Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier: tFG9zRjLgDJoGuj02C2LGvWYOGwDOoz1Cs7I9KUE0zk=
Subject key identifier: E4:DF:85:3B:0B:E0:DE:D5:98:BD:56:C3:1B:50:CF:20:56:3D:EA:D7
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial: 01967755A2AB547ED57B2F996E013EE9B7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number: 0153
Signing time: Sun 27 Apr 2025 13:00:22 +0000
Manifest this update: Sun 27 Apr 2025 13:00:22 +0000
Manifest next update: Mon 28 Apr 2025 13:00:22 +0000
Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: RBliFiYxZ2hxeKD4UAWY7xMB1Uy84PWJKkHR1FwCr7c=)
2: lVxazzssSIQktTuekaP8gaWWHmA.roa (hash: XZofJOcbbYfDn8B1ukHfJuS3+okkzKxPP+y/thGcTl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:a2:ab:54:7e:d5:7b:2f:99:6e:01:3e:e9:b7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080702932802c2743d335f67d47a4238c3324533
Validity
Not Before: Apr 27 13:00:22 2025 GMT
Not After : Apr 28 13:00:22 2025 GMT
Subject: CN=e4df853b0be0ded598bd56c31b50cf20563dead7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:ee:a8:16:ad:49:b2:67:44:29:34:c6:88:
13:53:8d:96:5b:22:00:60:81:e7:87:0c:aa:51:a1:
33:2a:95:a7:d6:32:1a:e9:83:60:44:6f:d3:64:d3:
9a:64:58:9a:c9:5d:5f:a0:c8:d0:95:1f:c7:3e:d9:
78:bd:ff:72:d3:30:28:e6:f1:2a:06:7f:e1:30:17:
21:3f:75:e5:03:f5:9a:de:b1:b6:a0:49:7e:a0:ed:
2f:4c:33:77:16:c8:79:59:d5:98:2f:05:9d:af:a9:
ba:14:2c:04:87:60:48:8e:c1:69:16:ae:f3:76:ec:
ff:50:97:5b:1d:ef:4d:e9:7f:1d:04:19:b0:98:08:
10:7f:2f:5d:80:0b:5c:cf:e5:d9:de:e8:3e:e6:67:
1b:03:a4:a4:48:53:4a:4d:36:54:0b:89:08:f3:75:
f5:ae:15:a7:f3:ae:84:69:d7:2e:94:a8:71:08:02:
f4:fa:e7:1a:54:b8:bb:98:8f:5c:8a:1b:a1:fd:5a:
f8:53:f2:35:d2:0a:79:fe:37:c8:5b:e6:05:62:63:
59:5a:21:a7:4a:a6:50:82:09:4a:1f:75:b6:71:a6:
dc:73:f8:d4:dc:41:24:52:c1:1f:cc:84:ea:75:6d:
18:6c:ad:5f:4d:fc:92:a2:60:1e:74:74:31:7d:f7:
e0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DF:85:3B:0B:E0:DE:D5:98:BD:56:C3:1B:50:CF:20:56:3D:EA:D7
X509v3 Authority Key Identifier:
keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d6:1b:c8:e5:1b:30:aa:6d:84:47:3e:2f:4d:69:ed:2e:88:
86:7c:7e:6e:b1:26:3d:37:f9:3c:da:55:01:93:82:af:a6:e4:
ed:fa:10:d6:4e:f7:cf:49:51:b8:83:b3:35:33:dd:ad:44:80:
28:70:49:2d:d7:fd:dc:bf:15:04:d3:2a:a8:82:13:55:c8:59:
bc:10:14:ca:05:5c:48:ae:53:e3:92:70:75:bf:21:17:21:47:
6f:eb:84:21:ed:0f:09:1f:30:a4:de:59:ee:88:71:94:d1:e8:
f2:aa:29:07:b0:90:ef:4b:ea:05:fb:93:df:e1:c5:87:04:d9:
5d:bc:03:e0:c7:d2:4d:57:e7:25:d5:b5:93:94:bf:21:3a:53:
52:e6:5b:0b:c7:14:70:14:59:14:48:c5:de:88:61:08:3e:d4:
02:9f:bd:4b:75:5b:80:0a:83:41:c8:a6:44:6a:21:32:56:60:
6d:5b:cc:1b:99:8b:ab:b3:c8:83:5c:f1:3d:b5:59:ef:84:10:
21:c3:d1:21:f2:56:97:c1:27:a4:ad:1f:8c:25:b9:4a:a8:74:
1b:e9:1a:ee:d9:ff:58:01:21:d6:a7:61:1f:20:8b:ce:40:a6:
87:44:75:d7:0b:25:6f:d8:c5:9f:25:a0:ce:98:cb:5d:0a:30:
05:77:ca:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:40:14 2025 by rpki-client