Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json)
Hash identifier: YM0/IJ2ZMIfkXVJRA/jO2Lz3j3E3cjXzxYjCS8qeFno=
Subject key identifier: 9C:FB:44:3A:AE:86:36:7F:37:AE:CE:E9:51:DD:1C:ED:8C:60:7F:EC
Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8
Certificate serial: 01967530A94B02CB166979EFEA9BCF59FD6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 03:00:45 +0000
Manifest this update: Sun 27 Apr 2025 03:00:45 +0000
Manifest next update: Mon 28 Apr 2025 03:00:45 +0000
Files and hashes: 1: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: QANaQcC1HrV6Vxz9Yr3cAJRydFMNtojmJa7HjbwEVrg=)
2: IXCtEaMNeIUhqXl8Lx3l8-Dir_Q.roa (hash: ZiR3KjxwRefwM+SxQhOx2wRJ2km2w6JI0EvTFa0nnZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:a9:4b:02:cb:16:69:79:ef:ea:9b:cf:59:fd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8
Validity
Not Before: Apr 27 03:00:45 2025 GMT
Not After : Apr 28 03:00:45 2025 GMT
Subject: CN=9cfb443aae86367f37aecee951dd1ced8c607fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:a0:4c:21:cc:2f:e1:5a:59:81:be:ed:28:
c4:76:0f:94:3c:1a:08:99:33:58:3e:4c:f5:44:07:
3b:11:70:1e:30:38:4c:86:98:5e:ec:80:a5:5d:ba:
7c:ab:30:76:d0:39:89:77:b2:31:9a:41:66:99:52:
03:09:33:16:1c:b6:62:2f:32:a3:46:e5:0f:d2:0d:
0a:9c:60:e2:a8:b7:35:ec:74:2b:c9:7e:6b:43:60:
48:8e:4c:17:cf:7c:d6:b6:49:0c:e6:2b:ce:bb:3e:
2f:37:68:e9:47:93:6e:95:e9:c6:75:7d:6a:57:ee:
45:8d:5b:49:39:0c:d1:f8:b6:9c:84:b4:3b:8f:71:
45:e5:29:c7:a7:d6:31:ae:01:75:87:95:a2:66:43:
da:5a:d5:d4:5b:69:14:40:4c:73:b3:b5:76:20:9f:
ec:16:67:eb:87:eb:79:28:e3:01:8a:70:12:3b:33:
ce:81:4b:ee:35:bb:36:d7:47:56:c4:36:c6:f1:00:
d9:7f:c4:a8:fd:7a:4d:3a:3f:de:f0:f1:6e:5f:c7:
47:56:bb:a7:3e:c9:6f:77:f7:33:87:47:d4:b6:01:
2d:46:b8:85:bc:c5:8d:2c:ad:d4:15:b2:55:07:c1:
00:af:5a:c8:57:59:a2:f7:5c:d7:78:41:73:91:ba:
e6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FB:44:3A:AE:86:36:7F:37:AE:CE:E9:51:DD:1C:ED:8C:60:7F:EC
X509v3 Authority Key Identifier:
keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bb:32:0a:d6:ec:ab:bb:5b:e2:72:a3:44:ae:79:51:74:23:
3d:65:c9:d3:e8:7e:1a:8d:a4:4e:22:ca:4d:0b:9c:e2:d4:43:
71:f6:11:d2:9b:c9:1b:e9:ef:e6:4d:41:70:be:9a:ec:24:d3:
8c:7f:40:b4:5d:c3:06:11:f5:a4:28:6f:d8:ea:ec:0b:18:61:
f8:f7:2c:18:dc:d5:bc:ba:f9:c6:f5:89:23:1c:fd:b7:46:2e:
90:95:3c:da:73:bf:37:9b:c6:ea:a8:83:e7:c3:23:70:4e:f1:
16:ac:34:df:c1:37:0f:7f:e3:a3:27:96:89:37:29:f9:dd:aa:
40:db:84:ce:11:c0:6a:27:33:63:49:85:39:d8:09:44:4e:a2:
65:c5:81:db:9c:07:b1:41:b9:86:03:a0:fb:46:80:8b:6c:83:
bd:9d:6e:c1:5b:71:5d:38:0d:2d:bb:67:6b:9a:e4:ad:6a:19:
8d:5a:33:49:b5:ea:61:99:26:68:59:05:6c:bc:e5:ce:33:47:
98:0a:14:e6:17:38:61:7c:b8:7d:4a:ec:93:e5:1b:0c:60:ec:
a4:71:94:b7:df:88:88:cd:c5:b4:cc:03:62:3a:be:20:6d:f5:
e0:d8:50:e5:59:8a:83:d4:62:46:00:a9:f6:3e:1f:db:5e:3f:
6b:bc:11:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:33:20 2025 by rpki-client