Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File: CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier: oaf8vwhtq+oOpeqHmUqOHLBHoqfxQOxQFVoHCKv3KnU=
Subject key identifier: 5A:A8:09:ED:D7:47:69:EB:7D:11:30:63:3E:82:0D:7C:51:E0:BC:D0
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial: 019682EC1DDBC8DE5366448977B710EB6A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number: 1095
Signing time: Tue 29 Apr 2025 19:00:34 +0000
Manifest this update: Tue 29 Apr 2025 19:00:34 +0000
Manifest next update: Wed 30 Apr 2025 19:00:34 +0000
Files and hashes: 1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: 5upCflxnKdR+p9FeZXg6AlqCvC6vWQhWEVst7jCgTmM=)
2: wkXSNgmrYa8rCdcuzp6T9kjqo9c.roa (hash: PKA5n5GL19/MWS8CZc9zMrpSRD9clDPEtJzbH91PkU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:ec:1d:db:c8:de:53:66:44:89:77:b7:10:eb:6a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
Validity
Not Before: Apr 29 19:00:34 2025 GMT
Not After : Apr 30 19:00:34 2025 GMT
Subject: CN=5aa809edd74769eb7d1130633e820d7c51e0bcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:87:01:63:7d:e8:b3:6a:63:64:c5:a0:5b:43:
81:3f:53:66:f9:09:3b:f7:b7:7f:45:54:f6:40:17:
21:9e:7e:9e:0d:2c:13:34:cf:d8:62:9d:04:68:37:
08:6d:56:7d:93:9f:ce:82:9b:f8:75:11:b6:c2:0a:
dd:b5:1d:68:2e:b4:38:67:82:4f:f0:22:97:54:3e:
88:62:38:20:f4:0e:08:46:c3:c4:4d:80:c8:b3:28:
09:22:78:51:58:94:ea:c6:19:3a:94:49:97:49:c8:
5c:8d:01:da:a9:8d:f4:26:f3:00:53:c6:ab:10:9b:
af:75:38:6d:13:13:25:8c:82:73:56:3e:47:cc:d0:
4e:9f:74:8d:0c:83:10:65:31:bf:7f:7a:e4:ee:41:
7c:1f:ae:e9:69:0e:7c:89:05:44:ca:ab:a0:2e:9f:
c0:60:9a:f1:f9:2b:e8:03:3d:b7:97:14:a9:26:26:
ba:30:a6:8b:1d:68:fe:24:44:12:4a:17:0b:3c:77:
25:0a:93:f9:69:56:5a:b0:09:f5:55:f8:13:a3:96:
34:db:c6:48:6f:e5:c2:c5:a9:3f:8b:52:6c:fb:5b:
c8:50:73:b6:de:88:6b:4e:d3:1d:e9:42:06:34:e1:
fd:82:db:71:4d:b1:f7:12:86:48:e6:5b:8e:61:6b:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A8:09:ED:D7:47:69:EB:7D:11:30:63:3E:82:0D:7C:51:E0:BC:D0
X509v3 Authority Key Identifier:
keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e4:8a:5f:a6:56:cb:b7:8a:41:3e:d9:25:0a:09:60:36:ee:
63:0b:f1:15:4e:52:4c:81:21:8e:6f:94:27:03:ec:84:84:c2:
5e:79:93:02:bb:e5:ec:84:18:1f:76:81:08:14:bd:b0:53:76:
e2:97:a2:2d:e7:63:df:54:61:0d:eb:fd:5d:5a:7e:c2:d0:4e:
37:e9:ad:0b:c4:85:ed:51:24:0e:8d:b0:22:6a:bd:ba:c1:dc:
6b:c3:f6:cf:f9:b1:c4:c9:76:a6:08:20:3c:09:cb:de:7d:4e:
d2:47:8a:b9:30:43:81:2d:2c:aa:35:ce:ee:d8:99:4d:b1:fa:
2b:3f:47:f2:87:31:7b:fe:5a:71:92:90:17:60:57:ef:f4:23:
23:95:99:1e:ea:42:b1:aa:a0:9a:b5:89:3b:0c:6f:dd:1f:5b:
9b:fa:a4:4e:84:57:6f:91:99:e8:64:ad:23:d3:b6:4b:4c:9c:
2a:9d:14:75:c1:aa:e2:45:be:42:32:81:fe:b6:46:e8:45:44:
f6:74:94:05:46:fa:3a:ae:30:93:0f:2e:cf:a4:83:91:8c:8e:
c1:fa:dc:d2:2a:e6:43:c1:35:22:b1:ef:b7:f2:27:b7:64:d7:
49:9f:c2:11:e6:7b:4e:1d:13:5d:76:27:2b:f5:a6:76:ff:83:
f7:80:ed:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:52:41 2025 by rpki-client