Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
File: cbbQ4ActDKspv6hzfeKlPlFBgnY.mft (raw, json)
Hash identifier: hX82DNs5S7VNsHhnoi6Ra0dz3UcbkZYM34kfwl+aizg=
Subject key identifier: B7:96:48:A8:16:A2:72:82:07:0B:C3:D8:45:94:09:0D:77:C6:1C:F8
Authority key identifier: 71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
Certificate issuer: /CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Certificate serial: 019683FF6BCFC7CB89CE35CDA13D4BC22CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
Manifest number: 059B
Signing time: Wed 30 Apr 2025 00:01:16 +0000
Manifest this update: Wed 30 Apr 2025 00:01:16 +0000
Manifest next update: Thu 01 May 2025 00:01:16 +0000
Files and hashes: 1: cbbQ4ActDKspv6hzfeKlPlFBgnY.crl (hash: ZxSoc2omcejJjtiiuQWfwcGShYQRpbyqBAhwDeVOVAo=)
2: m3oyez4opl0YbbQ1CR2fl2aO7F8.roa (hash: FqYvVOjK/elvRD3q2xJweF4ZvocMCS6cmWVMXbFh3Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:6b:cf:c7:cb:89:ce:35:cd:a1:3d:4b:c2:2c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Validity
Not Before: Apr 30 00:01:16 2025 GMT
Not After : May 1 00:01:16 2025 GMT
Subject: CN=b79648a816a27282070bc3d84594090d77c61cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:02:3e:22:bc:6f:e0:01:14:dd:ba:fa:ad:fa:
47:33:f3:b9:4e:9d:16:fe:bc:39:92:98:46:73:b0:
56:30:51:03:77:81:da:f3:1d:b8:cc:c8:ec:b3:0a:
80:dc:17:a4:21:ed:1b:e4:f0:8b:16:66:b2:ec:b9:
7f:fc:2a:38:be:bf:60:72:e1:ba:28:da:fa:65:66:
6e:ec:c2:aa:62:a0:2c:5f:e1:9b:68:d9:44:32:cf:
5c:56:f1:97:5e:42:84:ec:31:f0:b4:1a:c0:d2:15:
5e:c2:97:78:96:4b:db:df:1e:d5:ea:62:d0:27:c4:
0f:88:a0:b6:ee:aa:c1:76:cb:59:d9:c0:44:25:38:
f9:f4:54:32:fe:0a:af:1c:39:92:24:64:5b:65:13:
4c:ce:e8:96:5f:af:c9:6d:1b:8a:a9:45:83:6e:09:
db:67:75:8e:bc:41:1e:20:25:54:3e:4c:6c:61:a1:
b9:2a:83:f6:47:8e:7c:ca:91:cf:3a:d0:5e:5e:42:
f4:88:5c:99:07:8c:f6:5d:f0:2a:8c:4a:68:63:d6:
f2:46:8f:8a:59:46:5c:60:54:de:e8:d0:c9:ba:5c:
10:f4:d8:aa:c4:65:5c:43:d3:46:74:65:05:4a:25:
02:3e:9f:29:64:d7:25:65:16:c2:fa:1e:1c:34:02:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:96:48:A8:16:A2:72:82:07:0B:C3:D8:45:94:09:0D:77:C6:1C:F8
X509v3 Authority Key Identifier:
keyid:71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d3:56:e2:7b:e6:11:fd:f8:e0:d1:f4:c3:6d:86:e0:50:f7:
36:61:a6:32:df:79:85:51:f4:c3:41:28:3d:6f:e3:f4:0e:a9:
19:fc:db:ed:51:d0:1e:38:02:84:e0:ed:11:d5:e0:0a:f7:89:
d8:1c:4b:67:a5:43:48:27:5b:42:20:6b:58:ec:ad:4e:e3:d1:
6a:82:de:6a:71:77:fc:6f:53:84:c7:1a:f5:97:46:2c:b5:5a:
1e:9a:32:30:7d:2f:91:f7:23:6e:40:72:27:23:46:69:9d:35:
dc:1f:27:b7:34:2f:09:6c:3e:c3:00:ba:5c:9d:30:b4:8b:3b:
10:79:8f:67:38:44:5f:42:9c:04:bf:d2:e0:a4:27:6b:1a:40:
61:13:3c:7c:10:53:ce:55:e9:d8:d2:a5:5d:59:ac:b5:89:98:
9b:c4:b3:38:47:09:d4:e4:cc:03:9f:92:82:43:ad:8e:50:75:
38:41:9e:a6:c5:cd:61:17:70:97:b6:da:0d:ed:d0:8f:95:34:
9c:98:e8:90:c3:d0:b4:06:31:1e:e7:12:77:9d:80:65:96:69:
ce:19:02:43:29:82:f9:8d:93:66:68:d6:28:64:0c:44:de:ad:
ab:3a:81:8c:77:0f:92:df:1b:ed:2c:53:75:d1:f3:85:17:67:
79:7d:0e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:02:20 2025 by rpki-client