Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
File: CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft (raw, json)
Hash identifier: gka/PQYiL95GjFwCTFzdal8eBbBugkg38jlHU/QUFoY=
Subject key identifier: 1D:F8:5A:14:40:8D:06:8F:41:11:E4:86:6B:E6:A7:AC:BF:70:79:63
Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Certificate serial: 019675308E4EC37AF217AF054C9AACFDC98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 03:00:38 +0000
Manifest this update: Sun 27 Apr 2025 03:00:38 +0000
Manifest next update: Mon 28 Apr 2025 03:00:38 +0000
Files and hashes: 1: CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl (hash: ngZuPs2/w/iROR5I+BgPIPv4FjMvekaw1jIOdg6Whtk=)
2: uqzFgf-8B62Y8mrkcQQAzXl65Xw.roa (hash: kCZVPY38TjsnXAkZkosAsOr4uT14uV5XbG2BhNU/FCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:8e:4e:c3:7a:f2:17:af:05:4c:9a:ac:fd:c9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Validity
Not Before: Apr 27 03:00:38 2025 GMT
Not After : Apr 28 03:00:38 2025 GMT
Subject: CN=1df85a14408d068f4111e4866be6a7acbf707963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:12:6f:19:b7:b8:0a:c6:34:1d:56:43:5f:bf:
d6:89:d3:2f:4c:ce:f7:92:37:ff:e2:96:41:88:37:
3f:b7:b9:17:65:01:f0:6e:20:15:79:8d:c4:a7:ae:
33:8a:39:54:0c:40:5d:61:59:57:21:1c:9c:9f:96:
af:2f:91:f6:9c:bb:15:9c:f4:3b:9c:ea:c5:9d:79:
21:62:01:f2:87:42:b9:65:78:19:6d:8d:d4:e0:ed:
e7:e3:d4:a9:05:3f:c3:0a:25:81:67:2c:1e:b5:84:
70:f3:7b:3d:fe:e1:29:4c:4e:34:c3:5c:09:76:75:
8e:b5:06:c2:3b:1a:9c:fe:98:5f:e7:cb:e4:77:9c:
86:3c:f3:b5:58:0f:55:ca:1a:d7:93:2e:b8:2a:98:
ed:2b:39:de:59:bc:c6:98:0e:62:20:88:06:a4:dc:
70:d3:31:af:b2:7a:21:3c:27:d6:48:26:a5:a7:90:
fe:3f:cd:be:ba:ed:a6:88:fb:60:4e:14:65:87:b3:
ac:ec:d5:47:1b:72:38:b5:a1:62:9e:df:00:88:1e:
9c:ec:d3:e1:b8:b1:46:a6:f6:24:c2:74:4d:51:6a:
2f:bc:5b:cb:16:df:92:25:06:71:9a:1e:66:f9:ce:
df:40:a8:5e:8c:88:79:e0:13:2a:04:66:5b:1b:b6:
20:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F8:5A:14:40:8D:06:8F:41:11:E4:86:6B:E6:A7:AC:BF:70:79:63
X509v3 Authority Key Identifier:
keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:de:d4:79:40:67:2f:2d:07:d1:70:9d:34:88:53:97:41:5c:
96:94:cd:c3:88:aa:a1:1b:2c:87:04:f1:60:a4:6b:2f:5f:44:
0a:ec:18:f4:95:21:c7:12:d8:3b:6b:4e:04:32:12:b0:f1:03:
08:73:42:50:05:64:2a:05:ad:00:24:57:07:ee:06:83:91:19:
ac:e7:47:43:33:66:13:7e:51:3f:5e:37:78:37:b4:72:80:4a:
1f:37:23:ee:a1:23:27:32:60:77:22:e9:8e:4b:0d:f7:58:bc:
ce:7c:e3:9b:a1:0c:82:23:d6:69:64:b9:b9:52:b2:16:14:dc:
22:58:f4:f3:d1:a9:ea:28:d2:1e:84:7e:ac:58:55:6b:95:74:
9b:ba:2d:1c:c1:0a:ca:df:49:c2:a6:10:95:06:da:6c:8f:c8:
a9:28:5d:5b:3c:36:77:f2:40:a4:5e:71:08:8d:43:54:03:a5:
19:9a:3a:ed:3f:20:4a:8f:75:df:5b:8b:cc:33:9c:f1:af:5a:
63:5f:4f:59:49:f7:9c:06:25:35:bf:6a:1a:36:c9:65:10:60:
17:f3:04:a9:4e:65:d5:2d:4b:38:3a:57:fe:55:14:e3:cd:3b:
9f:07:24:97:88:63:ed:90:f0:94:9b:1e:f2:1a:e4:5a:40:80:
e3:8d:9d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:49:39 2025 by rpki-client