Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
File: C-1D9AnLNc6153tW0LvJpMwtJpM.mft (raw, json)
Hash identifier: pseYZu4z18hajSl2FVsFRRj8r01a0NPUVXKsCFqMmK0=
Subject key identifier: 64:53:2D:87:28:03:11:BE:09:AE:7F:6A:D4:B2:74:A6:B7:42:6C:D9
Authority key identifier: 0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
Certificate issuer: /CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Certificate serial: 019674FA37F7EC992ED1816CE7196EBF8872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
Manifest number: 149B
Signing time: Sun 27 Apr 2025 02:01:17 +0000
Manifest this update: Sun 27 Apr 2025 02:01:17 +0000
Manifest next update: Mon 28 Apr 2025 02:01:17 +0000
Files and hashes: 1: C-1D9AnLNc6153tW0LvJpMwtJpM.crl (hash: OrNuhsRlz0FhrT9xMBzYeGWjeG+5z8WkVE6A/+yo6GM=)
2: sBhtRIsrLGDcCHm1OuhjaCUr2_0.roa (hash: Ua22PTmfzyT5DTnVC3xgijxYiy9LNm1nh8SzeYUTwDc=)
3: sZiCl9lv80fsle91xuU3_BKnt_s.roa (hash: FzOmDkg8UvmI+LcJN7K+9dJBFFV57UBgPrTOJAC0yec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:37:f7:ec:99:2e:d1:81:6c:e7:19:6e:bf:88:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Validity
Not Before: Apr 27 02:01:17 2025 GMT
Not After : Apr 28 02:01:17 2025 GMT
Subject: CN=64532d87280311be09ae7f6ad4b274a6b7426cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:7e:72:91:1e:82:0f:73:78:25:b7:05:0c:
9a:d0:26:16:ed:ff:ef:be:34:b2:c5:81:89:6e:b3:
d9:a6:07:fa:b6:8d:51:00:13:3d:f9:75:03:12:2b:
c3:13:6c:f9:f6:44:e2:41:84:bf:d0:4b:41:87:6b:
28:0f:fd:8a:6b:95:58:d7:50:22:1b:80:12:75:69:
0d:ef:0f:0f:07:d8:76:c2:fc:a0:3b:1c:bf:20:8b:
1b:a3:9e:fe:20:d3:b0:60:96:50:e3:38:60:f7:68:
02:50:95:4c:e8:f2:8b:5e:3f:bd:e6:e5:4e:f2:fa:
7b:e8:ab:cb:ae:e6:72:4b:78:15:a6:e6:0b:6d:f1:
8f:4f:79:60:61:cf:d4:b6:f2:22:98:93:7e:95:4e:
f6:26:60:ea:b6:73:07:cc:1b:eb:b0:71:7f:a6:fc:
7c:df:b4:7c:ee:49:ca:7e:23:22:3f:5c:54:68:fb:
68:2a:e6:2e:37:a6:f9:5e:e5:67:92:42:7d:83:81:
ed:5a:3d:1d:be:de:75:20:a1:f0:29:0c:14:a4:5e:
f1:3a:b3:3e:fc:e6:70:f7:53:57:1a:c8:49:f3:8c:
ba:cf:47:50:83:89:bf:b1:8e:75:9b:de:fc:d6:0b:
81:3b:f4:0b:67:af:2f:72:b5:81:a4:4e:c3:56:a5:
7e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:53:2D:87:28:03:11:BE:09:AE:7F:6A:D4:B2:74:A6:B7:42:6C:D9
X509v3 Authority Key Identifier:
keyid:0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:27:b8:0c:82:81:2f:f0:a4:ed:c3:8f:db:e6:75:e6:6d:77:
70:a2:fd:c2:c0:6b:27:a4:49:32:b5:c5:eb:79:86:c1:da:3f:
ab:33:1f:eb:e3:39:16:fa:64:32:39:08:44:a7:37:33:88:2e:
9d:94:b5:18:3a:9a:4e:76:c3:9d:ed:f5:65:9f:e8:67:88:1c:
6d:e8:ec:cd:62:96:47:77:ea:e8:b8:6f:e6:80:ff:29:a3:37:
ea:3f:78:5a:f8:5a:6e:2a:83:a4:eb:be:95:3d:b6:22:35:66:
c5:4f:35:b1:4b:44:a8:1e:73:f6:ff:de:67:b2:45:e3:cb:6d:
9e:06:1e:50:c1:11:21:c9:b3:20:a0:6c:04:d8:aa:8d:9c:da:
1a:b7:92:8e:ff:d8:b3:6a:f0:ba:8c:ff:9e:fb:72:99:04:93:
26:df:4e:e3:38:41:35:b9:ad:0d:da:f9:81:37:60:9a:76:ea:
22:c5:e1:85:5b:13:03:5e:fb:92:bf:b8:21:2d:21:bc:12:1a:
af:fa:64:e8:62:0c:88:bf:75:bc:6b:bd:31:46:b1:82:3d:51:
82:c4:0c:19:a8:bc:2c:d7:88:72:e0:cd:23:99:35:8f:e9:c6:
e9:2a:c1:58:32:5d:23:71:22:a4:90:02:88:be:e4:a3:b3:9f:
b5:0e:b1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:16:12 2025 by rpki-client