Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
File: C-1D9AnLNc6153tW0LvJpMwtJpM.mft (raw, json)
Hash identifier: m13w+/3qEsU7jbIM3LuwBjKNVHXy8tYY9aSXmshwIQ0=
Subject key identifier: 36:85:0B:AB:23:BB:39:8D:22:DD:33:8E:41:96:15:5C:BA:81:02:5B
Authority key identifier: 0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
Certificate issuer: /CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Certificate serial: 01969F75D84A3D4FED7A90C28B60108E805E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
Manifest number: 14B1
Signing time: Mon 05 May 2025 08:00:22 +0000
Manifest this update: Mon 05 May 2025 08:00:22 +0000
Manifest next update: Tue 06 May 2025 08:00:22 +0000
Files and hashes: 1: C-1D9AnLNc6153tW0LvJpMwtJpM.crl (hash: 2UmJiTrXbWBDFoCzDtNopMnR365q6GBKrofbkaOD2jE=)
2: sBhtRIsrLGDcCHm1OuhjaCUr2_0.roa (hash: Ua22PTmfzyT5DTnVC3xgijxYiy9LNm1nh8SzeYUTwDc=)
3: sZiCl9lv80fsle91xuU3_BKnt_s.roa (hash: FzOmDkg8UvmI+LcJN7K+9dJBFFV57UBgPrTOJAC0yec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:75:d8:4a:3d:4f:ed:7a:90:c2:8b:60:10:8e:80:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Validity
Not Before: May 5 08:00:22 2025 GMT
Not After : May 6 08:00:22 2025 GMT
Subject: CN=36850bab23bb398d22dd338e4196155cba81025b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:9e:ba:52:4e:c6:36:b7:da:84:9b:ec:96:
30:40:55:ff:8c:7c:cc:f9:ca:1e:b7:d0:d6:ed:50:
d5:34:c1:08:fe:2e:67:c3:19:61:9d:4d:de:a4:13:
15:49:41:e8:84:14:6e:fd:52:ac:c1:2b:ce:5d:22:
10:71:88:9c:49:60:94:55:e8:bd:e9:21:0b:12:59:
dc:39:46:1f:ab:16:4b:37:f2:3f:e5:41:3b:05:c9:
c9:fd:c7:6e:53:d3:b8:7f:d0:1f:39:9b:47:7a:dd:
28:78:02:ec:f1:6a:78:46:fb:b3:90:7c:33:c6:26:
40:d8:e6:ab:29:ae:18:31:53:8d:8e:b8:24:53:63:
78:c7:30:60:37:51:30:80:ab:8c:b6:1b:47:53:a7:
de:4d:13:3f:72:59:ff:dc:17:58:f4:12:d1:8f:7b:
e4:91:d6:40:a4:d8:50:30:ef:18:72:86:c8:87:4a:
8a:c0:24:b6:f6:4f:7a:70:f1:f9:dd:d9:93:ab:cd:
24:f4:68:07:f7:1a:ba:aa:15:90:1d:0c:a5:26:2b:
d9:ea:d8:93:dd:8c:7d:78:96:9a:6a:38:ae:5f:84:
e6:df:5c:6f:a8:27:70:1a:9b:be:d2:95:b1:26:ed:
bb:eb:39:b4:73:5a:82:02:bd:39:65:a6:c4:36:98:
be:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:85:0B:AB:23:BB:39:8D:22:DD:33:8E:41:96:15:5C:BA:81:02:5B
X509v3 Authority Key Identifier:
keyid:0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:63:10:30:b3:40:81:1f:46:c2:a6:4f:60:62:44:fe:85:0b:
e7:24:4c:37:41:05:40:06:1b:75:05:33:26:7e:39:eb:49:41:
48:63:f4:8f:50:d4:4a:dc:11:71:e4:eb:b1:f7:4c:4a:0b:85:
8d:1a:19:5b:7f:52:cf:29:43:8b:04:aa:8c:45:58:51:49:c8:
2c:ec:e4:b2:e5:bc:06:90:57:3d:3b:69:76:a4:bc:45:ef:b2:
8d:43:34:8d:5e:ef:90:5e:a4:1c:f0:97:eb:62:90:45:21:cb:
78:34:32:21:36:07:2f:71:44:56:5a:40:20:26:d8:d6:c2:b9:
32:75:e7:b1:b4:53:0a:e7:d3:a4:94:57:40:37:a4:f5:48:09:
a2:aa:bd:75:91:8d:a1:2b:50:c5:82:1d:64:b7:60:24:ff:47:
a9:dd:fe:b7:71:a8:06:5d:a2:da:35:16:92:5c:cd:c4:22:4d:
14:d9:5c:97:cd:c0:43:1f:ce:25:09:ca:d2:b3:34:61:84:77:
3e:89:bc:ad:d3:8a:0e:87:13:00:75:89:ec:b3:8d:14:f5:f7:
f3:af:7b:f0:b4:fa:5f:f7:3f:54:0c:4a:1e:74:1c:f0:ed:52:
53:77:fb:84:1b:15:a4:8d:da:17:04:93:f3:eb:4c:8c:d0:bb:
c6:d3:98:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:19:53 2025 by rpki-client