Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
File: C4-x3rCeckJbMJoUFJF9r4k771k.mft (raw, json)
Hash identifier: RmojUfJzAVPO86dvkbvQBV05tBbsy23weSe5CDXOIlk=
Subject key identifier: 42:CF:FF:73:EA:83:73:C7:FF:7F:E1:D4:60:B2:80:35:D1:58:A7:AC
Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
Certificate issuer: /CN=0b8fb1deb09e72425b309a1414917daf893bef59
Certificate serial: 0196C12604BA607A42FE08D4D67FF58BFD26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 21:00:16 +0000
Manifest this update: Sun 11 May 2025 21:00:16 +0000
Manifest next update: Mon 12 May 2025 21:00:16 +0000
Files and hashes: 1: C4-x3rCeckJbMJoUFJF9r4k771k.crl (hash: myIdWA3/o4/VNLux18GiYj+ehqS+laTcA5C6EN2Ra1Y=)
2: xbK0xWiY34_RomWctzp72CJLeyA.roa (hash: uGlhM5SP1wH5GgbXheJ7ZYAOlhLuCV1Bj19dNLN10ho=)
3: ztCPKk8w1aeaQKuLHJz_e0TSo9Y.roa (hash: eX6lgcMXGHHyxYwjBqAxjQIWBeaf2J3CyUG15tvpJ0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:04:ba:60:7a:42:fe:08:d4:d6:7f:f5:8b:fd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59
Validity
Not Before: May 11 21:00:16 2025 GMT
Not After : May 12 21:00:16 2025 GMT
Subject: CN=42cfff73ea8373c7ff7fe1d460b28035d158a7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:e7:b2:50:5e:30:0b:eb:32:18:8f:ce:eb:
b4:3e:67:36:54:42:74:45:19:ec:80:72:66:b4:f5:
26:df:98:5d:9c:ef:11:11:c9:18:bf:0d:cb:21:c1:
12:01:a5:55:fe:42:81:30:3c:b3:16:92:28:27:1d:
79:ad:07:14:8d:1f:c2:a0:3b:5d:29:e8:c1:55:e6:
29:1a:9e:bc:2a:1c:d5:42:0c:50:20:fd:af:c4:39:
b4:a4:74:44:c0:43:f7:70:8e:c8:6a:6e:35:82:93:
02:55:de:15:49:5d:ca:22:d9:38:b2:bc:98:36:c1:
93:3a:94:97:63:c6:26:59:26:85:cc:ab:48:8d:7d:
7d:4b:19:e6:2a:3f:ab:c9:f4:56:da:65:ae:89:14:
90:dc:f0:eb:65:fb:84:43:6c:55:2a:b3:c3:98:9f:
5a:92:51:46:72:a3:09:2c:90:7e:39:96:2e:3c:ca:
b3:76:be:fb:7f:bb:30:e2:04:b2:2f:ed:0f:7d:70:
a2:ca:24:28:05:7c:5e:c3:9f:a1:14:ec:65:35:8b:
70:e2:f8:43:05:42:79:1c:87:97:ec:cf:bf:57:32:
ee:ff:5b:3a:e5:af:4e:83:ca:a0:6f:b5:cf:6e:24:
6d:12:ef:0c:01:a8:e1:cc:39:a8:d2:ae:cd:cb:75:
5f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CF:FF:73:EA:83:73:C7:FF:7F:E1:D4:60:B2:80:35:D1:58:A7:AC
X509v3 Authority Key Identifier:
keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ac:0a:b7:fa:ea:70:69:a5:dd:47:9d:32:41:70:83:a2:18:
18:f3:1c:98:ce:25:ce:90:37:dd:46:dc:f1:71:e0:a4:c4:1f:
0b:e6:1b:aa:95:16:16:5e:a1:9e:9c:ec:ac:ae:cf:d7:89:5d:
6a:d6:26:17:33:cf:5e:01:0f:7d:fe:f1:62:d1:30:1f:05:e1:
e7:ca:e6:d5:0a:e8:9a:29:66:d9:fd:e9:99:4d:41:f4:fc:0a:
2f:fd:b0:7d:ea:5a:ee:08:d3:4c:84:ea:38:36:ee:5d:ba:70:
72:2e:50:46:60:5d:5c:6e:42:e2:e9:84:65:bb:4f:ec:d5:fd:
9f:3b:47:60:39:5c:e8:fa:3a:0a:ca:e6:99:78:03:cc:02:e5:
2e:20:f5:6d:43:88:de:65:e3:66:f2:51:f2:83:6b:9f:21:ac:
0b:76:6b:b1:87:10:ec:03:4f:2a:0c:7e:7f:f1:91:2d:fb:30:
5d:4c:dd:70:c8:1e:69:51:5a:f9:7a:ab:ce:bf:e0:8f:e5:ed:
86:cb:7d:6c:8c:e6:3b:20:c6:c3:cf:e0:22:07:45:71:28:31:
f1:4b:0e:d0:48:92:39:18:e9:ae:99:48:3e:fc:f2:0f:81:d5:
e8:78:9c:18:3e:98:7b:31:9d:2f:2d:8c:81:d8:28:c7:a5:bf:
0b:9e:59:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:46:58 2025 by rpki-client