Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
File: 01Cgds5KjOb7afH9pKGUYUqUGvo.mft (raw, json)
Hash identifier: X7Z56/NqwXnMsfo4mrJoRrDgJNTydgCeW7P7i3rlgcw=
Subject key identifier: 79:21:40:DC:E2:0E:51:77:9D:0C:0B:CC:6A:25:D9:B4:6E:EA:AC:CA
Authority key identifier: D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
Certificate issuer: /CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Certificate serial: 0196A6C1E48C327B88C2252AB8E1FD920EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
Manifest number: 1529
Signing time: Tue 06 May 2025 18:00:46 +0000
Manifest this update: Tue 06 May 2025 18:00:46 +0000
Manifest next update: Wed 07 May 2025 18:00:46 +0000
Files and hashes: 1: 01Cgds5KjOb7afH9pKGUYUqUGvo.crl (hash: 1PaMWxkZ6Zgkn+1dM1Jeu4m8xHdozmQw5OsFQVvH6bY=)
2: OHSnHISpUOg0a2IaET-7LST2nHw.roa (hash: oeWDTr24DHxY0Ln8Ar9TYuW/yYnaSQVcRJXJMi+oDck=)
3: qpaxXHw6CdsxQ2wzd3NCOLPGlGs.roa (hash: hJxFH9vZ+FKOP/6zKZOcfuqIjzXEfzETnfkGtTZDPOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:c1:e4:8c:32:7b:88:c2:25:2a:b8:e1:fd:92:0e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Validity
Not Before: May 6 18:00:46 2025 GMT
Not After : May 7 18:00:46 2025 GMT
Subject: CN=792140dce20e51779d0c0bcc6a25d9b46eeaacca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:56:d3:09:8a:cd:1f:e2:74:2a:b9:7c:4e:
21:d1:a5:48:7d:0e:cb:6d:43:28:e2:25:b0:d9:dc:
f1:cf:f9:9a:29:28:61:7b:9e:f3:da:69:f1:42:85:
3c:02:44:33:fb:2f:87:d2:25:f5:89:aa:24:b8:94:
1e:a2:c9:ea:15:3a:94:46:ee:eb:59:ed:be:aa:bf:
d9:ce:3f:2f:0b:ec:0b:3d:0f:ab:73:95:ac:45:d1:
cf:aa:55:8d:e2:99:91:92:3e:22:f8:2b:2e:4d:1e:
e8:eb:b6:1b:6d:65:46:8e:39:30:32:07:90:f0:df:
23:3e:46:4c:40:02:de:bc:14:08:3e:55:d4:79:1d:
d9:bc:a4:72:f1:0e:29:3d:ca:b3:bb:74:6d:36:bb:
34:18:eb:a2:0d:9f:e9:a8:f9:ee:16:8e:03:ee:3b:
d3:d6:cc:f3:58:f6:bd:f8:75:df:ef:59:29:c5:26:
7d:3d:dd:56:55:48:be:0b:39:86:b0:57:89:09:fc:
19:3b:8a:99:7a:5d:39:b2:76:88:4b:6b:c5:b9:93:
72:d7:ab:16:48:f0:e1:85:15:02:d7:c0:0c:85:fc:
82:7a:72:3d:19:08:ee:43:f3:a5:bf:9a:17:75:1b:
45:2b:6b:ef:82:63:99:05:11:f8:c0:4e:5b:17:72:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:21:40:DC:E2:0E:51:77:9D:0C:0B:CC:6A:25:D9:B4:6E:EA:AC:CA
X509v3 Authority Key Identifier:
keyid:D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:72:3d:59:e6:ec:3a:70:d6:aa:4d:a8:89:8f:a1:95:c9:61:
27:46:85:08:f8:7b:db:c3:3d:a0:4b:87:8d:b3:4b:f9:03:5f:
67:36:88:53:56:c8:88:16:79:a6:ba:96:85:1c:94:bd:fe:ea:
86:f6:c6:20:54:e9:a9:58:8b:51:e1:58:f5:a7:f8:38:e1:a1:
b1:9b:de:a7:ff:2c:fb:16:0f:8f:41:3b:ed:c1:62:d1:f9:23:
dc:ea:63:1f:6e:00:b2:9a:8d:e8:52:92:2d:f1:66:ef:2d:30:
f1:c7:2a:c6:f5:4f:25:c9:ed:23:05:91:4c:03:64:59:dc:fc:
37:75:f8:08:b6:01:69:20:10:83:d4:c6:ef:7e:ca:a7:8d:7d:
70:e1:ac:f7:13:32:64:0f:25:a9:44:10:49:c3:37:6d:63:7d:
f9:56:eb:fe:25:46:c2:94:3e:54:bd:ba:ac:3d:d4:8e:38:a1:
ff:4c:84:eb:01:83:f3:f3:fc:92:2a:15:4d:4c:3a:e0:8e:47:
08:04:41:ad:c2:aa:34:2f:c8:b7:07:a5:6a:3c:84:77:47:47:
7f:e3:93:7e:a8:8b:3e:04:c1:95:23:88:a4:14:15:9d:d1:a0:
6e:fb:7e:41:44:15:d7:e0:7b:ff:dd:e2:75:ca:0b:e0:68:86:
df:5f:f2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:10:44 2025 by rpki-client