Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: WO8giFcr6UOxLm7pnCrcUM8P/PfVb4zGDYvZd0/WjDs=
Subject key identifier: 36:70:F7:78:F3:31:D1:6C:5E:B5:C5:B4:22:64:FB:29:38:E0:79:B7
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 0196760C1CA1F72D53D9AF81C0C0E48FE3B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 094C
Signing time: Sun 27 Apr 2025 07:00:27 +0000
Manifest this update: Sun 27 Apr 2025 07:00:27 +0000
Manifest next update: Mon 28 Apr 2025 07:00:27 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: 0EZ8+BSXTl0m8S8KmE1bVNkr32ZsWbdzH1x+Thv7VJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:1c:a1:f7:2d:53:d9:af:81:c0:c0:e4:8f:e3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: Apr 27 07:00:27 2025 GMT
Not After : Apr 28 07:00:27 2025 GMT
Subject: CN=3670f778f331d16c5eb5c5b42264fb2938e079b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:10:4a:b3:e1:35:a5:9a:68:ec:d2:bb:32:00:
06:0f:46:57:92:6d:c2:64:0c:7e:2b:5e:17:d3:31:
fa:02:d0:56:60:78:06:81:69:e8:06:cb:c1:9c:25:
48:cb:df:d6:29:4d:f6:73:96:3f:96:17:60:1c:9c:
ec:0d:14:c0:0a:b1:88:23:86:6b:97:60:50:4c:73:
ac:62:4e:e7:70:4c:ac:38:f2:07:31:f7:40:57:6e:
28:1a:31:94:5e:4a:2d:69:8f:54:ea:20:be:37:0a:
ba:9c:16:c4:21:13:34:d0:2b:cc:8f:c3:7d:6a:91:
60:2e:2a:30:db:c4:9c:67:2c:bf:37:22:66:66:10:
ff:a4:2b:8e:69:d6:4c:28:ef:82:ae:43:2b:a2:18:
83:10:bd:53:62:2b:e3:93:58:20:9d:09:2c:84:ae:
df:fc:4d:3e:bd:5f:50:52:af:cb:35:9a:80:0c:38:
ac:a4:64:a3:0a:c6:b0:38:3f:be:d6:22:db:c1:97:
ee:50:40:a3:cb:52:2a:0e:80:79:09:39:92:86:a3:
17:86:67:71:5b:e1:fd:80:52:13:ce:1d:51:c8:0a:
57:d0:1d:08:f6:67:b5:5d:5a:36:8c:06:f7:5e:12:
75:b0:ef:7d:4a:24:ac:60:68:4e:95:cb:0b:2c:82:
4d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:70:F7:78:F3:31:D1:6C:5E:B5:C5:B4:22:64:FB:29:38:E0:79:B7
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:a4:10:ab:85:ee:60:b0:f8:01:95:6e:ac:25:0d:ef:7e:9b:
cf:be:f4:10:cd:70:d8:50:12:1d:65:a2:be:8d:10:a5:31:3b:
5a:ba:2f:28:0c:93:f7:04:b6:f8:0c:d6:21:20:75:a5:73:f0:
59:b6:e9:07:4f:68:ad:30:43:37:00:48:09:fa:cb:81:10:bf:
16:02:89:06:4b:58:f6:9c:0c:5a:59:12:94:81:e4:70:2c:b1:
8a:3f:39:86:d9:41:41:d1:c1:c8:97:ce:a2:db:7a:a7:42:6f:
d2:3b:92:fe:5d:e9:d3:8c:df:9e:c6:d2:44:cc:4d:7b:cd:30:
fb:97:e5:03:ed:90:f6:f4:eb:9b:3d:4b:64:43:db:ea:c7:b6:
dc:83:e8:21:1a:e9:b0:76:17:b5:1d:e8:0e:dd:f9:ff:44:e4:
2c:35:9b:1e:d8:a9:c9:01:72:b3:39:0f:9e:91:b6:17:9b:af:
f3:3a:4a:57:1c:02:9e:f8:72:ac:73:e9:ab:f8:2e:c4:d9:6f:
33:81:b7:af:61:4e:ac:48:d0:83:3b:61:6c:d4:d4:8a:5e:1e:
9b:f4:57:69:2f:d8:07:f7:47:e8:e3:1c:78:91:20:55:38:91:
52:b9:1d:2f:c1:e5:70:d2:3b:48:6d:c7:1c:20:a1:e0:5b:ee:
47:2d:b5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:17:43 2025 by rpki-client