Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
File: CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft (raw, json)
Hash identifier: AcgXd7N8WYOxtmuXzRfHG5V+Cbv4QaiURZR+dYLOdP0=
Subject key identifier: 27:7E:59:C9:60:F7:52:D4:8F:89:6D:B5:AC:39:43:92:F9:C6:CC:63
Authority key identifier: 0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
Certificate issuer: /CN=0a06f033537bbd863bbca2b62092d8de3611f651
Certificate serial: 0196A6F8DF3FC80FA03E9BC40AA2C958AD00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
Manifest number: 07CA
Signing time: Tue 06 May 2025 19:00:49 +0000
Manifest this update: Tue 06 May 2025 19:00:49 +0000
Manifest next update: Wed 07 May 2025 19:00:49 +0000
Files and hashes: 1: CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl (hash: y1p3NY0R1AaiYulEP58h9sHtPsp6nxIpQWC2CXwqTjQ=)
2: pltDgh5JbbEWSggwVXLGKtobVl8.roa (hash: XwQl2FIwqmmMyr6/rQAaXcZHJoaBjslDK7+U58bsYig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:f8:df:3f:c8:0f:a0:3e:9b:c4:0a:a2:c9:58:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06f033537bbd863bbca2b62092d8de3611f651
Validity
Not Before: May 6 19:00:49 2025 GMT
Not After : May 7 19:00:49 2025 GMT
Subject: CN=277e59c960f752d48f896db5ac394392f9c6cc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:65:29:dc:5f:d9:e1:12:23:76:30:1a:43:f4:
a1:a0:87:12:8a:ee:3d:05:bf:91:d9:98:f8:cb:4a:
fa:1c:7a:1b:99:9b:bc:4e:82:e3:a0:dd:ef:8d:87:
ce:95:03:ae:25:15:b7:0a:28:35:23:d4:97:bf:ba:
ab:51:d0:ee:11:cd:2b:96:48:bf:9d:29:be:ec:55:
ad:b2:8a:c2:54:85:3c:88:93:d1:41:cb:67:f0:b4:
6e:8e:a3:02:d3:b5:ef:47:b8:37:87:3b:f8:51:00:
0b:1b:43:b9:cf:89:c2:ca:95:df:bf:76:7f:c8:08:
d2:0d:fe:8c:32:79:92:e6:0c:74:16:1d:95:79:6b:
8f:6f:00:0c:a1:24:b2:18:25:0c:06:6d:00:f2:78:
cf:e2:82:d9:a1:35:12:da:f1:73:52:f3:d4:c8:f4:
65:0e:7b:fe:5e:7b:43:84:15:33:3c:d3:90:34:76:
85:c1:7f:af:d1:16:56:38:78:d2:e8:f6:67:10:6c:
49:60:b3:c6:13:26:9d:74:f1:11:db:f1:ac:36:f6:
4e:24:82:cc:53:55:dc:e3:ed:a7:73:a4:c5:c3:b5:
0f:b8:6b:4a:2b:a3:8f:9f:59:ed:ba:21:4d:98:74:
d3:f4:78:b9:e0:e6:6f:9a:80:b8:da:f3:a3:dc:b6:
c6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7E:59:C9:60:F7:52:D4:8F:89:6D:B5:AC:39:43:92:F9:C6:CC:63
X509v3 Authority Key Identifier:
keyid:0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d1:e9:97:a1:2b:42:47:56:23:65:3f:ae:ba:2f:9f:c2:77:
b0:d7:55:fc:39:c1:4d:cf:21:6b:4b:ab:03:df:d4:5e:30:db:
91:60:74:81:ae:b1:ca:4b:a6:49:94:2a:e0:20:68:c7:eb:ca:
82:4c:9f:7b:3b:aa:5a:97:c9:ec:28:65:db:96:f8:80:b5:41:
87:c5:c1:0a:3d:2e:46:51:f6:75:e1:ea:9d:f2:46:56:40:a4:
a7:e1:c1:f6:a5:05:5e:f3:a5:49:39:ab:0f:11:0a:28:a8:02:
21:b1:47:44:06:31:89:02:b6:65:ca:6a:15:8a:b1:9a:34:b8:
87:7d:d1:95:81:38:2f:66:b5:cc:1c:e7:f7:f7:7f:87:7b:b8:
c3:c1:aa:31:ff:6e:98:91:0b:78:a5:05:47:04:57:67:27:07:
a3:28:2a:26:58:aa:8c:3e:ca:a6:60:1c:5f:5a:6e:b3:66:37:
6b:ac:bf:98:c5:57:98:65:89:67:a3:43:8f:23:7a:4e:2d:98:
75:71:cf:36:c5:1c:72:ad:33:36:0d:69:3e:d0:08:04:ec:1a:
77:f6:91:09:76:bb:74:6b:6a:09:ba:e3:93:fa:99:9a:72:a0:
71:8d:f1:af:7f:d2:b0:2b:60:2b:1e:7f:3e:98:9f:82:9c:57:
cc:03:0c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:12:28 2025 by rpki-client