Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
File: CEoFdH74ii68ny-u9iAZ3IfRolM.mft (raw, json)
Hash identifier: t9FQORKctuS0Qsa+3OIn51hMAmmPapUpHfYr1dTaSww=
Subject key identifier: 21:A5:7D:FD:B0:70:3E:2B:76:60:24:F8:31:7B:A1:0F:B0:32:8F:55
Authority key identifier: 08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
Certificate issuer: /CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Certificate serial: 0196827E35AF464772CE2F9575D832E1D312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
Manifest number: 11F1
Signing time: Tue 29 Apr 2025 17:00:31 +0000
Manifest this update: Tue 29 Apr 2025 17:00:31 +0000
Manifest next update: Wed 30 Apr 2025 17:00:31 +0000
Files and hashes: 1: CEoFdH74ii68ny-u9iAZ3IfRolM.crl (hash: QsoOVBeS53/UjVvMmgtp36RgeTSGbFcJrk1Jch1hfkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:35:af:46:47:72:ce:2f:95:75:d8:32:e1:d3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Validity
Not Before: Apr 29 17:00:31 2025 GMT
Not After : Apr 30 17:00:31 2025 GMT
Subject: CN=21a57dfdb0703e2b766024f8317ba10fb0328f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:55:2d:18:03:59:79:b3:88:0b:bc:50:b7:
58:d6:03:bd:7a:62:bd:47:a8:9c:11:ee:57:31:ce:
85:57:61:93:d1:94:96:fc:7d:bd:01:29:e5:69:a6:
ed:34:80:71:42:d7:2d:10:23:de:70:0d:74:d6:58:
d0:4f:cc:05:94:0d:e6:a7:fa:48:6e:4d:e7:83:fc:
0c:55:99:9a:08:06:48:d0:70:59:34:bf:be:5b:2d:
24:49:9c:5d:e1:b1:d0:de:a7:b6:96:5b:85:8e:d8:
28:1d:e9:f5:d5:7a:b5:65:c4:36:ba:4c:e7:98:89:
65:d6:e9:76:87:e0:a7:d7:ed:42:0f:7f:a6:a0:c7:
99:cb:90:7f:ae:09:32:0f:71:ec:41:e4:f8:7e:1c:
8a:8d:1e:2d:eb:39:ba:83:45:3c:11:92:a3:37:75:
7b:e5:04:e1:35:07:7c:25:76:31:dd:56:3c:67:c4:
01:91:cc:01:3a:04:8f:76:28:33:58:bc:ad:dc:9d:
b3:5b:f6:1a:ac:08:a5:63:18:59:e5:f1:c7:c8:b7:
d1:8b:61:af:8e:62:4f:b6:ae:0a:fc:6b:f6:fc:ea:
ee:39:30:7d:4b:98:33:49:34:20:cc:46:42:c8:0f:
0e:ff:5d:7a:37:6f:c4:ad:14:13:1e:c8:db:c2:c6:
45:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A5:7D:FD:B0:70:3E:2B:76:60:24:F8:31:7B:A1:0F:B0:32:8F:55
X509v3 Authority Key Identifier:
keyid:08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:43:73:70:33:2e:47:e3:e9:c7:0c:71:47:6f:0f:04:4d:47:
db:d3:91:ed:3b:2e:65:f4:ed:ca:a0:d7:d5:8b:81:1c:cf:bb:
40:07:01:c8:f6:44:c3:9c:04:5c:e8:43:0e:ac:49:5f:78:26:
29:1a:00:76:a6:af:93:0e:24:2d:4f:72:ac:fa:a6:45:52:1f:
80:df:0c:78:12:60:26:09:e4:b3:24:62:bb:1c:a4:db:d5:c6:
85:45:5a:be:76:77:40:24:c0:fd:c4:56:93:73:4c:27:ee:cc:
29:d7:6b:5c:63:ff:6b:ac:15:07:09:61:18:29:7d:ab:8a:ae:
31:a5:c6:e2:11:e7:70:82:09:41:3f:5c:51:c0:b0:d5:64:25:
d3:ca:2d:ff:f5:cd:a7:3b:74:4c:a3:5d:81:20:67:1e:d4:be:
96:6d:0c:65:be:3e:9f:2f:a4:92:f1:dd:34:63:2c:c2:d4:84:
54:0d:d4:d2:cf:c8:98:34:ae:58:c2:e2:91:53:e3:ac:1c:06:
2a:69:62:59:7a:01:dd:58:b8:b9:c1:a9:88:2e:c0:fa:19:3a:
60:b3:72:1d:ae:80:fa:71:74:e0:c6:ae:eb:b0:4e:5c:48:51:
26:01:61:f9:f5:54:30:84:96:84:6a:a4:80:fb:a2:a9:34:03:
aa:39:ab:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:47:24 2025 by rpki-client