Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
File: 04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft (raw, json)
Hash identifier: G2bwc1zpN2B6QGcNscrxeczQEVNXn8R0Muv4HXtRTEw=
Subject key identifier: CB:FC:0A:5C:D4:57:B9:29:F4:13:3D:56:39:E7:D4:93:52:80:9D:B0
Authority key identifier: D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4
Certificate issuer: /CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
Certificate serial: 01967E6A86AE3FC67B3E781D554DAB7A082E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
Manifest number: 0213
Signing time: Mon 28 Apr 2025 22:00:32 +0000
Manifest this update: Mon 28 Apr 2025 22:00:32 +0000
Manifest next update: Tue 29 Apr 2025 22:00:32 +0000
Files and hashes: 1: 04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl (hash: j0TZb4e5LKCkk0RAmUmbNr+ax1C/lOxS16/1CXesD3Y=)
2: 0k42oFwK9zeHh7UudZGNANSBYXM.roa (hash: 5Ao6mH3fPzWjkBEDJZN7zRWdA8LcUFLpcoEHQj83IGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:86:ae:3f:c6:7b:3e:78:1d:55:4d:ab:7a:08:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
Validity
Not Before: Apr 28 22:00:32 2025 GMT
Not After : Apr 29 22:00:32 2025 GMT
Subject: CN=cbfc0a5cd457b929f4133d5639e7d49352809db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:6f:36:62:93:83:a0:65:1d:d4:71:e9:f4:
b6:ec:a9:14:ee:75:f6:5a:a7:19:f2:7a:59:68:6f:
c6:ac:b5:cd:db:2f:e2:a3:0d:26:75:cf:98:34:95:
4c:cd:43:54:c5:b1:a3:11:3a:40:6c:0f:f2:0c:e8:
79:d3:02:8d:80:be:d0:23:f2:e9:bf:87:76:68:14:
fe:e8:f9:98:7d:26:79:ad:84:c3:2b:1c:98:08:75:
7c:69:3d:54:e2:e0:55:af:8a:2b:6d:60:12:b4:57:
7f:e3:d5:84:8f:05:94:36:94:e1:e3:99:97:ed:41:
41:3d:ab:75:bd:f8:c2:9a:50:a0:1f:2a:27:a2:9c:
97:79:84:62:c0:0c:d0:81:34:61:ab:6c:b2:76:da:
7d:e8:f5:01:0f:30:aa:fc:7a:95:0e:29:69:05:fe:
22:5e:60:da:37:f0:a0:9a:2b:b7:05:14:a8:41:b0:
e4:c4:7b:0b:24:a6:4a:91:64:ff:de:61:f2:a2:9c:
13:d1:de:2b:b3:f1:c9:f0:bc:34:85:ae:ba:dc:84:
4c:02:8b:b7:09:14:ac:0a:dc:4d:7a:47:8f:bd:ce:
2b:b4:ac:b2:cf:f3:2b:8f:71:4c:c0:29:c7:9e:d6:
5f:39:e2:35:fc:b0:d6:0e:48:9b:3c:3e:24:3d:4a:
2d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FC:0A:5C:D4:57:B9:29:F4:13:3D:56:39:E7:D4:93:52:80:9D:B0
X509v3 Authority Key Identifier:
keyid:D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c6:62:25:7f:9e:a9:82:24:87:1c:65:3e:d9:38:c3:13:a8:
f1:93:b4:91:93:2d:a2:bb:b8:3d:85:61:e0:cb:01:49:2f:ad:
a6:b3:e4:d2:29:9c:3b:bf:76:23:87:75:d4:88:f8:30:cd:d1:
c0:ad:86:b0:b5:83:85:62:84:a4:80:69:0d:16:d7:6f:7a:d6:
77:02:62:da:fb:76:3c:e0:10:7b:fd:94:f6:66:6d:97:8d:a6:
a5:7a:32:9a:d6:0b:65:6f:7a:a9:0c:11:bc:23:d9:9a:28:2d:
3d:90:98:37:6f:e1:35:6e:11:a9:7d:5c:6f:b6:82:68:70:aa:
b4:51:db:70:b9:c8:c6:95:d8:55:51:59:dd:a3:55:74:98:ea:
c4:b9:02:c8:f1:46:39:19:9e:71:31:17:56:69:ad:85:5f:f4:
86:a6:3a:b4:6b:34:6a:e6:7a:5d:46:85:59:01:e8:6f:0b:c4:
e3:a9:ee:b5:3a:6a:39:3e:70:50:9f:73:be:b3:f9:2a:f5:d0:
37:39:77:de:3a:60:00:90:19:84:9e:7f:92:2a:b0:95:22:e9:
47:e6:d3:1f:c3:f4:6b:05:9d:2e:27:fd:a3:0e:64:9f:e0:18:
c9:c2:45:d8:81:e3:b6:45:50:41:3c:ce:19:39:af:df:29:59:
01:60:b7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:31:26 2025 by rpki-client