Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
File: CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft (raw, json)
Hash identifier: fWxuaX2dhBilC7iQywiwNmz/d+EuHYcAfOs5UaoDuoU=
Subject key identifier: 17:8D:E7:4E:72:42:45:ED:2B:11:A5:27:9E:8B:9F:4F:61:0E:5F:B2
Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
Certificate issuer: /CN=0b1027ace17f0067f697c65361488192eaf64138
Certificate serial: 0196767AB41929C42E0B066C0DF8958E4E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 09:01:15 +0000
Manifest this update: Sun 27 Apr 2025 09:01:15 +0000
Manifest next update: Mon 28 Apr 2025 09:01:15 +0000
Files and hashes: 1: CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl (hash: H/iMafWqdGG5xAtg9ePa+TwYNbIFaQ1Jx2uEyPnbswc=)
2: ugc9sZedf1kQim_ILlGgEqT8zEQ.roa (hash: il9YS8RE+T8nxwMQDbcqvrV75JMzYR3yLbUc6KCg+oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:b4:19:29:c4:2e:0b:06:6c:0d:f8:95:8e:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138
Validity
Not Before: Apr 27 09:01:15 2025 GMT
Not After : Apr 28 09:01:15 2025 GMT
Subject: CN=178de74e724245ed2b11a5279e8b9f4f610e5fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:dd:10:b4:7f:3f:9c:ab:d5:4b:62:eb:9f:
e1:da:03:a9:18:6b:d6:32:bd:ed:ff:36:41:4f:60:
2b:d3:c5:c4:8c:37:e2:57:f1:e1:14:c4:df:1d:57:
42:f7:21:59:02:e2:05:41:e7:c9:68:48:7b:c6:3f:
2b:d1:82:04:84:8e:75:a3:71:01:b8:41:f3:16:4b:
fa:cf:a0:83:a8:a2:d2:01:7d:d7:bc:a0:8e:79:68:
72:16:c4:4e:ab:28:06:1f:75:25:92:bc:25:c4:79:
62:23:b5:c9:c0:b2:8d:e6:9a:0a:34:e2:b8:53:65:
54:d1:fa:30:bd:3e:ae:aa:b2:a0:70:98:8e:a2:3d:
1f:d0:14:45:f5:fb:b5:05:92:fa:d8:e9:ff:58:95:
f7:a7:03:e0:87:cb:5e:9b:7c:6b:c8:5b:97:3f:28:
86:f0:68:64:c5:b9:40:db:58:ae:b2:f1:91:34:e4:
06:b1:98:f4:35:4b:f2:53:d1:ab:9d:a9:20:4d:17:
c3:98:a7:e9:ad:97:6d:87:73:74:af:87:2a:f4:28:
12:75:bb:25:3e:d1:82:9d:37:8c:79:ac:f5:d8:19:
a9:3c:b7:c6:b5:13:cd:92:e5:3d:eb:2d:d7:74:9f:
49:bf:50:e5:dc:77:97:60:0c:99:69:83:09:de:0e:
2c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8D:E7:4E:72:42:45:ED:2B:11:A5:27:9E:8B:9F:4F:61:0E:5F:B2
X509v3 Authority Key Identifier:
keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:99:90:fc:95:fc:b6:82:3c:a1:63:9a:75:de:52:c6:e2:51:
c9:e9:01:78:6b:8d:99:25:1f:88:cc:00:a4:6b:ce:f6:c6:b2:
d9:32:c2:c2:92:a2:52:ac:4b:4f:00:e1:1c:41:68:bc:d1:26:
72:d3:ac:4a:57:05:de:80:63:08:28:9e:24:c5:40:12:b3:6b:
05:60:90:6d:b3:69:2a:4e:0c:50:d6:42:a2:8e:4d:0e:c8:9d:
9a:77:64:51:2b:d1:60:0a:b4:e7:aa:73:d6:6e:5b:19:0d:62:
82:29:f4:d3:77:1a:9d:16:08:d8:6e:1d:a8:8a:f5:98:7f:9d:
d5:f0:86:32:2e:cc:d0:9c:85:ec:cb:7e:c9:e7:cc:37:e2:92:
eb:02:cd:32:fb:6c:eb:79:3e:e1:a0:e4:18:0a:51:8f:bb:57:
8d:56:6c:8e:c6:19:aa:fb:ab:bd:2a:f6:1e:f8:7f:32:b8:8f:
7d:a3:f0:28:93:05:f9:b3:11:3a:41:a2:ac:d4:1b:a2:56:20:
20:0a:7d:e4:c7:d2:b7:ef:81:59:66:ac:1c:c2:2d:b4:60:2f:
a2:cc:3b:ee:bd:3c:23:5e:12:1b:4f:e9:53:61:e6:94:2f:26:
37:db:55:4d:bf:aa:95:7b:e8:72:59:97:10:ac:d4:21:1b:21:
0d:a5:1a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:54:26 2025 by rpki-client