
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier: CoeaDwLAjz7DG5/JeZ8r+fhalFxZwBcAscf0E80I35Y=
Subject key identifier: 3F:4C:FC:38:A1:2C:72:49:D5:98:83:06:17:C8:A2:A0:A7:B8:24:33
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 0196AC1FAF45272F02CDBF902873F82877BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number: 145B
Signing time: Wed 07 May 2025 19:01:19 +0000
Manifest this update: Wed 07 May 2025 19:01:19 +0000
Manifest next update: Thu 08 May 2025 19:01:19 +0000
Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: bJyHYhLT3aTuclnAYWyRSCjTaIlQL2skzhOQTCsy2bU=)
2: 4PwJxAwKax5Reljdgs0YL3qX31Q.roa (hash: UYp5AvhZKwwfeYa3iRTnePJRJNovfCx7buPjdCyUR7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:1f:af:45:27:2f:02:cd:bf:90:28:73:f8:28:77:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: May 7 19:01:19 2025 GMT
Not After : May 8 19:01:19 2025 GMT
Subject: CN=3f4cfc38a12c7249d598830617c8a2a0a7b82433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:a1:39:f1:61:9f:94:e0:9b:08:53:26:19:
7c:b1:51:c5:90:9d:dd:45:d9:d3:39:9e:ac:11:28:
e4:21:97:13:82:cc:fe:54:c7:e0:8e:ab:92:a9:e3:
e6:e6:56:ae:d9:8d:cb:fd:a1:60:5b:e2:a9:42:d6:
59:f5:a0:d7:df:48:f0:0b:db:96:72:0a:b6:ff:5e:
4c:93:7e:bb:56:6c:f0:a8:75:0d:15:b0:28:69:80:
30:60:f5:bb:bc:0a:b3:fb:85:66:49:cd:e9:37:82:
08:8c:df:7d:f8:dc:bd:f3:42:93:d3:95:ca:12:31:
9f:30:88:8d:94:3b:95:04:9f:b7:c6:0e:dd:97:77:
f9:2f:51:01:b9:5a:7c:da:d9:d1:f4:d4:25:9b:e1:
db:b0:b8:c1:69:9d:04:e5:8a:1d:2e:fe:c9:78:74:
4c:3b:81:03:bf:8a:9a:7b:fe:5d:a2:7a:39:d7:35:
18:6e:a1:79:43:0b:34:34:d5:bd:7d:22:fa:1e:3f:
74:14:90:d8:df:b0:43:60:c8:6b:ca:87:1b:f6:1a:
3a:9c:96:51:18:9a:5b:8b:4e:46:dd:56:29:80:d2:
25:81:41:40:25:72:c0:54:a3:79:b4:9f:1f:96:4f:
20:8e:96:bf:46:b3:a5:78:80:ad:77:12:37:37:a5:
1b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4C:FC:38:A1:2C:72:49:D5:98:83:06:17:C8:A2:A0:A7:B8:24:33
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5b:a7:f0:6c:7c:29:d5:cc:a3:af:1a:41:dc:4a:b5:f0:c5:
cf:d4:f5:8c:44:6f:b8:f4:06:76:72:59:8d:41:8d:4e:d5:b8:
28:3d:f4:63:4e:a7:04:02:c1:d6:ea:e1:20:f9:ca:da:5a:66:
11:65:cd:1f:92:8b:dd:e6:ae:e0:9e:79:ed:01:46:c3:2c:ba:
c1:12:9d:78:03:f4:bc:d5:88:16:6a:d1:1c:f7:64:81:eb:f2:
8b:21:5d:2c:24:d4:b3:da:1e:ac:3e:b9:14:0b:14:2a:62:f2:
d2:7c:a3:8e:7b:0c:1c:96:dd:58:3e:c3:41:43:47:9d:e5:24:
3e:6c:d6:75:6f:e7:8b:18:45:c2:6b:7b:5b:c5:b8:14:dc:ce:
67:e8:fb:ba:20:5f:f6:1a:64:dd:7e:e3:83:31:c5:e7:d8:db:
eb:1c:8e:a5:c2:a6:02:00:58:a2:78:d2:04:58:4f:88:40:47:
45:5f:96:00:f7:51:a5:f9:0e:31:c0:db:58:14:fe:03:ba:06:
e4:a1:fd:b5:43:6a:43:45:5f:f9:0d:0d:0d:00:db:bb:19:01:
1e:92:24:3c:21:f5:99:28:b3:f6:72:0c:74:bb:1d:7c:3f:30:
1b:5d:78:d1:74:f6:6e:5c:81:49:50:ea:e1:59:9b:3a:5f:2c:
68:d3:25:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:34:37 2025 by rpki-client