Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
File: cHjnVjWgncwD9iWoC_pVKyLjZiw.mft (raw, json)
Hash identifier: L/BeWlIltgmvxH2AIszn0s7JY3BF7APxyh5J4yQfCvY=
Subject key identifier: D3:B6:4C:0E:5D:9F:1A:52:5C:E0:A9:E4:C3:9E:20:69:1B:84:B7:40
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial: 0196AB7A1B5C5346D4B5C6B9E57875E716B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
Manifest number: 0969
Signing time: Wed 07 May 2025 16:00:28 +0000
Manifest this update: Wed 07 May 2025 16:00:28 +0000
Manifest next update: Thu 08 May 2025 16:00:28 +0000
Files and hashes: 1: cHjnVjWgncwD9iWoC_pVKyLjZiw.crl (hash: P9WvBzgoULofZkbMQMp33MGaJ8Tvo6Fb0bOQLGJ7QXo=)
2: iTTW-6mQkAe_ptbEUsV9bdJZhbM.roa (hash: IaZjtmRfbfeEiXlxoZz2N565FeKeU2Yttq1mO64u+IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:7a:1b:5c:53:46:d4:b5:c6:b9:e5:78:75:e7:16:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Validity
Not Before: May 7 16:00:28 2025 GMT
Not After : May 8 16:00:28 2025 GMT
Subject: CN=d3b64c0e5d9f1a525ce0a9e4c39e20691b84b740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2a:7b:0d:67:8d:0b:d7:35:04:7b:7f:6e:d4:
0e:49:12:f4:71:e4:9f:31:97:1f:95:16:6e:ae:80:
d0:94:d5:ef:a3:da:52:a8:70:8a:9a:bd:fd:fe:3b:
25:4a:6b:f4:f8:c5:41:e6:b0:bb:24:c7:34:1d:d8:
3b:8a:76:af:7c:1b:53:07:d1:71:c2:b4:88:c8:e0:
e4:e6:aa:9e:06:a5:c7:0d:9d:8f:5a:28:43:f5:2d:
f0:42:aa:ac:bc:20:fc:6d:cf:87:4a:84:b9:ad:2d:
15:92:31:20:b6:91:92:c4:d1:da:33:8c:36:30:52:
07:6a:70:36:7c:51:7f:bc:bd:8d:80:39:63:da:2c:
37:a1:e1:75:40:7c:30:da:fc:e7:5a:e8:71:01:1f:
7a:79:f6:58:70:2f:f1:b7:35:90:0a:50:c1:89:12:
5d:0b:07:c5:03:68:10:2f:81:19:bd:96:2e:b2:cc:
47:f4:a2:50:0e:9c:88:e0:6a:0a:d0:00:b1:66:3a:
50:2e:9b:4e:b6:4d:21:3f:f3:ce:de:6f:0a:c3:ef:
d8:13:9e:e6:f9:34:76:7b:8c:b4:33:76:0b:ca:63:
01:c0:06:ca:a0:d9:d3:f9:39:de:ba:51:3b:8f:89:
63:d4:ef:09:12:ed:5e:8d:b2:7a:a3:25:36:6c:d1:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B6:4C:0E:5D:9F:1A:52:5C:E0:A9:E4:C3:9E:20:69:1B:84:B7:40
X509v3 Authority Key Identifier:
keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a5:a9:2c:23:55:54:4f:93:70:fe:52:7c:c7:d5:3b:87:f1:
d9:21:a8:71:08:15:f3:db:ce:64:1e:5f:ba:2f:90:7f:1a:35:
c4:29:02:0f:b7:b7:1a:5b:d0:ca:3f:1a:6c:22:c1:11:73:48:
6c:f3:97:92:64:ef:9a:ec:92:17:9b:60:72:db:47:69:59:6a:
5c:49:21:a1:00:6f:f4:d0:28:11:38:99:41:cc:e1:13:67:cc:
9e:20:c2:b9:d7:78:4b:2f:9d:79:56:d5:b0:19:5d:66:5d:39:
de:06:8c:8b:7b:db:ec:ec:fa:e2:ee:44:73:8a:10:6b:b1:e9:
ae:ec:04:01:7c:6a:71:6b:4b:f5:de:76:05:63:0a:29:2d:dd:
8a:25:b8:94:eb:b6:be:8e:9f:13:f0:0a:fb:5d:2a:10:9a:b4:
84:7c:1a:54:36:d0:e2:31:e9:ff:bf:d3:5a:84:8a:d3:8e:1a:
9e:76:dd:0c:86:5d:f8:f9:28:65:dd:c5:ee:50:8d:f2:68:0a:
a1:7b:c9:5e:0b:43:4b:83:d8:87:28:dd:9b:85:02:7e:98:ff:
4a:be:a1:aa:5f:b7:87:a7:fc:97:24:70:65:ac:3d:8a:6f:c3:
10:c3:ff:32:a6:f4:ae:22:f9:7f:e2:45:b3:c4:6c:a1:79:f0:
87:be:44:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:53:01 2025 by rpki-client