Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier: 9CBlmNI8OerVuw/pP6QcD/F2/qMYsiV3LV7lF4vT6FM=
Subject key identifier: 6C:3E:C1:30:DA:1B:E4:7F:A1:F6:25:6A:8B:A1:A7:A4:37:9E:8C:71
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 0196CB051C171A69479E2619378AE6F3E060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number: 153F
Signing time: Tue 13 May 2025 19:00:31 +0000
Manifest this update: Tue 13 May 2025 19:00:31 +0000
Manifest next update: Wed 14 May 2025 19:00:31 +0000
Files and hashes: 1: 1OOgCvrkMSPlJGXfwud-L77F8RQ.roa (hash: OfGMkg4R8dFeR/FCs55Nk0J17chraeTKhOgexIz+stY=)
2: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: PWty+8mzB8GUJIt0sekUBf9H/wvTAba4EkZtl5AepOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:05:1c:17:1a:69:47:9e:26:19:37:8a:e6:f3:e0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: May 13 19:00:31 2025 GMT
Not After : May 14 19:00:31 2025 GMT
Subject: CN=6c3ec130da1be47fa1f6256a8ba1a7a4379e8c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:45:65:18:18:0e:81:d6:47:ab:bf:45:b5:
05:63:bf:ef:73:e4:51:11:17:a7:69:71:3d:b3:1f:
71:0a:6c:f1:8f:c2:70:20:91:98:a5:8b:4a:02:3c:
6d:0c:e2:5f:37:fe:e7:c2:c2:ca:52:8d:7e:c6:28:
e0:90:a3:fa:45:a8:11:66:12:29:12:c3:15:f7:5e:
33:0c:0b:ac:29:34:ac:2c:c8:6b:6d:83:4c:96:a6:
1f:2e:8f:38:6c:12:a0:1c:35:fd:c0:b4:e5:19:b1:
ec:63:a3:fc:37:ce:24:ea:f4:e9:0a:9e:64:c3:ec:
00:a7:be:e4:40:60:ad:44:16:43:9b:64:c9:05:3b:
97:7b:18:43:77:d3:b7:ea:2c:52:28:52:36:76:a7:
02:05:46:0f:d7:14:fa:83:f2:6b:86:7a:50:5f:1f:
b1:df:04:be:cd:9b:87:39:ac:12:10:0a:fa:b3:11:
0b:e5:54:ed:e9:79:a8:e6:a1:a9:b6:7f:34:2d:77:
53:35:12:bb:6f:44:71:ae:c4:4d:fe:5b:f0:48:b5:
42:7a:9b:fd:aa:0d:bb:a8:b4:1e:5e:31:3f:34:d4:
de:03:4c:dc:91:c4:6c:a9:16:d6:7a:ce:ca:42:03:
e4:e9:38:c7:7d:ba:c0:18:28:87:fa:44:54:92:bf:
32:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3E:C1:30:DA:1B:E4:7F:A1:F6:25:6A:8B:A1:A7:A4:37:9E:8C:71
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1f:89:bc:33:f8:1c:72:32:57:34:2e:84:62:6e:cc:46:0c:
5b:9a:e3:a7:54:a9:7c:18:38:f1:55:d4:22:66:6e:8b:c1:99:
3a:e3:a7:a8:39:ae:44:f1:04:c8:92:a3:92:30:b8:f0:85:86:
0d:23:a5:be:70:f6:43:0e:be:85:50:b6:43:8f:a1:88:b0:66:
ac:67:24:52:d7:d8:da:70:5b:32:d9:eb:62:23:c3:55:31:c0:
f8:8a:a2:40:03:6c:58:a0:fc:05:45:75:b1:5b:1a:9c:07:be:
c6:f3:7a:d0:37:e5:67:3b:ff:fe:b0:1d:26:60:61:a4:ee:40:
cc:46:17:fb:5d:f3:39:d4:7d:1a:65:8f:4d:e0:29:dc:e6:55:
b0:72:22:85:b8:a3:6a:30:c9:b1:87:99:0f:80:f7:30:91:39:
02:ad:25:6e:d2:5d:29:a8:7a:30:a5:e1:99:47:a2:95:80:8a:
9a:45:42:b4:06:49:91:ac:e9:7b:46:bd:52:7f:0c:ed:da:15:
94:03:02:0a:aa:ea:27:f1:bf:4d:ce:cc:84:79:8e:2a:d6:d9:
10:96:e4:86:65:bb:ac:94:38:98:f5:2b:94:22:cd:8a:e6:1b:
25:12:8b:ca:83:f7:ad:e3:91:53:4f:4f:9a:b7:fc:1a:5b:68:
70:4d:04:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:20:38 2025 by rpki-client