Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier: yddP1LIAsLWV3oTNPUILA2u/OOfrNZeCBRGocLCQwGY=
Subject key identifier: D6:AE:B6:EB:EC:3D:ED:4D:C3:E5:AE:8C:BC:F9:B3:BD:3D:C8:9B:E0
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 0196A61C9D2FB0D617C78E1AF2267A6A2A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number: 14BA
Signing time: Tue 06 May 2025 15:00:15 +0000
Manifest this update: Tue 06 May 2025 15:00:15 +0000
Manifest next update: Wed 07 May 2025 15:00:15 +0000
Files and hashes: 1: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: o6xTRdHaJa1tnVata6ApaJjsxv+47hUGQ01PAqVagYQ=)
2: dh_JgCZHkTokMGRr7H9M3cKhoRc.roa (hash: 4Kx8qkmvFu9/ph3LEnJvdO/hVDQr2VoTVCm1ptdvoEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:1c:9d:2f:b0:d6:17:c7:8e:1a:f2:26:7a:6a:2a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: May 6 15:00:15 2025 GMT
Not After : May 7 15:00:15 2025 GMT
Subject: CN=d6aeb6ebec3ded4dc3e5ae8cbcf9b3bd3dc89be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:21:9a:c6:2b:a1:ff:13:eb:74:52:61:e2:d3:
04:48:0b:18:cf:d7:b9:3a:a3:d9:33:f8:0a:a6:ae:
51:30:9f:04:be:d0:25:ea:bb:5c:bc:f5:af:1b:dc:
5b:6b:76:eb:12:9c:3a:03:bb:53:e1:b1:85:26:40:
92:15:fc:36:5f:31:4c:52:13:9a:5d:1b:84:af:92:
9c:46:0d:fe:7b:8e:09:ae:70:04:ae:c3:91:be:d3:
72:08:8e:bd:ce:ea:0a:e4:4e:ba:ef:d8:c6:cf:31:
ab:2f:99:04:95:98:0e:af:d3:32:34:ea:ba:70:82:
7b:ed:26:74:65:a7:7d:a3:e0:90:0a:6a:b1:0d:72:
c6:a2:60:cd:94:22:0c:5c:36:c5:99:3a:f1:ab:a6:
0b:94:fe:a0:e5:14:16:bd:5a:dc:65:d1:60:76:57:
a4:91:e9:e7:6a:27:eb:2f:0e:7f:95:6e:6a:09:12:
fe:af:90:a6:80:1e:22:71:a9:7d:a3:6d:52:ac:5e:
9a:d2:4a:d3:80:5a:d4:39:8e:27:38:fd:e5:de:3e:
2b:2f:d8:4d:54:e2:95:d8:d5:be:70:30:85:c2:78:
38:44:0b:79:85:45:3c:8d:c0:fc:d3:ff:e4:72:9f:
56:33:7b:cd:8c:82:f7:2b:d1:05:4c:72:81:89:3f:
0b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AE:B6:EB:EC:3D:ED:4D:C3:E5:AE:8C:BC:F9:B3:BD:3D:C8:9B:E0
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:08:11:53:4c:6d:87:1b:b5:32:aa:ce:68:c6:79:f7:80:35:
b6:3e:9a:76:c3:31:f7:0f:49:c7:7d:8c:53:30:35:00:8b:87:
29:92:5f:72:df:a7:ad:d8:56:4e:df:19:7e:9e:8f:e4:a4:7b:
7d:74:95:18:b4:55:be:d6:91:6e:9f:86:4a:e1:83:1c:d8:65:
8d:56:0e:72:8a:01:ee:e2:81:4d:69:77:94:62:fa:72:fa:73:
7f:32:a4:82:e3:fe:97:f9:4a:be:fe:d7:71:ea:ee:8c:47:24:
a6:81:54:76:0d:ce:e2:de:d1:52:45:c5:f3:76:09:14:f4:55:
3f:5b:83:79:8e:b1:96:43:51:70:4c:e3:0c:84:74:13:8d:c6:
3f:d3:ca:15:8e:46:34:f5:3b:5a:b4:73:fd:56:3d:56:a7:e4:
d7:ff:dc:da:88:ce:61:e9:3d:4e:c5:8b:7f:78:02:22:33:bd:
e6:25:17:e9:01:07:5e:8a:a3:12:30:69:9b:26:3b:b9:5a:06:
54:e6:bc:f4:87:7e:fa:b6:5e:d2:92:bc:dd:19:55:4b:7a:01:
2f:a7:d3:8f:5c:fb:cc:78:86:4b:d0:69:6d:78:f5:05:ef:83:
46:e1:36:7c:59:92:c4:2a:9d:e7:58:2f:0a:d3:7f:fa:53:bb:
5d:97:ba:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:34:25 2025 by rpki-client