Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier: QNlwdJXTOWMjzXcsauyGi+UMlt+Bj8vWt9VIra0ytqw=
Subject key identifier: FC:D3:A9:47:E6:CF:7D:7D:0D:D3:83:A4:08:08:DA:86:FB:79:73:F6
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial: 0196AA30D8B888F05E4864ECEE1AC247E91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number: 021D
Signing time: Wed 07 May 2025 10:00:50 +0000
Manifest this update: Wed 07 May 2025 10:00:50 +0000
Manifest next update: Thu 08 May 2025 10:00:50 +0000
Files and hashes: 1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: agUDCpoInuigB9FMrDi7hb83gsRcNuOLFsmfKsTnF9c=)
2: oDzw6scHjTvVUxNbd-QUot4DsM0.roa (hash: wtt4piWURYUGaUVkeFPj0sScj6sbR4E+qyw2r+vT/ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:d8:b8:88:f0:5e:48:64:ec:ee:1a:c2:47:e9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Validity
Not Before: May 7 10:00:50 2025 GMT
Not After : May 8 10:00:50 2025 GMT
Subject: CN=fcd3a947e6cf7d7d0dd383a40808da86fb7973f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:46:cb:2d:fa:07:9c:60:de:d9:3d:98:37:db:
d8:0e:2a:47:0d:40:aa:ee:43:0a:55:93:80:0e:a0:
2b:15:22:ec:69:fd:cc:cd:b8:a8:a7:bb:a0:66:ce:
4c:02:ce:76:bc:42:80:71:9e:45:b4:2f:62:d4:4f:
8a:c9:f0:35:3c:03:e3:af:15:60:f8:6b:15:18:d5:
00:c1:ca:08:13:e2:cf:1f:81:43:27:22:df:37:39:
da:52:9e:ef:4d:72:7c:df:b8:46:d1:73:d5:e0:af:
a6:ad:f9:a4:a7:c1:89:4a:7b:a0:e6:b7:c8:1f:7d:
6b:62:2d:d9:cd:82:1a:ab:f5:74:ec:f1:a1:03:be:
ee:24:71:14:f4:6b:d3:35:24:0a:98:c3:a2:62:9b:
e5:b1:b2:66:86:fc:0d:a8:3e:36:f3:54:52:5a:15:
6f:fa:35:55:75:86:e0:11:00:c3:de:45:fc:ca:09:
d1:9b:c2:c2:4a:a3:ff:87:c2:33:ac:fa:e3:db:dc:
0a:8f:1c:e5:5c:83:6a:0e:b6:bb:82:27:5d:2c:53:
30:5d:20:8a:d5:9b:6b:18:f7:db:6c:de:d6:d5:d2:
bf:2e:4c:9d:56:05:56:4a:96:6d:0f:7f:79:b9:fe:
54:30:6a:86:5a:19:59:01:4e:63:30:42:39:bb:50:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D3:A9:47:E6:CF:7D:7D:0D:D3:83:A4:08:08:DA:86:FB:79:73:F6
X509v3 Authority Key Identifier:
keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4a:6d:56:fd:21:a0:66:5a:7f:e0:c6:1c:f6:82:31:95:56:
ac:58:ac:40:1e:29:eb:a6:34:05:83:52:70:18:7d:2e:ec:4a:
a1:25:bf:70:eb:85:cf:74:b9:c8:07:1d:d7:8a:c7:5e:7c:d8:
59:ea:42:9f:9b:dd:ba:94:de:b8:3d:8b:1d:b4:ae:d9:ae:17:
66:84:f2:a7:5e:4f:95:40:46:e4:e2:f2:dc:eb:af:0c:e1:c5:
e8:32:ea:e8:84:eb:8b:bf:f5:ef:1c:f5:22:76:52:3c:61:e0:
d1:d1:17:d8:31:19:3e:0a:ee:d9:e8:3a:c7:b6:8c:1a:ae:01:
83:4f:9a:d2:64:55:23:45:72:ec:eb:0f:95:0c:dc:93:02:5c:
46:0c:16:41:bf:32:5e:dd:f4:11:e4:cd:6c:bf:1f:7a:1a:33:
a6:eb:65:f8:91:24:bb:38:a4:54:89:99:3d:f4:13:48:f6:9e:
45:a7:72:64:cc:7e:f3:fd:6d:b6:62:25:55:0b:61:38:70:8d:
39:76:34:c0:e7:0b:11:0f:27:88:da:a7:d4:23:64:00:f0:7b:
97:cb:76:e0:9d:aa:a2:92:5b:c0:31:1f:da:8b:8c:95:cd:14:
e9:5e:26:75:bd:2d:68:06:31:b1:f5:2d:7c:30:f6:07:ef:b9:
99:b2:3a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:01:52 2025 by rpki-client