Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
File: Cr193OT9cDvD-8r8G11Xfhp1dXU.mft (raw, json)
Hash identifier: 6qklLt9SzgjjZr+xBQ09Jm4aK564ogvM4qhCssSCHSg=
Subject key identifier: 86:EF:A4:5E:EA:BB:01:38:2D:4F:11:C1:D3:5B:11:F6:0F:89:A2:A0
Authority key identifier: 0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
Certificate issuer: /CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Certificate serial: 019676B1251DDF6BFED67028B0A58A8E3D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
Manifest number: 12D6
Signing time: Sun 27 Apr 2025 10:00:42 +0000
Manifest this update: Sun 27 Apr 2025 10:00:42 +0000
Manifest next update: Mon 28 Apr 2025 10:00:42 +0000
Files and hashes: 1: AWRVDrJmsEsB9Z159jyFngqyGLE.roa (hash: DirE8id/agwWNhmtyshobBEdAnWhXbNRd3+Zdg4CPc0=)
2: Cr193OT9cDvD-8r8G11Xfhp1dXU.crl (hash: f/Q1SDZ0UlkHNbXH8uYcYlGUqVSYnUVLCo7QG4G8Nn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:25:1d:df:6b:fe:d6:70:28:b0:a5:8a:8e:3d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Validity
Not Before: Apr 27 10:00:42 2025 GMT
Not After : Apr 28 10:00:42 2025 GMT
Subject: CN=86efa45eeabb01382d4f11c1d35b11f60f89a2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:70:3c:2b:88:f6:0b:bd:06:70:06:1a:36:
cc:ff:94:e1:5a:e7:a4:c2:66:12:87:0c:80:9e:10:
a5:c6:0f:f6:60:b8:55:f7:3f:c1:4f:d8:f5:ce:bf:
9f:17:17:7a:f5:0a:4c:73:c3:bf:db:1a:00:98:ce:
8e:b5:39:4f:7f:79:2a:0f:cb:44:94:a6:66:07:33:
2a:90:fa:f3:ae:f9:26:2c:86:5d:81:0a:83:d5:41:
e5:51:75:52:ac:4b:32:63:e5:17:e9:80:d6:d3:a1:
08:b7:38:90:0e:3a:9b:92:a0:31:a5:4e:f7:85:94:
a2:64:f8:30:18:19:f0:bd:99:ef:5a:78:27:f2:8a:
78:0c:88:e4:f8:db:d2:11:c5:0f:5e:ba:55:3c:da:
0f:dd:93:e1:23:85:e1:f9:43:13:67:eb:d6:53:57:
11:f4:5e:67:3f:6e:fe:84:5f:6e:8b:7f:49:46:aa:
ec:94:dc:d6:5f:e8:21:df:17:3e:33:be:db:31:11:
c7:9b:fb:07:8a:42:1a:cd:2c:29:7d:67:dd:ed:ce:
3b:77:30:5c:a2:16:19:c3:5c:c7:6b:10:7e:10:2e:
6d:c1:eb:20:56:03:11:41:2a:cd:81:a3:5e:db:d2:
a9:1f:39:8f:8f:83:7c:d7:69:c3:13:a7:29:2c:1c:
51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EF:A4:5E:EA:BB:01:38:2D:4F:11:C1:D3:5B:11:F6:0F:89:A2:A0
X509v3 Authority Key Identifier:
keyid:0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:56:d7:b9:2c:07:7e:ac:be:5b:78:06:db:94:7d:e6:5f:b5:
12:be:de:2c:38:97:2c:15:1f:75:50:de:82:52:06:42:9d:5f:
a2:c4:40:8e:11:c8:3b:8d:dc:d3:db:e5:ca:ad:95:97:23:e9:
62:3e:2d:cf:5d:fd:a8:7f:6e:2d:bb:70:c4:30:f8:0b:ac:95:
0a:cd:5d:92:07:74:72:51:7e:d5:7a:91:9b:0b:8d:48:7a:4f:
5d:0e:f0:78:f7:ca:98:4e:a2:7b:a9:66:c0:a9:23:d6:31:bd:
69:b6:af:71:0f:00:84:3f:e9:87:67:0d:c4:6a:91:88:72:99:
c4:13:ff:d8:1e:fb:aa:70:bf:18:63:cc:8e:8d:29:b0:21:51:
5e:b0:a8:29:58:63:be:e2:ce:73:0b:a8:57:90:08:f4:bb:28:
a0:31:80:f9:d8:89:2f:c5:58:4d:35:17:b8:5f:94:ec:c1:f8:
65:3a:f2:3f:8f:11:aa:5a:92:bc:c7:eb:6c:ff:ba:0d:d3:45:
04:ac:8c:d2:ee:c4:f4:4e:3f:38:4b:90:f2:9a:8f:89:ec:a7:
a4:6f:c9:38:89:31:22:12:a2:d1:4c:42:9e:d2:41:5f:77:77:
24:c8:23:d3:d3:8e:c6:08:5c:52:95:d1:aa:a9:67:a5:85:27:
c1:bd:f4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:56:09 2025 by rpki-client