Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: cpPEE3pq74xvnNOAJg2cDjAFZYyf/7D+m4n6ynvtTO8=
Subject key identifier: FD:53:8D:C6:D5:BA:4D:EB:E7:5E:DF:4B:18:70:29:2D:97:1F:39:06
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 019677FB418C11DC9A1C6A179EB1C5DEC82F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 123B
Signing time: Sun 27 Apr 2025 16:01:17 +0000
Manifest this update: Sun 27 Apr 2025 16:01:17 +0000
Manifest next update: Mon 28 Apr 2025 16:01:17 +0000
Files and hashes: 1: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: TFL485sQa2gWYG6d/7JNpQ/iRX3uUNU4VK5L5d9JzpQ=)
2: HVKHyWK-3ZYz5KzbpJqwzo297Wc.roa (hash: OXPJlcYgMDd9TeVLc/h7NB1E8LuM//ZUW90WT8mlIsU=)
3: MsZP7jFPKkJqiHU_2G78BAV7afI.roa (hash: MXKAJZ6YryHNNBfafKO5IJGZB2W0L2svHImaEXgu2Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:41:8c:11:dc:9a:1c:6a:17:9e:b1:c5:de:c8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Apr 27 16:01:17 2025 GMT
Not After : Apr 28 16:01:17 2025 GMT
Subject: CN=fd538dc6d5ba4debe75edf4b1870292d971f3906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bb:0c:90:de:57:ce:7a:dc:ca:f5:fb:5d:7d:
28:31:57:2a:6e:b4:ad:99:c7:a1:e7:23:a8:02:f7:
fe:7d:de:c0:54:0a:74:b6:7f:58:46:d7:ee:4d:f9:
5b:91:9f:c2:f2:67:54:b6:02:e0:3d:f7:50:e6:42:
e2:2e:23:62:4e:9b:bc:4b:b7:d2:79:8f:f3:65:22:
fe:99:86:f2:2d:b1:4c:38:58:b5:78:d0:ea:c9:1c:
32:86:25:53:d2:b0:ec:2b:e8:51:1d:c2:f1:9f:1e:
41:b3:b7:78:4d:2f:a3:25:e4:a4:2d:1e:6b:69:f7:
7d:7c:85:ec:f3:7b:5a:03:3f:31:18:23:be:cb:fa:
0f:e4:05:8a:31:74:45:25:71:50:b4:12:10:e1:da:
d7:53:30:f8:2a:c7:95:10:2f:7d:cf:b0:6f:a0:22:
ed:85:ad:15:f7:2a:a9:73:d2:0e:3a:7b:3a:1b:ca:
fd:66:f5:e3:04:72:bb:50:97:9a:e5:24:a9:e2:2d:
bc:e4:24:c9:d7:e0:e1:10:b8:38:ab:9b:11:2a:88:
32:f4:4f:c3:59:9b:38:1b:4c:fe:f8:e5:c8:c1:9b:
64:b1:34:1b:62:c4:86:e0:53:45:a7:bb:9a:06:10:
d9:a1:4a:7b:42:3b:dc:77:b9:71:a6:02:52:c1:14:
27:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:53:8D:C6:D5:BA:4D:EB:E7:5E:DF:4B:18:70:29:2D:97:1F:39:06
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ae:9f:2e:57:4d:61:f1:7d:d4:39:15:37:51:4f:78:22:d0:
54:f7:5b:09:1a:93:66:ce:b1:60:1c:8d:06:5f:75:03:6e:82:
1d:a5:a0:8b:3a:87:68:99:73:bc:5b:51:cb:68:bd:c5:99:b2:
37:fe:ec:25:23:1e:49:d3:24:7a:08:52:20:4f:1b:72:31:68:
68:9f:c7:2e:3f:d9:0a:33:02:68:da:03:1b:b7:a8:84:d3:76:
9f:86:92:86:0a:99:b9:89:fd:c7:ff:47:41:14:75:d6:d4:c8:
59:1b:2b:b1:a1:9e:e2:8e:21:0c:15:29:ac:1f:cd:20:0e:0e:
6f:d9:26:70:dc:d7:ff:35:5d:59:35:82:05:f1:00:44:97:ee:
8f:ed:76:83:0a:d5:da:db:65:9a:6c:7a:6c:86:ac:86:88:46:
25:89:22:2e:22:97:32:95:b2:36:b1:7f:53:92:08:0e:1b:d7:
47:cd:0e:07:94:72:a5:1f:d3:66:21:66:78:7f:f7:46:75:de:
df:c9:c8:9a:2a:d5:a6:a6:5e:e2:56:4e:a8:ce:0c:02:1f:60:
98:6a:f5:3f:11:50:13:6f:91:c0:80:93:78:6d:47:e0:28:e1:
67:02:da:11:a2:ff:54:0b:ad:d7:10:1b:a1:19:40:92:07:fd:
e8:0f:60:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:31:19 2025 by rpki-client