Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
File: cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft (raw, json)
Hash identifier: vi27NWxL2wC7XQaF9h4wR3uI2SrhwC4Ta2JYtV7Alcc=
Subject key identifier: E2:71:2A:79:4A:22:63:C7:91:00:A6:88:55:78:C7:B0:63:01:D2:D0
Authority key identifier: 70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
Certificate issuer: /CN=708029a674177efd99252275094618c0c9cfbd1d
Certificate serial: 019674548938564992091D29AF9F1A5CEF97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
Manifest number: 04D9
Signing time: Sat 26 Apr 2025 23:00:19 +0000
Manifest this update: Sat 26 Apr 2025 23:00:19 +0000
Manifest next update: Sun 27 Apr 2025 23:00:19 +0000
Files and hashes: 1: cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl (hash: bUAdPDHG5nxZqvd+/8gRlna2y9bT+qpxJaoF3rSPFmw=)
2: gf0Xy6qbBLzQzsLjIlFfh_7JZjk.roa (hash: Ah/uhPrNkgzcI+es99gluPPaRScN93x4JTQmt+pb9V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:89:38:56:49:92:09:1d:29:af:9f:1a:5c:ef:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708029a674177efd99252275094618c0c9cfbd1d
Validity
Not Before: Apr 26 23:00:19 2025 GMT
Not After : Apr 27 23:00:19 2025 GMT
Subject: CN=e2712a794a2263c79100a6885578c7b06301d2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:3d:13:f0:1b:d0:22:52:6c:9b:e9:3a:bd:df:
28:72:ec:03:02:12:5b:0f:b5:1e:88:37:a2:7f:78:
7a:9d:30:5f:90:ed:79:54:86:f7:a7:e3:6e:ea:fe:
77:ea:c6:f9:1f:da:e5:87:e6:e3:04:20:5c:15:64:
fb:71:fb:bc:76:73:01:b0:9d:b2:07:34:4a:7f:77:
6f:eb:d8:ab:56:74:7c:44:9e:3b:c4:6d:8c:b5:9f:
69:86:88:6b:fc:62:29:1e:fa:9f:b6:50:71:02:0b:
d8:0b:a1:19:18:af:f8:83:de:ff:f0:ec:29:6e:89:
19:98:c5:37:83:87:48:19:66:da:06:3a:fc:f5:24:
34:a9:7c:1d:64:5a:3d:38:e6:ab:62:93:e0:95:b5:
8b:31:a3:78:3b:24:1f:f0:dd:12:4d:ac:f8:a0:0b:
91:4d:b5:42:63:9e:bc:6d:06:4a:44:18:80:69:fa:
e7:b7:23:1f:2f:87:d1:1a:54:de:b5:87:89:23:cb:
c1:8a:a1:c9:a0:5a:db:a5:ff:26:19:36:40:b6:e6:
f4:6e:67:59:0d:cb:80:a0:4b:42:3b:ee:f7:6a:47:
81:fa:c4:b4:88:64:69:69:cb:75:51:de:19:8b:5f:
41:c0:72:64:35:53:1f:62:f3:56:f0:00:5a:18:b0:
96:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:71:2A:79:4A:22:63:C7:91:00:A6:88:55:78:C7:B0:63:01:D2:D0
X509v3 Authority Key Identifier:
keyid:70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:95:0c:24:81:81:94:22:57:19:8f:6f:ec:80:85:74:d3:96:
9b:1a:20:a4:e0:07:77:7f:7a:e9:06:4c:be:31:7a:86:3b:38:
be:fb:f0:7d:81:39:44:34:fa:1c:e1:5c:51:54:57:c8:ff:fe:
7a:2b:05:e6:d7:e9:52:0a:1a:42:81:68:22:75:78:14:c0:d6:
c2:2d:26:a3:e8:88:2f:21:74:22:44:1a:85:88:4f:4d:1c:f9:
20:1b:94:84:02:25:38:2c:6c:d7:0f:69:02:23:a7:5e:d2:92:
5e:97:0a:1f:66:16:cc:a1:91:02:61:39:1c:54:a1:c1:da:99:
23:2a:6a:c0:74:7f:54:6f:57:ff:e7:67:a9:bb:5c:00:bf:02:
b4:88:a1:06:0d:89:6b:44:31:09:01:fb:10:88:46:f8:ba:47:
c4:68:2c:34:00:56:2a:20:e8:04:0d:74:f7:5b:87:a5:2f:9d:
08:b6:0e:09:13:94:9d:d8:f4:5d:3b:5c:d7:08:35:14:75:1a:
46:6a:df:32:e0:ee:0d:58:e4:6f:71:8b:2a:6e:d3:d8:81:9b:
e6:b5:a3:10:f0:88:1c:df:b7:d3:0c:0f:fe:2b:55:15:f5:04:
fa:5e:93:47:97:7c:0b:36:25:df:b8:69:43:4f:0a:c2:71:09:
bc:0e:0a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:03 2025 by rpki-client