Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: 5eQJTKcrkZAq7dVTJk5OPvA3n2vrEbiSaby2HF0a1mM=
Subject key identifier: 4A:C5:AA:26:A0:1E:C8:5D:E5:4B:41:41:8F:81:6C:E4:45:6B:75:34
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 019678D63C68BA2864D08495C3CEAA61A6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0926
Signing time: Sun 27 Apr 2025 20:00:28 +0000
Manifest this update: Sun 27 Apr 2025 20:00:28 +0000
Manifest next update: Mon 28 Apr 2025 20:00:28 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: uYUIdvtZbeDvZGw51fkPW+yoXtBOB2DW51SmYt5RMbA=)
2: Khmhefi6kwckslHGfWvU_2oMALk.roa (hash: GCH2SF4oCWT5irU/tNDWYDBbGKrkiI0SguGZAk1/bwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:3c:68:ba:28:64:d0:84:95:c3:ce:aa:61:a6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Apr 27 20:00:28 2025 GMT
Not After : Apr 28 20:00:28 2025 GMT
Subject: CN=4ac5aa26a01ec85de54b41418f816ce4456b7534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c8:7c:76:d7:47:40:39:d3:0a:5d:15:cb:ac:
fd:48:bc:9e:60:91:8b:5a:5d:ca:5b:68:6c:60:77:
69:31:97:90:46:df:af:c7:76:86:19:4b:ac:58:a9:
e1:88:0d:fd:24:a4:f4:26:66:d7:3c:52:2f:75:ce:
0d:6c:8f:4f:15:a2:50:9c:c9:7a:68:f0:e2:dc:1b:
f3:38:36:3c:15:7f:76:17:d0:dc:c7:b7:e7:50:a0:
f0:83:49:e8:73:9e:d0:6f:1c:c9:34:be:ce:eb:8e:
a3:75:16:2e:71:2c:f7:51:64:c2:58:6e:ea:8f:19:
da:ca:fa:52:09:a6:78:3b:7b:13:22:d8:c8:88:95:
3a:2e:a0:6c:bb:57:c8:54:26:33:90:2f:2d:29:94:
c8:40:ac:e9:de:32:f4:95:9c:53:38:94:d5:08:81:
2a:e8:77:a3:0c:93:38:17:65:82:9a:76:e3:25:6b:
0b:ae:b1:fe:80:d5:e5:bb:da:65:c4:50:bf:d3:a9:
66:72:af:ad:fd:c4:69:e5:18:97:b6:21:e5:ab:8b:
e7:d0:01:e8:fd:44:a8:c6:69:ac:d8:16:1f:04:49:
39:82:91:31:c7:6c:2d:c1:66:b3:33:32:a2:38:f6:
57:e0:aa:f8:4d:02:3c:ac:1d:0b:2d:f8:56:96:19:
8a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C5:AA:26:A0:1E:C8:5D:E5:4B:41:41:8F:81:6C:E4:45:6B:75:34
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d1:7a:18:85:25:0f:d6:d9:e7:25:24:9a:89:19:84:f8:d6:
02:6a:d7:a4:b6:f0:45:81:8f:56:63:b4:c3:7e:10:9d:c9:b9:
04:3c:64:62:71:6a:2c:cb:a9:eb:98:42:56:a0:b9:33:41:82:
f6:eb:cd:cf:a2:ed:b3:1b:31:e7:2a:86:79:3b:18:5f:e3:1b:
d2:0f:50:ec:c3:d3:3e:c7:71:86:78:a1:a5:03:af:fa:19:d9:
9b:19:24:65:35:ab:1f:03:43:b9:fd:de:e4:09:c6:f0:46:78:
7a:42:38:3b:45:b6:f0:11:35:1a:08:e9:00:83:3e:5a:c2:16:
ec:38:dc:6b:e9:40:44:1e:8d:87:45:f5:32:10:66:17:6c:26:
e0:43:29:ff:2a:d3:92:5e:7c:a7:94:0f:d5:3e:2e:7c:b8:6a:
1a:84:f7:ea:58:dd:5b:8f:bc:7b:10:f7:89:76:4b:8f:f9:3e:
9b:16:26:aa:bf:39:f6:e5:57:fd:2f:25:a7:01:d9:66:5d:98:
6e:94:e0:b7:bd:fd:2b:a0:40:ec:56:e9:50:1f:6b:cf:90:95:
de:3f:4a:e1:03:92:67:6e:74:b0:b7:ac:15:bc:c5:bf:d1:19:
43:6a:d0:e2:66:6d:c9:e9:54:14:f1:b3:7b:68:71:f7:65:27:
70:a9:ee:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:04:48 2025 by rpki-client