Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
File: CAktJ0eBQ8auOQXEf1hH35wC9BM.mft (raw, json)
Hash identifier: v3uJ7PUJVPQ+HZE+PwQnd1/9BcFyQsIZzWGa1PZ+f5Q=
Subject key identifier: 85:36:31:13:7F:AE:CF:60:F8:EC:AF:BC:33:20:05:00:95:3B:FD:07
Authority key identifier: 08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
Certificate issuer: /CN=08092d27478143c6ae3905c47f5847df9c02f413
Certificate serial: 0196789F699AA1A9B5AE263C6B4CDA21F448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
Manifest number: 1229
Signing time: Sun 27 Apr 2025 19:00:35 +0000
Manifest this update: Sun 27 Apr 2025 19:00:35 +0000
Manifest next update: Mon 28 Apr 2025 19:00:35 +0000
Files and hashes: 1: CAktJ0eBQ8auOQXEf1hH35wC9BM.crl (hash: nTOIRKm6ZEfEHIPt8GYsQG4FAnny2Eah94z967V168E=)
2: FLCT51ZJwMwx0vO_c1Crc2b8m68.roa (hash: QKUzT6JzZRll2THVZgHHi9WC7xvGZyFj5/BsNgA/xuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:69:9a:a1:a9:b5:ae:26:3c:6b:4c:da:21:f4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08092d27478143c6ae3905c47f5847df9c02f413
Validity
Not Before: Apr 27 19:00:35 2025 GMT
Not After : Apr 28 19:00:35 2025 GMT
Subject: CN=853631137faecf60f8ecafbc33200500953bfd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:68:3e:53:72:d5:2e:88:ad:87:65:6f:68:
1a:62:66:a0:15:38:6c:80:7e:96:6a:44:17:e8:ff:
21:b8:27:8f:1b:b0:48:db:0a:41:c5:31:e2:ea:20:
b5:63:ff:0d:99:a7:c5:22:e7:91:ad:ab:57:c2:7e:
a9:01:15:a2:b5:3c:38:19:5e:62:05:2a:4c:a9:b0:
1e:86:33:19:90:cf:d1:1f:10:77:c3:63:21:af:00:
a6:e9:fe:23:9d:9b:b6:c2:69:9c:7d:c9:7a:3d:27:
74:04:10:e2:bd:10:d2:b1:75:0e:29:be:25:ad:0a:
64:c6:2b:4a:13:cd:94:fa:78:6f:5b:9d:56:cf:05:
6c:cd:b5:bf:d8:1e:4d:37:41:89:8a:ff:7d:6b:f1:
bf:ac:dd:70:12:09:bd:d5:db:f2:73:b9:5b:80:43:
ef:ae:30:40:95:5a:76:e2:bf:ff:bb:96:58:da:c2:
c0:12:70:dd:5a:ee:a5:e1:ed:80:a5:64:fd:be:aa:
3b:ed:a9:17:6c:29:5b:28:57:24:0f:c4:0a:03:13:
79:46:e6:e7:ea:b1:d4:7e:50:a7:f4:c1:fa:44:52:
45:8a:0f:b4:21:b5:c7:7f:3b:95:f4:06:98:14:9b:
72:ff:a7:ee:bc:6f:70:b1:2a:16:d5:cc:bc:39:63:
0d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:36:31:13:7F:AE:CF:60:F8:EC:AF:BC:33:20:05:00:95:3B:FD:07
X509v3 Authority Key Identifier:
keyid:08:09:2D:27:47:81:43:C6:AE:39:05:C4:7F:58:47:DF:9C:02:F4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAktJ0eBQ8auOQXEf1hH35wC9BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aa95e3-5082-4fa7-a7ab-94cf3a35bf8c/1/CAktJ0eBQ8auOQXEf1hH35wC9BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e3:88:d8:81:eb:6b:b4:96:68:94:4d:a0:c1:30:7c:8f:1b:
87:86:a3:f9:00:b3:9b:0d:0b:dd:4b:e7:0e:c3:15:7f:8e:5c:
a5:ff:a2:7f:6d:de:be:7f:99:59:81:7a:81:d9:b1:a2:1a:1d:
0b:db:c1:b5:9d:94:ad:0d:db:06:2f:bb:02:bf:42:0d:53:53:
e8:83:38:a5:d0:8e:70:51:57:3d:93:a6:ef:db:a9:fa:9e:c8:
f4:cb:33:69:73:fa:de:19:e9:cd:b6:cd:dd:ee:c9:ff:2f:6f:
d2:ad:26:b6:47:b0:b0:cf:f1:24:b8:ec:a9:f5:d3:ae:0d:e6:
18:4c:1a:07:14:19:c6:22:59:0e:c9:3b:6a:04:ae:f8:30:f1:
b0:48:d6:2b:42:7a:9b:3c:1b:07:49:95:0a:ce:84:1d:c1:b3:
be:fc:4e:77:a2:23:73:8f:23:41:de:ab:8d:06:92:12:db:78:
5d:4b:3c:f4:75:48:61:53:62:1a:f3:82:d4:e4:e6:31:0f:67:
2b:94:e5:2d:ee:48:67:6f:d2:3b:98:bd:f9:9f:f2:b2:d4:ff:
a8:89:9c:c9:7b:54:8f:99:57:83:12:99:44:13:10:65:aa:69:
7b:c4:d1:fa:29:9c:c7:30:4e:03:9a:f0:d3:4e:33:80:e6:29:
6e:41:ba:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:21:24 2025 by rpki-client