Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier: DONdZ/w+s4SFosr+feEmAgEgQQ8K1Cux4sk2QCzHGXk=
Subject key identifier: 03:75:E0:20:CA:36:1C:78:47:AF:ED:A9:94:A1:5B:08:E2:2F:34:34
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial: 0196767A76B091C735B41F542CFACC95E21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number: 129C
Signing time: Sun 27 Apr 2025 09:00:59 +0000
Manifest this update: Sun 27 Apr 2025 09:00:59 +0000
Manifest next update: Mon 28 Apr 2025 09:00:59 +0000
Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: ViqfQVbzVGFLI1RpLuXT0jWIWUzPJCXCeDouP2LxwOg=)
2: H8Hgbzgx0A7FcofaefkTfVc8Xz0.roa (hash: 1i3t+G4LlCk005AGKE/RTc337vB1zniPnJjKB0owze0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:76:b0:91:c7:35:b4:1f:54:2c:fa:cc:95:e2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
Validity
Not Before: Apr 27 09:00:59 2025 GMT
Not After : Apr 28 09:00:59 2025 GMT
Subject: CN=0375e020ca361c7847afeda994a15b08e22f3434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:d6:3c:f4:f5:e5:85:5a:34:45:0f:fe:11:
ef:83:79:bb:b9:45:16:d4:d8:df:4d:56:63:9a:71:
6a:29:52:a3:b0:c5:fa:76:b6:fb:6c:35:ad:a9:47:
5b:8a:05:78:34:28:27:8f:e5:62:95:21:40:cc:3d:
d4:b0:52:cd:07:11:9b:5e:d0:4b:8c:25:86:e6:c8:
30:37:9a:d6:f2:9a:cd:5d:83:20:7c:32:07:4d:74:
cf:ed:7d:d7:c3:3c:a8:75:01:70:bf:0c:75:cb:27:
f8:be:db:2d:f4:6f:93:b5:2f:03:1e:8a:5c:e5:0d:
2d:65:32:2e:96:c0:a0:be:8a:50:7b:7e:f2:1f:b2:
4a:0a:4d:3a:4a:90:d1:96:a9:67:2c:05:ab:51:8e:
20:20:82:b9:37:6d:66:6c:95:e8:97:d6:35:d3:41:
f3:0a:cd:c2:98:40:87:59:6b:19:32:54:57:d3:1c:
16:92:aa:df:fa:0b:2e:b1:32:f3:08:75:cb:7c:bb:
62:76:f9:2a:92:53:ed:da:12:dc:83:0e:23:b2:ba:
75:08:02:33:1d:ef:0c:bf:d8:c2:93:da:1e:06:a7:
15:59:5c:4c:da:5e:eb:41:4f:19:0a:5a:82:7b:f0:
a4:ee:9f:38:ca:7b:a6:59:c7:01:b8:94:0f:65:e7:
2f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:75:E0:20:CA:36:1C:78:47:AF:ED:A9:94:A1:5B:08:E2:2F:34:34
X509v3 Authority Key Identifier:
keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2f:d0:ec:a6:70:d9:b4:da:8a:33:40:fc:4c:22:ee:98:6c:
14:27:f7:49:18:57:ff:b3:7e:78:76:14:e4:98:cc:fb:44:e1:
73:9b:45:fc:db:95:1c:b7:aa:68:56:e7:4c:ea:a2:c3:00:f7:
0f:4d:22:09:e5:9f:64:5c:43:bf:a4:dc:71:6b:7d:6c:6c:c1:
50:95:67:ab:0e:3b:52:b8:c5:ad:b4:b5:4e:39:19:b9:fe:c9:
ca:fb:7a:53:47:2b:9b:be:86:9d:63:81:43:ae:51:41:87:43:
43:34:e8:79:fa:08:f1:4c:1e:3b:7d:f1:ac:00:5b:c1:94:0e:
6c:e3:78:b1:57:07:0e:ad:15:50:29:d5:2e:cc:25:2c:36:21:
18:28:e9:77:9c:b1:89:24:63:fb:ac:56:ed:64:ad:50:43:04:
c2:70:aa:fe:d1:d2:49:41:12:95:03:f2:70:7c:cb:3b:50:33:
d0:92:1e:1d:3e:62:a9:f5:9c:ad:20:49:5b:06:48:2a:4f:77:
29:1a:b7:fc:b6:c7:53:8f:7c:d6:99:cd:89:0e:f3:98:d1:de:
02:33:73:3b:79:48:eb:c1:85:dd:53:ec:f4:eb:87:1b:fb:bb:
c8:40:70:a6:38:5a:0f:b7:69:61:f6:2d:4b:cb:1d:9a:17:46:
d7:8d:db:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:18:54 2025 by rpki-client