Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: QCj3tgZ76YbkOPIr3r2HAPhyTY0GVlyW6GhGQzqX4uQ=
Subject key identifier: BB:E5:B1:CB:61:CD:F5:2B:9B:19:20:0F:80:89:7F:0F:CF:AA:CA:56
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 019675D56EDA153F0FBAC1524FB1B4DB4602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 06:00:43 +0000
Manifest this update: Sun 27 Apr 2025 06:00:43 +0000
Manifest next update: Mon 28 Apr 2025 06:00:43 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: 7vRCkwSFL92b3PkLFwvgwJVcga3N5P/DOS5nQQFiDvM=)
2: lcycvAbT-2PUUx_keEjD_rzNQVg.roa (hash: ohYpD8zllBNGHneXiioDVg0sD783EBRieTug607OnxU=)
3: oAvccpdYptAzS_BGXpnm48hNKj0.roa (hash: UcqHCV81R5HjZRazwae448gGQvQVwy5vVk7J2zutre4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:6e:da:15:3f:0f:ba:c1:52:4f:b1:b4:db:46:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Apr 27 06:00:43 2025 GMT
Not After : Apr 28 06:00:43 2025 GMT
Subject: CN=bbe5b1cb61cdf52b9b19200f80897f0fcfaaca56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:0d:69:4b:77:74:9b:cc:54:d6:23:8c:37:
1b:b2:3f:42:09:09:40:c0:f3:c7:86:2b:8d:c9:5a:
5f:0f:8c:cf:1a:e5:bf:88:d7:15:7f:77:11:c2:7a:
11:50:c8:48:b9:27:0f:d1:05:af:3d:17:ce:d2:51:
30:23:7c:b2:01:a2:43:bf:52:42:7e:71:62:20:0f:
0f:dd:1a:35:58:b9:9f:90:18:1b:fe:be:7a:aa:c8:
f4:36:5e:96:92:4f:56:79:46:f2:33:60:68:36:72:
9d:a0:82:71:6e:bf:68:80:46:b0:74:79:e7:9c:36:
21:8a:84:2f:eb:3d:ec:eb:23:78:c4:77:33:74:38:
c7:11:96:32:b0:c2:5b:49:0d:29:e2:3b:fc:cd:4b:
8d:4f:de:98:0a:fb:83:90:f8:84:7f:30:0f:b9:44:
4e:53:89:96:0d:4b:fe:52:74:c7:61:94:3b:08:0d:
cd:8a:6c:01:46:1c:aa:59:37:a6:af:1e:2c:3d:d3:
91:aa:35:da:7a:15:8a:b5:8f:aa:00:c2:a4:6f:b0:
79:13:ba:39:9d:67:4e:db:cf:4a:42:38:01:7a:f4:
7e:66:75:fb:f7:14:fd:d0:00:0c:84:1b:d2:24:23:
b2:86:0b:78:88:31:3f:a6:d6:67:6b:69:7e:20:66:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E5:B1:CB:61:CD:F5:2B:9B:19:20:0F:80:89:7F:0F:CF:AA:CA:56
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e4:ad:be:66:6c:37:6b:56:80:79:28:2c:9b:65:e1:dc:d6:
61:6d:8c:8f:06:2c:1a:4d:74:86:53:ce:8a:45:78:52:a7:c6:
c2:74:84:b2:27:81:e4:8c:63:ef:6f:74:28:bb:e4:4b:92:17:
ff:57:3b:48:b5:40:8b:53:eb:e0:c7:8d:0f:ab:42:5f:5e:31:
30:68:0d:99:39:04:2d:66:54:64:89:7a:e3:0c:db:7a:5d:a4:
c5:ae:68:3b:b2:37:55:49:86:2b:33:96:97:e2:cc:47:2d:b9:
90:82:19:70:0b:a2:51:0f:1d:d0:40:3a:e4:92:37:47:0e:4d:
9f:c3:f3:5d:16:45:29:e2:29:0f:e2:12:e5:6c:f7:f4:00:fa:
8b:e9:2e:a5:44:18:de:aa:bb:a2:af:45:79:eb:51:7c:ac:46:
23:62:74:34:36:f5:b8:d5:00:cc:8a:a3:e4:94:6d:5b:0c:2e:
0c:05:23:c6:c2:77:0f:e4:41:2a:e5:1b:bc:05:a5:87:48:4f:
b8:74:2c:ba:8e:f9:51:38:a2:b6:6a:06:d3:2c:c0:76:ee:24:
75:55:e4:f8:db:cd:2d:e0:b6:57:76:41:90:10:d0:07:26:36:
a1:de:4e:af:72:39:56:22:d9:d0:9b:1e:7b:28:c5:4a:b9:48:
80:68:22:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:09:04 2025 by rpki-client