Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
File: CQggTXz1vEqrOP-jnaOmge0he9Q.mft (raw, json)
Hash identifier: Jtq4jbUmbkqbDFy1YuhcaDNyBueQEMqVeo1RXbOOGXI=
Subject key identifier: CE:90:9A:0B:0C:AB:7A:F3:C4:2C:D2:6E:86:55:17:60:53:FC:9F:58
Authority key identifier: 09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
Certificate issuer: /CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Certificate serial: 019679442E3289509F3E3A436FCF1C56A549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 22:00:33 +0000
Manifest this update: Sun 27 Apr 2025 22:00:33 +0000
Manifest next update: Mon 28 Apr 2025 22:00:33 +0000
Files and hashes: 1: CQggTXz1vEqrOP-jnaOmge0he9Q.crl (hash: WmHzxx0I0nTsF7f5czoFzJ2L2tc1vYNyWDQeLt7xTY4=)
2: sDPpx-mL_-TYo49AUalN83Hb7rw.roa (hash: TLER53MCgePm+J2o6lGDLT56kpvbjUNH4PxF0iwFFXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:2e:32:89:50:9f:3e:3a:43:6f:cf:1c:56:a5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Validity
Not Before: Apr 27 22:00:33 2025 GMT
Not After : Apr 28 22:00:33 2025 GMT
Subject: CN=ce909a0b0cab7af3c42cd26e8655176053fc9f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:ff:51:05:62:6b:aa:ca:92:36:b6:09:77:
8f:0b:20:8f:29:3f:d7:2e:43:a1:5f:5a:df:7a:c8:
b3:f2:da:0e:55:e9:93:e7:27:a1:65:24:22:1c:53:
a7:d8:56:a0:7c:8e:2b:62:15:63:52:5e:11:80:20:
c5:33:3b:b9:95:7a:62:38:1d:05:6d:ba:52:60:be:
07:45:8e:bf:3c:d3:81:c6:8d:da:dc:e6:fd:0a:37:
b3:00:6c:39:77:bd:4f:5b:d7:b3:d6:fe:7f:84:7e:
15:b2:95:44:7c:8f:1d:40:f7:c7:b9:1d:28:47:f9:
50:a3:e3:66:79:34:d8:5c:20:c6:20:11:6c:7f:e2:
90:61:b7:52:93:ab:dd:b2:22:09:62:d5:58:5b:e9:
a7:d3:dd:18:2e:70:6a:88:40:be:49:92:b7:db:58:
4e:05:96:a3:ae:a6:8d:22:99:cd:2b:82:e0:8b:ec:
50:e9:a1:39:13:82:fe:17:8f:5d:14:88:e4:72:85:
28:de:c6:2e:9f:a6:c7:1b:35:d7:6b:a2:31:dc:ee:
97:21:ec:ec:bd:df:40:79:cc:57:91:5d:99:59:77:
c5:c0:d9:4a:a9:d4:84:d2:47:28:5c:78:2c:dd:b9:
0a:68:2c:85:9b:b0:6e:e0:db:8c:db:8f:33:9f:3d:
a4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:90:9A:0B:0C:AB:7A:F3:C4:2C:D2:6E:86:55:17:60:53:FC:9F:58
X509v3 Authority Key Identifier:
keyid:09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:08:52:f5:92:45:88:bf:73:a2:8b:bf:16:ff:6c:d4:95:ae:
fd:24:66:c1:ac:28:07:7b:6d:e8:82:0d:87:38:9f:0c:40:e0:
88:89:92:58:a5:be:d1:8d:b1:3a:82:83:77:b4:0f:a9:2a:e5:
ae:af:fb:33:a5:8c:40:e8:1a:f5:a4:68:bb:62:42:70:10:5e:
f2:ed:5b:48:71:23:17:66:90:2c:2a:d9:72:09:ba:fa:13:b9:
b0:3b:19:1a:89:e3:09:3a:6e:93:f2:16:2b:41:85:10:7a:77:
4e:37:0d:d8:7d:25:79:ca:ec:8e:a0:7c:33:15:5d:97:eb:df:
b2:db:de:21:82:02:f8:48:57:2a:91:89:bf:b1:7c:e3:2a:2f:
8f:73:fe:30:75:06:f5:b9:e1:c5:81:37:c3:9a:eb:79:0f:92:
4c:b7:17:7e:d4:a1:5c:42:95:81:bb:08:b4:ba:f2:9e:84:9c:
47:36:b7:3d:b6:5b:b4:79:8b:9a:a7:7b:1d:ab:68:9a:65:26:
20:ca:c8:3f:cf:5a:e4:b7:07:39:b7:3c:a6:0b:4d:2e:13:95:
e3:be:7a:84:2d:1d:dd:c0:1d:9b:e0:26:b4:bf:83:10:52:d2:
d8:80:17:81:b0:5d:cd:d4:76:38:1c:da:98:c3:30:d6:63:85:
6e:96:da:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:11:55 2025 by rpki-client