Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
File: CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft (raw, json)
Hash identifier: +XSTc9B97O9h956yNoyApuvqNQpX776c3KnrkGhTQTI=
Subject key identifier: 31:0F:0A:AB:80:45:98:8A:F0:78:94:4E:8D:F1:52:11:6D:6E:2F:6F
Authority key identifier: 08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
Certificate issuer: /CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Certificate serial: 01967D57B8368ED77B8B60FCBA44981C84F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
Manifest number: 1517
Signing time: Mon 28 Apr 2025 17:00:22 +0000
Manifest this update: Mon 28 Apr 2025 17:00:22 +0000
Manifest next update: Tue 29 Apr 2025 17:00:22 +0000
Files and hashes: 1: CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl (hash: G2bKCDxGtRHZ6Fk0lONRSjVxUljiWfsUMvaFwCjjpek=)
2: vAZb7s6D6Fuq3D4AHtKSkcv7tbk.roa (hash: dNxWOWstiC1jdikcIMTYHaBFr6iCMFTRh+rrcRXQbJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:57:b8:36:8e:d7:7b:8b:60:fc:ba:44:98:1c:84:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Validity
Not Before: Apr 28 17:00:22 2025 GMT
Not After : Apr 29 17:00:22 2025 GMT
Subject: CN=310f0aab8045988af078944e8df152116d6e2f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:81:9c:66:f5:40:3c:72:1a:32:1b:3a:90:19:
be:2d:bc:db:8b:c1:8d:39:05:bb:4d:cc:d5:e3:09:
13:60:86:fe:75:9a:21:4f:f3:fd:9a:df:4c:cf:98:
9c:34:a1:d9:14:39:04:c3:78:d5:b8:44:ae:1f:85:
66:db:47:9f:e1:f6:38:cd:6e:96:72:b7:1c:38:7b:
07:f7:bd:e3:f3:c8:c5:b5:4a:e1:db:62:b8:a5:11:
f8:80:bc:2f:b5:2d:c6:ae:a0:6f:04:3a:99:66:0d:
10:41:3c:e6:f3:16:31:bf:a6:87:98:aa:55:e2:ec:
7a:aa:0b:23:b9:69:48:5c:7c:05:49:af:f6:34:f6:
3f:91:5d:d0:c2:19:3d:db:06:64:c2:37:f4:de:ae:
0c:5b:aa:1d:d8:f8:a8:31:29:e8:77:54:1d:05:ee:
fe:29:4a:0a:57:4c:99:29:b4:e2:01:e2:59:d9:d3:
f9:23:7a:80:29:f3:cf:c4:8e:f3:b3:de:c8:55:86:
1d:78:86:96:93:98:eb:61:1f:15:af:ac:5e:c2:9a:
95:18:1b:39:88:72:a1:bf:01:89:0e:ce:eb:b0:64:
b3:d3:ba:8b:78:50:a7:b5:16:3a:c5:bd:10:9a:41:
8e:b7:47:8d:51:a4:73:46:22:5b:1f:43:93:4a:a9:
a7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0F:0A:AB:80:45:98:8A:F0:78:94:4E:8D:F1:52:11:6D:6E:2F:6F
X509v3 Authority Key Identifier:
keyid:08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e9:5d:fe:02:05:71:4c:20:21:da:3a:a2:45:e0:86:2b:7b:
87:7b:71:0b:c1:12:5c:b9:a7:43:ad:cd:5f:32:ee:9f:c2:16:
43:f0:d8:94:54:30:16:d5:fb:b2:9c:de:4d:db:b3:d3:80:de:
99:20:b0:dc:dc:f5:98:67:d0:ee:9d:b4:6b:23:51:35:f4:d1:
34:e7:88:2c:60:a9:3e:ce:9a:69:a3:30:51:78:4f:f9:a6:82:
ac:35:9e:54:bb:e9:20:cb:11:2a:42:85:bf:b7:e7:4a:69:0d:
6b:7e:89:7a:be:e2:1a:a3:2d:38:01:fe:5f:c7:39:d9:9b:9f:
88:ae:01:44:ae:61:e4:e5:30:52:8d:34:46:16:15:17:81:a6:
3d:12:ac:59:e2:f9:08:59:f2:64:1f:6d:a8:93:02:14:23:a8:
47:14:ba:e8:32:6a:df:f2:ad:eb:78:a3:e1:ff:c7:8a:28:84:
04:de:37:12:32:3f:17:a0:11:94:66:43:0e:4e:67:fa:cf:e0:
b1:f2:fb:50:74:d2:00:d1:5c:3d:5c:29:74:ed:01:0f:4b:23:
01:16:01:0e:a8:3f:28:21:1c:63:78:82:cb:06:91:44:4f:83:
a8:94:99:d9:e1:5e:a8:b5:c6:e9:1d:bc:a3:18:a3:b6:43:0c:
20:22:ee:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:34:51 2025 by rpki-client