Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
File: CNXrapaGTfosUbLiVsUYCrkiKc0.mft (raw, json)
Hash identifier: Yfd2FjM5+RT09QY4R9OrlvGTZ6YDBMnXIcaAkCV6zQY=
Subject key identifier: 20:96:60:1C:E8:66:8E:EF:7B:EA:58:97:BC:DB:50:D7:2F:4A:69:6A
Authority key identifier: 08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
Certificate issuer: /CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Certificate serial: 019689C9ECF4A14DD07C49386444557085F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
Manifest number: 020E
Signing time: Thu 01 May 2025 03:00:33 +0000
Manifest this update: Thu 01 May 2025 03:00:33 +0000
Manifest next update: Fri 02 May 2025 03:00:33 +0000
Files and hashes: 1: 0m-9m5OFcPf8OuDYL2FUGvph8_g.roa (hash: dOT7ZXgrSZ8DnL/LTBhNtapy6nZ67rmfPX5nGpKKR4k=)
2: CNXrapaGTfosUbLiVsUYCrkiKc0.crl (hash: FncYtfDyuyrR523fyI5xp38nDmDANAbyybpk2lbaFlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:c9:ec:f4:a1:4d:d0:7c:49:38:64:44:55:70:85:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Validity
Not Before: May 1 03:00:33 2025 GMT
Not After : May 2 03:00:33 2025 GMT
Subject: CN=2096601ce8668eef7bea5897bcdb50d72f4a696a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:13:c8:80:f1:1b:a5:ae:9c:53:1e:ff:21:
84:b0:67:46:46:67:8e:2a:21:08:2c:a9:ae:a2:47:
7c:f7:f3:91:3a:8b:7b:e3:49:4e:aa:f7:76:f4:aa:
85:56:d0:b2:c6:a7:51:a8:75:3f:98:db:a9:d1:c8:
bb:5b:74:92:87:8f:5a:e9:e7:99:67:08:0f:f0:67:
cd:82:64:fe:d5:0a:cd:fd:0e:89:a0:37:c0:b7:c9:
19:1d:a6:f8:6d:47:e1:a5:79:ed:f4:f7:03:20:ed:
ae:0a:c0:bd:38:4c:c5:bd:4e:c2:e3:59:1c:c7:a2:
d2:6f:49:40:0d:08:ad:2c:07:49:32:20:14:9b:40:
7e:55:14:27:d5:58:ea:ee:96:09:bb:a4:2a:02:c7:
71:ff:b1:53:90:0f:ba:3e:5d:68:42:15:83:e4:fb:
45:78:a2:9e:50:4a:f4:c3:bd:3a:8d:26:2a:03:93:
cb:9c:e2:93:00:72:86:f0:ba:63:3d:64:ca:40:a0:
93:9b:be:a8:3c:2c:e4:e5:41:db:fb:75:4f:bc:4e:
04:fa:e1:db:40:fa:53:33:c5:0d:89:43:a6:1d:92:
ce:ec:09:7d:a9:a7:a7:58:c3:7e:9a:4d:f5:43:58:
89:53:7a:5b:7d:77:bf:b6:6f:8d:ba:b7:7e:10:69:
15:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:96:60:1C:E8:66:8E:EF:7B:EA:58:97:BC:DB:50:D7:2F:4A:69:6A
X509v3 Authority Key Identifier:
keyid:08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4d:9a:59:97:a1:b1:e3:a8:14:24:13:f0:0e:0b:19:d5:4f:
4e:77:03:d0:7e:f8:e3:bc:40:28:99:88:af:a4:62:82:8f:e6:
74:21:36:3d:1e:47:b7:7b:e3:a7:e2:02:78:c2:75:0a:01:b0:
b1:8a:8c:20:ed:4e:ec:f9:6c:c2:8b:17:b8:67:50:15:d1:15:
cd:81:c8:c7:81:2c:7c:2e:e6:a7:8c:93:ea:b5:02:38:de:52:
75:7a:e0:3d:7e:32:4b:c8:9e:d1:68:37:2a:a7:cc:83:49:4a:
5c:6d:5f:df:6c:56:d1:80:43:c5:be:de:8f:26:47:dc:aa:a7:
6e:84:6a:5e:9b:f2:a8:db:11:01:3b:3f:0f:d9:f0:f2:bb:1c:
c0:0d:ae:48:04:dc:6f:ae:fe:9b:22:39:7a:37:37:a2:cd:2b:
04:82:46:5d:73:e5:c2:68:03:ad:25:d8:ec:80:f8:cd:06:cf:
38:4c:9a:fc:b7:94:d3:4d:3e:d5:d5:b2:ac:63:ba:59:2b:8a:
77:51:6e:d7:e3:36:a9:05:93:a3:33:30:1e:8d:78:a3:37:4e:
85:67:a5:e7:fe:33:62:52:e0:d1:5a:2c:1c:1e:86:9d:2b:d2:
9d:7e:ed:db:12:76:d7:54:c2:28:6e:72:74:38:87:67:15:dc:
48:87:ea:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:54:56 2025 by rpki-client