Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
File: 0cpnYQKGq3OPhs6TX99e1iDwLZY.mft (raw, json)
Hash identifier: gPbeu4nEkspdtjWWgsvhQHIArjCgneGzy1m3OLtlcCw=
Subject key identifier: 59:37:54:5D:93:AB:68:B8:35:69:D6:B4:04:DE:89:A7:3F:21:0F:DA
Authority key identifier: D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
Certificate issuer: /CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Certificate serial: 01967831A0FC51B6A32B4B2ECFA32A3C86FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
Manifest number: 0406
Signing time: Sun 27 Apr 2025 17:00:40 +0000
Manifest this update: Sun 27 Apr 2025 17:00:40 +0000
Manifest next update: Mon 28 Apr 2025 17:00:40 +0000
Files and hashes: 1: 0cpnYQKGq3OPhs6TX99e1iDwLZY.crl (hash: VglPWbiO4hiOVGHiWEfkhfo052kyQJatyTki38HJTgI=)
2: y5znuwpLKZ8JL_6tjS8ThMPHHLE.roa (hash: Ff9QtDrzEqE+YPfo1QrUfXElhWcFkl8EJxj88BmOBUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:a0:fc:51:b6:a3:2b:4b:2e:cf:a3:2a:3c:86:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Validity
Not Before: Apr 27 17:00:40 2025 GMT
Not After : Apr 28 17:00:40 2025 GMT
Subject: CN=5937545d93ab68b83569d6b404de89a73f210fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f7:cc:9e:65:5c:75:f0:84:64:fe:dc:c2:58:
a5:56:10:a9:65:41:c9:30:6a:41:65:6b:0d:c1:f8:
c0:bb:6a:00:c5:d1:c8:b3:59:7d:ed:eb:36:9d:96:
2a:9e:fb:64:6c:c9:55:7a:23:4d:a7:e0:e8:d8:9b:
17:db:2b:fc:f8:d3:81:db:38:0d:58:d5:aa:b6:03:
7a:0a:87:95:d0:0a:63:6e:4c:ac:50:4d:8c:26:e5:
de:14:c1:2a:64:a5:ac:d8:08:c6:f8:8a:e9:62:1b:
55:95:34:ce:25:be:85:26:dc:64:c2:2b:08:0d:43:
04:d0:5a:49:fc:7a:e1:58:75:8c:c7:85:bf:2a:5e:
9e:7c:84:b7:2e:76:08:60:8c:1c:a0:1d:7b:0f:6e:
1f:ef:d9:b2:66:57:8d:2e:85:f7:26:3a:01:60:69:
cf:77:0f:b3:66:6e:8e:92:bf:f9:83:71:03:58:98:
e4:8a:02:55:68:c0:05:8c:47:a6:eb:12:83:68:7f:
cb:0a:7b:16:c9:29:e2:59:be:5d:54:fc:59:cb:02:
58:e2:26:b3:54:8f:88:b9:a4:79:9c:72:67:d1:1a:
c1:e2:3a:d7:25:b7:fa:31:0e:b2:78:85:c1:66:43:
19:d0:28:14:7d:24:eb:29:e5:21:ec:de:8a:9c:fe:
5a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:37:54:5D:93:AB:68:B8:35:69:D6:B4:04:DE:89:A7:3F:21:0F:DA
X509v3 Authority Key Identifier:
keyid:D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5b:bb:9d:95:35:ba:6f:6c:94:9a:2a:99:f9:d8:c9:71:d1:
fd:a5:1a:dc:de:ff:ed:2a:a1:e1:d0:1a:5b:69:41:bc:03:ef:
bb:36:8a:6c:5c:e9:e6:a8:e7:d5:f6:ad:c1:f9:d2:49:07:0e:
0e:4f:ab:86:3c:ee:04:ac:c3:d9:09:28:0c:9c:cd:3d:9b:7d:
01:d6:93:a6:4d:57:0c:d5:f9:e8:ee:53:82:3a:d1:5c:1f:00:
6e:07:03:de:5d:76:83:59:60:0d:13:2c:ff:06:44:15:ea:78:
93:08:da:17:fb:c2:73:f3:29:19:04:39:49:6a:f9:ed:82:be:
34:15:98:3e:3a:f6:84:64:c1:96:20:07:a7:b6:eb:84:fe:75:
c9:a1:24:61:5c:4c:80:c6:26:a2:53:1f:ba:b5:f2:4d:66:6a:
8d:07:ba:13:f9:bf:08:a6:36:b7:b0:0c:9b:e7:a9:ba:20:15:
2d:08:1a:ae:d5:83:d0:a6:d9:0c:41:1b:fc:9c:49:23:1f:35:
98:70:f8:1e:37:f2:b7:ec:ba:c7:90:bd:35:61:68:26:6f:8b:
8e:55:82:cf:15:25:bf:09:e5:04:22:54:1d:30:d6:24:cc:7c:
2c:9a:7d:ea:59:e8:af:43:a7:99:1f:c9:77:9b:82:ac:ad:65:
7c:45:0e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:09:37 2025 by rpki-client