:ae:d2:17:3b:74:0f:39:68:29:62:fd:19:
b3:3f:7e:cf:73:62:a6:9e:1a:70:a3:3a:53:3d:df:
0c:8b:be:02:80:f0:17:a0:d3:04:70:f0:f2:6d:ad:
1e:ba:5c:44:a9:41:90:33:46:a3:b5:5e:43:73:92:
6f:97:fc:79:57:7e:73:10:3e:e6:8d:c5:ba:43:69:
8a:22:48:81:2c:69:6a:62:02:98:bc:75:6d:4c:4a:
68:e2:bc:82:3b:3a:40:8f:6d:24:64:50:2f:6e:ec:
46:b7:9e:c7:cd:cc:92:0d:3b:dd:cf:bb:1c:f5:15:
4a:62:b9:86:70:0d:d5:28:d2:41:1d:f0:24:44:e1:
44:f7:6b:c0:50:2c:9f:f8:45:c8:0e:93:6f:b3:10:
5c:fa:43:a4:87:59:ca:d3:82:f2:36:f0:da:b0:8c:
a9:96:93:cc:9c:44:04:3d:6f:5c:1b:e0:84:ca:4d:
37:41:de:35:29:a7:0d:44:54:d4:26:b9:1c:fd:c5:
74:39:6e:3b:32:b5:1b:81:fd:a2:ef:ca:a6:ff:fb:
37:91:26:20:4d:a4:7d:b1:d1:f2:6e:54:91:37:29:
fb:bb:ab:32:d3:25:3d:84:9f:7c:9e:da:fa:2a:92:
90:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7A:A7:60:6C:7E:0F:E0:5A:87:EF:EB:D4:60:9A:C2:B2:43:1E:39
X509v3 Authority Key Identifier:
keyid:0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:63:df:53:10:62:a8:63:d8:bb:b3:5e:a9:a7:05:8e:ea:ad:
cd:de:60:9b:65:ba:28:ef:e9:64:b6:04:65:36:71:e2:c6:85:
cb:ac:57:ea:97:71:0c:0d:02:b4:09:43:53:62:55:cc:b1:3b:
2a:ee:f6:7a:21:e3:ec:19:a3:1b:36:47:f7:d7:a8:a6:fc:b1:
a0:88:f7:f6:e7:c6:c5:99:1f:4e:c2:07:73:82:8c:4a:25:81:
ef:46:db:04:92:ea:bc:1c:4e:ff:c8:de:09:0c:e6:02:95:54:
1c:fc:d0:d5:1f:71:b8:4f:51:5d:ed:99:b5:7a:f7:eb:84:0c:
84:e3:e1:8a:2e:47:cc:9b:74:e1:e5:3d:c7:25:1f:f1:23:61:
ea:7a:15:91:9b:23:1c:a0:02:ac:41:a1:32:ff:9f:b6:1a:ed:
a1:93:e3:5c:b1:37:ce:8d:b2:f3:9f:0b:78:c5:ae:56:cb:71:
d2:ce:62:6a:3b:56:1f:79:a8:e6:7d:ce:ba:0b:a8:24:9f:8f:
b5:57:de:ce:ae:ab:17:72:a9:6f:cc:bb:11:a9:b7:c7:66:22:
63:20:40:fa:de:f4:7d:f6:52:c7:9f:61:28:e3:0e:e1:93:8e:
b0:98:93:d3:f2:ee:c8:7a:9c:56:e3:3b:d5:14:9a:6e:80:03:
b3:2f:95:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:40:49 2025 by rpki-client