Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
File: CnN3j7G-woyZgmUq7ehqAEwmgvE.mft (raw, json)
Hash identifier: WJe7D5J3E5cWEMIBXsNEAvJ8zAgxfWb2FTQuwyfKrDU=
Subject key identifier: AA:15:F4:B0:F6:AB:53:13:BB:7A:73:12:D8:2F:3D:E3:C2:BE:A0:B2
Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
Certificate issuer: /CN=0a73778fb1bec28c9982652aede86a004c2682f1
Certificate serial: 019673791B6A138717557862DC432A76FAFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
Manifest number: 0E22
Signing time: Sat 26 Apr 2025 19:00:38 +0000
Manifest this update: Sat 26 Apr 2025 19:00:38 +0000
Manifest next update: Sun 27 Apr 2025 19:00:38 +0000
Files and hashes: 1: CnN3j7G-woyZgmUq7ehqAEwmgvE.crl (hash: mHHsW+4crcYiV6jN2ub4Ts8CiYBmvLy1ZemIHdKWCG0=)
2: WG1KaYBil4vEXHxcooJOyBDWYD4.roa (hash: KHIxCFkGSHSfCiqYXlIC0/8nqViYZ1Y0FqW8AdTQIkI=)
3: u0xWet9ZDHMXVkjPrbzs1OmWO1g.roa (hash: ZwDDqnoNXIsm40ptE+7O6BmOJ1pGhObOr/LwRxZDq2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:1b:6a:13:87:17:55:78:62:dc:43:2a:76:fa:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1
Validity
Not Before: Apr 26 19:00:38 2025 GMT
Not After : Apr 27 19:00:38 2025 GMT
Subject: CN=aa15f4b0f6ab5313bb7a7312d82f3de3c2bea0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:87:b4:a8:cf:b0:1c:d5:13:f0:ad:2f:ed:
2b:33:92:fa:21:91:42:4c:b3:65:02:a3:40:84:27:
4e:02:bc:34:af:5f:36:6c:53:59:e1:df:8f:42:53:
da:1f:db:5b:68:a0:83:3f:0b:89:2e:4e:a1:40:94:
c6:52:44:28:45:c0:e9:22:86:55:28:6c:61:4f:34:
6f:bc:26:db:3e:f9:12:50:82:06:3c:fd:d1:21:0e:
06:d5:c1:a8:5d:de:ff:7f:bc:cc:f1:92:a1:36:5c:
d1:01:d2:9f:ad:8a:c6:fb:8e:1f:99:b1:aa:fd:f4:
fc:41:5a:67:43:53:7d:65:39:ca:13:9f:09:45:0a:
c7:77:e0:1c:5c:48:f4:97:d1:dd:95:18:fe:db:8d:
d6:ae:8f:e1:3d:b2:2d:b3:ce:c6:a9:cd:1d:ab:2f:
3b:7b:3c:83:55:68:71:96:b8:b6:a6:17:a5:41:eb:
d4:51:b4:24:27:df:41:7d:4c:d4:8c:ed:89:3e:7a:
7b:50:a8:0b:1e:e4:9e:c9:75:ff:87:ba:87:c2:a2:
65:75:76:0f:23:70:86:d9:1d:ac:42:03:d8:cc:75:
2f:03:24:b2:97:a5:c8:c2:5e:20:2f:6c:7b:2e:47:
a5:a3:2f:53:0b:c6:92:38:6d:0d:a1:53:1e:3f:34:
04:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:15:F4:B0:F6:AB:53:13:BB:7A:73:12:D8:2F:3D:E3:C2:BE:A0:B2
X509v3 Authority Key Identifier:
keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c8:bf:10:00:98:3c:b1:5d:e7:35:45:ee:5f:4d:c0:10:63:
e4:61:2e:8d:0f:16:cf:6b:2e:7d:d3:67:f7:27:07:9b:db:37:
10:39:f3:30:64:50:9a:ee:cb:a1:b8:5a:48:0e:39:e6:65:15:
6d:87:f9:23:3c:56:5c:7d:63:b9:2b:bb:84:8a:82:10:c5:58:
13:07:12:40:67:71:76:a8:cd:b4:2c:e4:be:ff:b0:ce:9b:f9:
8d:97:89:d4:f7:6f:bd:5c:c0:05:53:85:f7:c8:8b:4c:7b:75:
aa:1f:08:88:65:aa:1f:55:b0:f2:78:04:fa:25:b7:c4:9c:ce:
a3:b9:ae:db:a4:d3:6f:23:4b:80:1d:8c:89:11:a1:8e:39:b6:
fd:92:c0:9d:07:78:a8:d5:6e:56:4b:43:b7:0c:89:dc:fb:48:
6a:f6:47:85:3d:3c:f9:18:7e:67:f2:ec:49:e7:6c:16:a0:f5:
5a:67:83:e3:ca:9d:04:f4:17:f2:73:a7:c9:4e:70:c4:f5:e3:
87:00:53:21:b2:43:c8:a3:7b:93:10:e2:26:88:30:7b:d5:74:
d6:cd:90:c6:1a:bf:59:1e:6e:ea:72:3d:0c:6f:b6:dc:fd:15:
3b:4b:05:42:85:bd:11:c2:9c:f8:6d:1e:bb:f8:d8:eb:c3:e2:
b6:1d:86:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:19:30 2025 by rpki-client