Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
File: 15ToHXL1nGWg0YFEobJgeYNTa0o.mft (raw, json)
Hash identifier: xdFHdF/jVnQMKy4WFW5B2LpKv5yUU285rrkYRB32e4k=
Subject key identifier: CB:31:71:58:93:84:8D:98:2E:11:8E:77:45:AE:FB:50:7D:47:2D:06
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 0196BF6EA8E63BC594F4E401AFAA5B02236B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
Manifest number: 0C3E
Signing time: Sun 11 May 2025 13:00:22 +0000
Manifest this update: Sun 11 May 2025 13:00:22 +0000
Manifest next update: Mon 12 May 2025 13:00:22 +0000
Files and hashes: 1: 15ToHXL1nGWg0YFEobJgeYNTa0o.crl (hash: hMMOOJugZ0WUQ3tXUQkzg0i7SSsTcxBWdPoJ63dPP1o=)
2: 74Pc-d1cIDB2cJwPwMZKRC2SHlY.roa (hash: BNXJ9UQTlJTDJF7YHXiQBgrxMV0S9TBmp+TiB2lnrCw=)
3: ATm3n0KFZ5OKTQtdaMLYTaNNVew.roa (hash: 2UTJGztOoJrr9yNdFqpMauhjZZvVEquE5BNwI7gR6Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:a8:e6:3b:c5:94:f4:e4:01:af:aa:5b:02:23:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: May 11 13:00:22 2025 GMT
Not After : May 12 13:00:22 2025 GMT
Subject: CN=cb31715893848d982e118e7745aefb507d472d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:28:b3:e8:1a:db:83:1c:cf:d6:bb:c2:2d:
7a:75:03:52:27:86:27:0d:9d:41:fb:73:43:b2:60:
82:f2:49:61:e1:f1:6a:4a:9a:b1:de:48:5d:aa:0e:
ae:9d:2f:0b:ae:29:b5:e4:ff:f1:6b:d4:5a:c4:3a:
86:f2:7b:03:63:17:51:44:f8:bd:bb:8d:e0:0c:6c:
e1:93:ee:b4:cf:1c:5d:9a:c3:42:70:17:db:af:07:
8b:21:e5:fe:98:cf:c1:56:06:4b:29:32:e6:41:12:
cd:26:d9:bd:99:27:e4:fc:26:16:2c:cb:84:9f:59:
e6:38:bd:7a:26:20:17:a5:fc:af:04:23:4f:3a:c5:
02:26:47:61:36:d2:dc:9c:fd:a3:17:cb:4a:a5:a7:
5c:23:3d:4a:a8:b1:cc:3c:f1:6a:28:3a:b6:39:a6:
f2:4c:5f:bf:50:fa:14:a5:5d:30:03:09:a7:65:8d:
52:37:ab:cc:c2:cd:5a:02:d0:10:bd:ef:97:04:09:
cb:e6:ee:bb:8d:95:d9:ec:21:f3:d0:e0:2d:bc:8d:
35:ec:da:19:d1:f0:52:4c:12:94:9d:e1:55:87:30:
47:96:68:42:e8:2f:f4:be:a0:f4:69:cb:b5:bb:18:
e0:68:80:2a:37:7e:af:4e:2d:be:8c:fa:b9:63:b1:
35:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:31:71:58:93:84:8D:98:2E:11:8E:77:45:AE:FB:50:7D:47:2D:06
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8a:04:d7:d3:f5:91:db:77:9e:e9:1c:eb:46:ef:a6:80:ac:
e4:13:f3:21:9a:2f:a8:3f:5d:b6:de:f1:10:db:42:43:03:3b:
34:18:0e:04:0f:78:68:72:4d:f2:aa:49:b5:f1:22:e8:41:b0:
45:7c:32:b5:20:84:1d:de:cf:f5:b5:a6:d6:e4:02:fd:d1:97:
a3:69:e3:ed:14:4c:77:df:ea:16:31:b7:39:bf:56:dd:a0:e9:
38:cf:e8:75:65:92:3d:97:95:6d:fc:a1:6b:fd:db:6d:ba:31:
c8:bc:05:d7:11:b7:9d:8e:b1:c3:00:95:0d:13:47:7d:a1:cb:
11:5b:cf:66:9e:9c:87:71:8d:ad:45:52:eb:d9:db:b2:6c:c7:
a6:97:28:4f:f3:59:c7:e5:ad:16:3b:39:60:ab:27:20:73:ae:
db:f8:b4:dc:ac:3a:b6:f7:a3:a4:f8:cb:48:94:63:f1:a3:36:
6e:c3:1e:9a:76:81:41:47:53:fa:5a:05:50:87:0a:bd:c7:73:
03:58:a8:71:e3:10:1f:5b:24:71:43:05:da:de:c0:37:56:e4:
c5:1c:d4:3f:71:05:2c:2d:4e:fe:4e:ba:06:8b:63:a8:53:6a:
15:13:44:f4:ce:0a:63:64:4a:6f:01:1a:b9:b3:1c:66:14:74:
a4:d1:a4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:17:10 2025 by rpki-client