Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier: iST6/IACagdx1nv0CUQW2cCKpoFEtC7tni9y1GDxKwQ=
Subject key identifier: E1:4C:98:63:27:AA:74:4B:B8:67:B7:5E:49:47:A3:D0:74:26:08:F5
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial: 01967BA02E61DFDD6559CB3EB05EB115AD03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number: 14A4
Signing time: Mon 28 Apr 2025 09:00:17 +0000
Manifest this update: Mon 28 Apr 2025 09:00:17 +0000
Manifest next update: Tue 29 Apr 2025 09:00:17 +0000
Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: ds2uhXOYl/r+lwzsXWq/mtcZjL5lFqFKFcc0INZrgag=)
2: Gs7jpmfMcoM_7G0YMuDGyfM_OJg.roa (hash: yj4gPBjqELyvepP37xZ0hFdHIhYTiec7NS5/dOABF/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:2e:61:df:dd:65:59:cb:3e:b0:5e:b1:15:ad:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Validity
Not Before: Apr 28 09:00:17 2025 GMT
Not After : Apr 29 09:00:17 2025 GMT
Subject: CN=e14c986327aa744bb867b75e4947a3d0742608f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2d:1e:6d:27:ee:d0:3c:93:c5:c4:29:1c:ed:
ff:11:9f:58:d6:e2:c2:03:e5:46:d4:72:2b:7a:11:
25:ac:11:13:2f:d6:52:75:c6:10:af:78:4b:c2:67:
9b:bc:0c:b0:25:68:9e:2f:d3:9f:d8:44:e5:04:64:
73:2e:74:12:0d:0f:4f:62:52:37:d7:68:d6:ce:f6:
6c:00:f2:bf:14:ca:33:5e:68:d3:86:b4:87:b9:23:
e7:b3:8e:ab:4b:0d:12:48:c2:26:1a:95:ba:b3:5e:
5c:de:e3:e6:87:2c:8e:c8:8a:96:c9:03:fd:89:f7:
6e:b0:5c:87:d6:56:31:6d:3d:f7:da:fd:4c:1a:ab:
59:06:56:a0:f1:ca:b6:13:aa:6e:2d:28:e8:83:ec:
2d:bb:0f:42:ef:7a:5b:40:6f:ff:ff:cd:ea:1a:c8:
c4:9b:30:32:7d:78:77:b1:fb:11:4d:91:e4:b1:7d:
05:a9:71:98:bf:f4:d7:c3:60:d1:89:03:31:73:34:
53:50:16:c9:ce:4c:7b:5b:80:24:be:10:60:f9:f5:
34:ab:e2:05:b6:96:8d:b7:70:68:8d:b2:9c:50:67:
60:dd:fc:25:88:a4:49:50:29:1c:ea:7a:2e:5e:50:
42:5a:55:ed:af:9a:81:5f:6a:63:4a:88:ae:a8:e0:
a2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4C:98:63:27:AA:74:4B:B8:67:B7:5E:49:47:A3:D0:74:26:08:F5
X509v3 Authority Key Identifier:
keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2b:eb:de:ae:11:cd:f2:ff:4c:ae:09:ec:54:65:c1:96:9d:
2a:22:51:cd:fb:ab:a3:dc:c8:1f:7f:d4:8b:70:dd:17:39:a5:
89:7a:77:16:64:a2:39:44:77:9c:d2:00:bc:af:6c:e7:46:26:
06:95:bb:72:c3:2f:f5:eb:dc:0b:bd:4e:a2:cd:3b:c4:2b:c9:
5a:e1:c2:fb:b3:18:7b:84:bf:5a:9b:b9:54:e3:c6:96:22:3e:
33:85:f9:3a:af:83:d5:26:77:b7:c8:03:2e:04:c1:eb:4f:94:
2b:40:21:1b:66:c5:a5:6a:6d:85:78:7a:4d:6b:75:d3:20:87:
1f:c1:a9:82:14:fc:58:17:a8:6a:8d:7b:52:20:03:49:d5:63:
4f:92:6a:7f:1a:12:d5:f0:a3:60:be:a9:53:1d:8e:ca:25:da:
b3:b2:c6:43:cf:36:3e:87:2a:8e:76:dd:92:e5:e2:5a:87:a5:
29:f6:a9:97:14:db:04:1e:10:86:c0:bc:ce:4f:26:7f:7e:fe:
f4:4b:82:87:8a:bd:52:27:d0:1c:f3:6a:39:f7:1c:06:30:41:
05:58:ec:bf:d0:bb:f7:19:f9:4b:ea:4d:0b:12:d7:28:3a:cf:
91:09:b0:72:97:af:ed:4f:d2:36:21:c7:02:2d:c4:23:92:4e:
7f:6c:20:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:35:48 2025 by rpki-client