
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
File: Clusj7JJCQH6YQSAoFtmNYuRJGw.mft (raw, json)
Hash identifier: 2m5DTHVSF4FvgYUxVRj6rJtXa4YMNjn6AOeiqSbeuNw=
Subject key identifier: 88:1C:3E:8B:FA:E5:F2:32:B2:23:5F:73:74:62:59:9D:96:58:78:5D
Authority key identifier: 0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
Certificate issuer: /CN=0a5bac8fb2490901fa610480a05b66358b91246c
Certificate serial: 019675676CF183DB54989C51268EFDB1A249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 04:00:34 +0000
Manifest this update: Sun 27 Apr 2025 04:00:34 +0000
Manifest next update: Mon 28 Apr 2025 04:00:34 +0000
Files and hashes: 1: Clusj7JJCQH6YQSAoFtmNYuRJGw.crl (hash: gZx+fwcyiWUzKwOaxNF0ZTtY8deKUbhWupurhVUpcZI=)
2: EX1eqOI5AsdzNwXJw_T2K67SKuY.roa (hash: zTp74P0kNRRvfGdIA3tW3Yag+dPiX+7QsxAnkmFBj8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:6c:f1:83:db:54:98:9c:51:26:8e:fd:b1:a2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5bac8fb2490901fa610480a05b66358b91246c
Validity
Not Before: Apr 27 04:00:34 2025 GMT
Not After : Apr 28 04:00:34 2025 GMT
Subject: CN=881c3e8bfae5f232b2235f737462599d9658785d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a0:46:5b:45:8a:a2:9f:ba:00:54:b6:46:d7:
3b:0d:c7:26:58:01:94:ba:a6:44:b4:47:e8:38:73:
af:f7:f2:37:05:5c:a2:89:f1:34:da:36:95:90:7a:
62:86:44:4a:8f:69:bc:86:92:b3:4a:73:c0:f2:14:
98:80:59:87:eb:fc:39:81:b1:f6:7e:6c:d4:c5:37:
55:1c:88:a2:16:6e:a6:c7:ea:e3:98:08:60:31:08:
05:74:a4:dc:d6:97:93:f2:8f:68:26:92:9a:1f:fe:
97:ae:84:af:b1:c5:58:7d:e6:e4:4b:fa:51:a2:4d:
f9:3c:dd:09:0e:6d:7e:ae:6e:57:97:b9:14:3e:72:
37:a8:6a:a2:2a:19:5b:9d:45:d5:97:13:69:be:ba:
a8:6c:65:89:db:00:30:d8:cb:9d:1c:84:a7:ce:19:
d5:57:52:1f:54:cd:19:1d:1f:fa:44:ef:7e:dd:f5:
a9:d9:8b:3f:29:20:f0:7c:e7:be:e5:01:d8:5b:54:
f4:4e:0e:aa:ff:55:9d:dc:53:ad:6b:be:7e:ed:65:
92:52:15:58:74:60:04:02:61:db:9e:c8:b6:cf:59:
17:bc:9b:52:32:e4:c6:5a:c3:67:aa:fe:39:b1:35:
41:d4:2c:70:d5:df:e5:97:a7:18:76:36:5c:34:3a:
69:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1C:3E:8B:FA:E5:F2:32:B2:23:5F:73:74:62:59:9D:96:58:78:5D
X509v3 Authority Key Identifier:
keyid:0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f5:c7:5e:c5:a1:a8:65:9f:01:3d:05:89:07:03:f1:7a:d3:
da:cb:a6:0a:94:f7:46:ad:03:f7:d8:c6:9a:03:fc:13:6b:bc:
54:6b:25:f5:22:e5:75:28:a9:f4:c0:a0:69:a0:77:64:ed:dc:
25:a7:25:dc:b6:6c:b4:48:2c:15:39:81:6d:34:9b:4e:7e:e0:
07:ba:14:2a:c4:d5:f4:8e:85:70:6b:dc:3f:ef:01:e2:a6:f7:
39:44:21:20:1e:90:bd:90:5f:f1:bc:36:e2:f9:6c:a2:80:41:
b0:10:0c:5d:26:7e:a5:ce:0a:b1:d5:9c:73:02:c4:d6:bd:07:
6b:52:3f:e4:63:91:df:14:cc:08:bb:bb:64:5b:24:56:51:20:
1f:e2:ce:b5:5a:d5:4f:cf:20:86:06:9c:45:6f:2e:0d:42:41:
73:ab:5d:19:44:e9:e2:6c:07:3c:11:1f:15:50:1f:49:2f:9c:
e0:44:b4:05:cb:c6:f7:a8:ac:eb:1d:1f:63:66:6d:c2:09:6f:
41:97:c5:0d:0b:71:21:da:77:ae:ac:30:4e:fc:2a:1c:f5:d1:
4d:34:2b:d9:c9:9b:2c:07:6f:46:0e:82:41:10:ea:18:32:66:
aa:52:26:56:3b:c5:3f:58:38:03:d8:76:f6:bb:29:e5:0e:ee:
69:0c:53:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:48:37 2025 by rpki-client