Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
File: CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json)
Hash identifier: pbpfUAXfssh01NvaLmNGGLoL7Hb3a2N/WJnYTT57dSg=
Subject key identifier: 56:52:04:D5:CF:F0:FD:0E:94:C2:67:9C:EA:E7:79:7D:7A:04:3E:BF
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Certificate issuer: /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial: 019676B0EF2DACBAF7E030703236E6D1072F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
Manifest number: 0FF1
Signing time: Sun 27 Apr 2025 10:00:29 +0000
Manifest this update: Sun 27 Apr 2025 10:00:29 +0000
Manifest next update: Mon 28 Apr 2025 10:00:29 +0000
Files and hashes: 1: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: ae2QwuZL88cEGAKK0kLVu38y4zq0Je7nmqhanVDbG2M=)
2: EaaXkbC8P0tMcWH8_B2AeHqJuik.roa (hash: Agyi8/XYUtn0V9u60ReeITYzaWhDJOT1A+JDHxK163o=)
3: iRncY0RPMdG6ZS1FNbvbNQvbM88.roa (hash: cZd3pDxm+3G7IN3N9+ceJiYJz5MHexdMYYiB+WqQjOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:ef:2d:ac:ba:f7:e0:30:70:32:36:e6:d1:07:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Validity
Not Before: Apr 27 10:00:29 2025 GMT
Not After : Apr 28 10:00:29 2025 GMT
Subject: CN=565204d5cff0fd0e94c2679ceae7797d7a043ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b5:fa:ae:d7:8a:ca:d3:5b:f5:a0:da:32:ad:
d7:58:fc:77:63:36:45:7b:36:9a:3b:ed:4b:cb:45:
ea:3a:da:83:bb:72:78:01:5c:d6:1e:3a:98:d2:f3:
8e:29:ec:b9:71:bd:f3:8a:e4:b1:df:5c:c4:4f:74:
e0:e0:b3:25:a0:52:34:9a:8e:53:38:0d:8d:6f:26:
44:49:59:d2:65:65:32:9a:08:d5:de:e3:ba:63:2a:
05:6e:9f:1e:15:87:4d:03:78:e1:ae:ac:e7:51:f8:
0c:13:51:1f:b6:48:e2:50:33:bd:e1:d1:ff:2a:c1:
88:29:a8:01:93:3a:ae:74:df:23:5c:01:49:b1:94:
64:ed:ce:e4:8c:23:56:85:fd:5c:66:a5:de:f3:dc:
57:32:dd:c8:34:b9:f3:82:06:a5:16:0c:7b:f6:20:
36:25:92:2d:3b:ff:e0:65:5c:d1:3d:67:bd:19:ba:
c8:dc:48:00:bb:87:94:74:9d:d0:39:42:5b:5a:32:
15:0c:38:00:ea:47:3a:b1:23:2e:b1:f1:d5:e8:83:
1d:79:1e:ed:fc:ec:ca:de:15:68:d3:f5:72:2e:0d:
9e:8a:22:c2:50:c4:6a:b9:f7:68:9a:96:50:19:43:
3d:5e:db:50:a0:cf:a1:cc:25:c7:a2:8e:54:39:27:
f8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:52:04:D5:CF:F0:FD:0E:94:C2:67:9C:EA:E7:79:7D:7A:04:3E:BF
X509v3 Authority Key Identifier:
keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:4d:a0:c7:6a:e0:35:8e:b6:55:63:0a:be:a2:fc:e3:f2:03:
f2:96:6f:ec:55:1c:8b:00:4b:e9:a7:db:9b:d9:6f:5a:f3:92:
23:d8:84:3e:e6:7d:ae:74:3e:c0:36:45:3b:a6:4b:81:c1:23:
35:16:9b:14:98:d7:4b:9e:97:d1:6a:43:00:74:ad:df:e7:88:
58:e6:ec:bd:16:4d:38:aa:4d:1b:8c:d1:ca:68:f3:ce:44:2d:
1c:0e:58:93:41:a0:42:c1:7f:a0:9e:be:9c:7f:c2:b4:b1:02:
c8:bb:81:84:a5:88:47:fd:89:6e:7c:cb:7f:0e:5f:b5:a1:98:
65:d1:b8:49:d2:bf:f0:85:01:ba:27:20:a8:08:bd:42:3b:b8:
32:42:e7:60:83:ba:01:22:e9:c9:2c:34:9a:3e:4c:2b:be:98:
96:15:2d:15:d9:0e:ee:b0:07:4b:7b:a1:3a:37:f3:9e:d7:e6:
c9:5d:60:e0:fa:4f:51:34:a3:63:6c:03:eb:35:f2:3e:ce:37:
88:56:c9:1c:81:75:5e:97:91:f3:ff:7a:29:80:f0:2f:53:19:
93:09:0b:dc:a9:f5:3e:b2:75:96:34:db:83:0a:ca:91:47:db:
e6:45:40:ac:29:20:0f:a1:19:73:7a:82:46:41:f2:1d:c9:ea:
96:e4:7b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:15:49 2025 by rpki-client