Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json)
Hash identifier: Qm62hhV6b0DQ30WmoNv8GjOIPBL5Cy6nPMYqDZfN478=
Subject key identifier: C7:2F:33:4C:B2:58:07:F3:F1:FD:A7:6A:67:5A:59:1C:DE:DF:CA:31
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial: 019674F9C48A716B9326C3A778326A26E5FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 02:00:47 +0000
Manifest this update: Sun 27 Apr 2025 02:00:47 +0000
Manifest next update: Mon 28 Apr 2025 02:00:47 +0000
Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: wv3NwLqfiYZ8PmKfSfSUBe+Mg/rKDIPla5uoRW+/0vI=)
2: xnuUEnVXaSzz9cF5USCrsyD97so.roa (hash: j10VBwI4MUaDD8l8nXJ3vdwJpNrClSEXJCQ84BCSTro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:c4:8a:71:6b:93:26:c3:a7:78:32:6a:26:e5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Validity
Not Before: Apr 27 02:00:47 2025 GMT
Not After : Apr 28 02:00:47 2025 GMT
Subject: CN=c72f334cb25807f3f1fda76a675a591cdedfca31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:76:7b:22:fe:22:db:0d:5c:cb:67:a1:63:
20:ae:72:ae:56:07:27:5b:f8:33:79:d2:2d:3d:b9:
59:be:45:15:01:91:be:4c:93:36:c3:c1:da:52:96:
f1:da:51:e3:53:8c:17:18:e5:7c:7e:40:2f:d7:b6:
0b:74:65:f9:9c:62:6b:12:40:88:06:60:46:eb:ce:
8f:eb:25:73:ee:e8:af:45:5a:c1:95:94:cd:ae:50:
9c:ce:96:2b:91:e9:9c:e4:86:4c:61:e7:d8:66:ba:
d7:97:3d:9c:ee:07:fd:b9:31:48:d7:01:dd:6d:8d:
2b:b0:bb:e3:20:62:4a:89:75:93:1e:ca:f5:25:bd:
06:48:30:95:e0:94:d0:af:6c:8d:b1:15:f7:d1:1b:
ce:ba:ca:20:d2:9f:e4:26:2c:d9:6f:bd:53:2d:ba:
a1:a9:f5:0e:b3:c1:96:ec:42:ee:00:3e:35:05:79:
f7:2d:4e:b9:0b:dc:5a:67:8d:7e:78:42:44:b6:0b:
17:57:4d:9d:0a:a2:78:d3:5b:f4:11:04:2f:ff:bc:
c3:b6:62:7a:ef:34:bf:24:5f:9d:9d:3b:81:c2:a7:
5a:5e:a2:0e:5e:e5:e1:2a:2b:3c:50:a3:d2:76:59:
20:f3:26:05:41:ba:73:9e:27:2e:b3:57:07:dd:2f:
d0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2F:33:4C:B2:58:07:F3:F1:FD:A7:6A:67:5A:59:1C:DE:DF:CA:31
X509v3 Authority Key Identifier:
keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:08:67:58:10:c7:fa:0c:10:6b:ea:10:6a:e4:75:35:13:5b:
1b:73:f4:d4:b1:e5:93:6e:54:bc:b9:b8:af:95:d1:48:fe:d6:
9c:9d:84:eb:4e:84:73:d7:09:5e:4e:26:94:e1:d7:25:c7:5e:
95:03:ab:ec:5c:15:a3:0c:b6:79:67:0b:6c:9d:94:2b:c7:2f:
66:92:fb:0f:e1:31:9e:3a:f5:68:f6:c6:c6:ae:f1:91:aa:85:
52:ec:d5:c7:50:d2:af:36:ec:a0:3b:2e:8d:fe:af:34:56:ee:
5c:ae:33:51:8a:ad:c4:77:d5:41:6f:d9:b0:9c:4e:e7:c1:a8:
81:7d:a7:f9:44:24:f5:cc:f9:38:f1:fd:82:98:18:95:86:26:
0d:86:1d:4b:c9:25:40:94:e8:e5:73:32:e7:86:3d:58:b7:bc:
4e:23:0c:58:7e:3b:56:38:90:a9:d6:a9:a0:73:e7:5a:b2:df:
2d:c1:ce:f0:46:e4:66:1d:08:d3:42:1b:ea:86:80:67:e3:51:
03:05:fe:50:9a:40:e9:d9:ae:49:bc:31:08:fc:fa:e9:53:b2:
30:40:96:18:0a:0f:6f:18:ea:00:3a:72:27:cc:6c:63:c4:cd:
63:7d:5a:33:8f:4a:94:a1:1d:d1:0e:be:67:50:1d:4a:a8:c4:
03:d6:d5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:06:53 2025 by rpki-client