Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier: 3NdEPrAne4t8XD8lDqs7AASuAvlE6j9uTPhwnVQU2I4=
Subject key identifier: E6:08:BF:D5:04:67:D8:4F:59:14:BF:51:F7:C5:7E:C3:30:86:1B:07
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 0196CDCFE141BF5071C27390D86ED8CDBC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number: 153F
Signing time: Wed 14 May 2025 08:01:14 +0000
Manifest this update: Wed 14 May 2025 08:01:14 +0000
Manifest next update: Thu 15 May 2025 08:01:14 +0000
Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: /idXQy8rChLPETFQyVM3oNmZjhfkKaLrtjeV0niBdPo=)
2: YHDrFWwxkrS_T2zm-XD8OnCCk3I.roa (hash: ats4DX7q3HbDaXBiSmUVMOKuQb0H1KPc5eA6NgFMmhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:cf:e1:41:bf:50:71:c2:73:90:d8:6e:d8:cd:bc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: May 14 08:01:14 2025 GMT
Not After : May 15 08:01:14 2025 GMT
Subject: CN=e608bfd50467d84f5914bf51f7c57ec330861b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:66:bd:8b:e5:7e:99:44:53:04:f4:5a:12:
cd:7a:85:36:e2:27:51:5b:58:5c:15:ce:67:5c:28:
6e:2f:39:ea:89:ef:d9:2e:65:49:37:c0:bb:b3:17:
01:30:b2:a9:78:53:d6:44:93:21:60:c2:f3:65:90:
7a:27:cf:67:0d:a9:53:77:4f:3b:5d:79:95:52:1c:
41:4f:65:83:e9:27:b8:c0:39:85:df:b1:46:aa:69:
6b:e2:9a:70:a3:a4:89:30:ae:af:90:b0:66:bd:81:
f9:89:15:aa:09:48:63:1d:60:36:e5:16:97:6c:1a:
e0:2c:a0:05:1f:5e:2b:ec:45:63:e6:fd:44:45:49:
24:05:32:ee:66:ea:ad:e0:06:81:13:7b:af:7f:17:
c5:07:85:ab:ba:10:7d:4a:a5:18:d6:70:4e:86:53:
5e:04:d9:a2:f0:6d:37:49:73:f1:6d:c4:a0:bf:03:
67:de:79:92:a7:a4:39:66:fe:1f:d3:f7:39:92:20:
4c:e8:6e:93:0f:3c:7b:80:e5:4c:e7:5a:8f:99:39:
2a:5a:76:ef:f0:ff:42:b8:63:c6:ff:63:4d:28:60:
be:27:db:79:75:39:83:62:35:72:21:5d:c2:b1:b9:
65:81:dc:7f:d2:41:37:e4:d1:75:90:41:9b:da:c7:
6b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:08:BF:D5:04:67:D8:4F:59:14:BF:51:F7:C5:7E:C3:30:86:1B:07
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7c:9a:82:50:c5:bc:36:ac:9f:46:4b:42:55:5c:87:89:ca:
15:e9:67:5e:f7:ac:f9:e8:54:17:6c:dc:94:94:70:14:4d:7b:
ca:02:aa:22:b5:64:d4:63:95:66:42:84:f1:ed:1a:0e:f9:6b:
18:4c:67:28:69:fd:47:33:4f:0a:7d:a2:f4:db:d1:3d:b2:27:
6e:87:f5:16:42:32:36:65:4d:4f:ed:51:ef:39:af:26:15:63:
63:97:eb:c0:07:4a:7e:14:3f:7f:7b:d8:35:7d:14:be:93:fa:
8d:bd:2b:a2:bc:dc:01:dc:7a:17:0a:aa:11:27:ca:4f:1e:7a:
3c:df:36:0e:90:97:bb:fa:31:a6:f1:f0:3e:f2:82:c1:eb:c7:
fd:80:e8:5d:de:d5:a6:7e:f3:5a:25:1e:c5:66:d0:23:a6:10:
4b:98:b0:85:02:49:21:15:19:cf:02:f6:46:4f:03:f8:34:50:
5e:70:1a:b7:8e:27:ee:90:6f:e3:74:a5:a7:c7:5b:ee:fa:fa:
b2:72:89:27:d7:4b:96:cc:7c:46:44:7a:d0:84:8c:1f:2d:96:
67:ca:b4:b7:54:da:f6:44:47:79:c3:a5:ab:65:ba:ee:61:28:
01:fa:9f:df:65:5c:d3:4f:4a:b4:8f:51:0d:11:b8:49:fe:15:
a3:83:4e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 13:29:14 2025 by rpki-client