Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: 9fbJLZeCyubxMzI6XqAIjM+yfxHSxel9gTOot8a32ak=
Subject key identifier: 29:C8:13:B1:92:F5:B1:29:35:94:2E:CC:36:0B:7C:E9:3C:5D:BE:CC
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 0196767A1F14D8A641B9E39AA7DE3566B41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 07A4
Signing time: Sun 27 Apr 2025 09:00:36 +0000
Manifest this update: Sun 27 Apr 2025 09:00:36 +0000
Manifest next update: Mon 28 Apr 2025 09:00:36 +0000
Files and hashes: 1: 9T-K1Qm3b8gpXgz9zJRHreyTvgM.roa (hash: dWSzFCZcssBKJcBODdxFw6oV27vvhXKSqLYxiGBOtGQ=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: 3Ohht9IQ2dIja4DvrghnnreNip3pFjrXePtRn3uY4j4=)
3: hEhkAm4wvhKI8lm4TouQ913BI64.roa (hash: QBQPmns85EKoDttpiWLYZhYuUsat9iVL0D6w2NFPGj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:1f:14:d8:a6:41:b9:e3:9a:a7:de:35:66:b4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: Apr 27 09:00:36 2025 GMT
Not After : Apr 28 09:00:36 2025 GMT
Subject: CN=29c813b192f5b12935942ecc360b7ce93c5dbecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:45:25:76:ef:24:3c:2f:3f:19:6c:1f:fc:b5:
09:57:3f:0e:e9:bd:45:2f:ee:f0:67:5d:e7:98:c8:
89:69:4d:60:5a:43:36:5f:cb:58:61:d1:ab:68:e9:
b4:a7:eb:e3:12:a5:49:72:16:3f:fc:3e:b7:fc:14:
6a:47:70:3f:5e:85:25:72:6a:0b:da:01:49:d6:7f:
9d:28:17:26:f6:98:2f:eb:89:74:99:e5:97:ff:20:
e1:5f:4c:1a:88:f9:37:3a:3c:5b:b8:10:b0:58:e7:
33:91:36:45:35:01:0f:9e:8c:b5:96:0c:10:fe:f6:
f5:ae:10:d2:8c:f0:7e:73:92:28:71:f7:cd:14:af:
8b:64:b1:64:c9:d9:8a:c9:85:30:f6:fb:b8:42:79:
62:58:22:14:49:95:f1:dc:23:45:34:1e:9f:b2:b3:
04:e9:ad:86:20:b4:e6:49:49:41:ee:98:7b:72:48:
23:19:da:53:d9:3d:91:18:6d:fb:74:bd:d3:9d:fe:
ac:5a:de:b7:5a:0d:6d:76:01:18:ff:04:10:e7:5d:
6c:70:45:ca:e5:0f:72:ac:d2:78:fe:2d:b9:ee:1d:
2d:79:96:42:ad:00:74:ca:b9:16:f0:31:64:76:c1:
61:b9:b6:d3:b4:73:76:60:4d:b3:03:50:39:83:03:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C8:13:B1:92:F5:B1:29:35:94:2E:CC:36:0B:7C:E9:3C:5D:BE:CC
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:de:04:f7:b9:4d:dd:2e:3c:c7:9b:57:34:95:3e:3c:b4:ac:
b3:47:53:0a:ca:35:05:b8:68:b6:d8:a2:bd:0a:ef:8d:d6:f0:
fb:fe:4d:40:a2:69:cd:cf:16:49:70:41:01:fa:3b:2c:0d:1f:
37:c6:fa:b1:44:11:ba:26:27:0e:0e:8b:73:ca:4e:b5:f4:bb:
a7:b7:f5:0d:74:61:9a:3f:6a:05:38:a5:23:84:79:b7:dd:5c:
a2:03:48:25:71:cf:cf:35:81:ed:0a:50:1f:d8:f9:53:9b:fa:
44:f6:36:f6:23:a7:05:8c:7f:e4:dd:9d:8d:67:8a:ab:2c:e1:
59:61:b8:99:55:b6:d0:ab:4a:e3:4e:ba:54:e8:af:4f:fd:91:
61:d3:e9:40:9c:b7:ee:a4:6e:70:fa:08:d9:1f:f5:e9:d3:6c:
19:da:7a:0e:c1:55:87:27:dd:a3:90:b8:e8:70:69:be:57:5f:
c4:8c:81:b3:1d:cf:be:0d:36:e8:df:a5:8f:07:69:13:10:f0:
2a:d3:2d:34:08:98:8a:83:b5:1f:a0:6c:ac:ea:5d:e7:d0:56:
14:d1:19:e8:b7:8b:1f:bd:f1:c5:e7:fa:ce:7c:60:bb:0b:a6:
74:51:41:3c:d7:6d:09:71:f6:c8:85:da:da:45:e9:b9:bc:ec:
49:63:22:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:46:30 2025 by rpki-client