Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
File: CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft (raw, json)
Hash identifier: Imrvobcrh4TX5a45sYumGe7A74Boh6nYf93Kwz6tGos=
Subject key identifier: 27:9E:E4:0B:0E:B8:C1:71:7D:01:BB:04:9C:65:49:3C:7E:41:17:E3
Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
Certificate issuer: /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Certificate serial: 01967C7C51DAED4E7FCF416FDFBF983D8B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
Manifest number: 0CAC
Signing time: Mon 28 Apr 2025 13:00:44 +0000
Manifest this update: Mon 28 Apr 2025 13:00:44 +0000
Manifest next update: Tue 29 Apr 2025 13:00:44 +0000
Files and hashes: 1: CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl (hash: WeTX8ciCPdHqiqceICQwUd2a1Q2wRzTf3hwCDXcAjMU=)
2: YVDiu2Bt78Tw59IN2GiD08sPbEY.roa (hash: gfGYuVaf6Cp8c+ZZnEv2bV6oyjPxVpLPDTmNGZk2jGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7c:51:da:ed:4e:7f:cf:41:6f:df:bf:98:3d:8b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Validity
Not Before: Apr 28 13:00:44 2025 GMT
Not After : Apr 29 13:00:44 2025 GMT
Subject: CN=279ee40b0eb8c1717d01bb049c65493c7e4117e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:04:bf:c7:53:52:99:3d:b9:88:56:dc:82:
b2:b5:ae:bf:f8:60:11:67:89:bc:99:ac:08:f2:77:
1a:86:39:d0:af:5b:e9:1e:8a:4e:4d:c2:fc:bc:46:
13:e8:b2:e6:b1:89:af:57:38:32:9f:1b:be:ec:b6:
2c:70:75:61:76:d8:ef:80:86:0b:91:c6:f1:25:30:
b0:a0:bf:74:32:37:42:25:99:62:16:67:39:df:c1:
2c:bb:33:53:3d:6d:99:bb:fa:c0:67:19:74:80:99:
a2:49:50:1d:77:f4:2a:d6:39:8e:dd:60:4c:e8:0b:
d4:ee:df:29:74:06:11:a7:19:52:79:20:f2:4b:94:
ae:e1:fc:33:60:34:6b:3c:85:c4:45:38:66:b9:c6:
5c:f0:bf:1c:9e:38:bb:9b:d1:02:25:40:60:49:4e:
79:66:20:16:ef:96:ef:73:49:bc:2d:2e:1c:9a:28:
37:cf:b7:89:d8:ee:40:ea:a4:f1:d0:dd:a0:8d:05:
57:ae:cd:ea:b0:0e:ae:56:f4:97:a9:f5:71:43:d5:
b8:27:36:a2:20:c2:8b:ff:6c:d5:54:55:41:2d:e4:
1a:a1:ed:21:34:5f:b6:eb:fb:c3:18:95:0d:f6:d4:
bd:ad:95:9d:82:cf:8f:8a:61:a9:cc:43:1c:08:57:
d7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9E:E4:0B:0E:B8:C1:71:7D:01:BB:04:9C:65:49:3C:7E:41:17:E3
X509v3 Authority Key Identifier:
keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:97:f4:6b:1b:2c:23:67:1a:f8:11:1f:76:6e:5d:ee:31:ff:
e5:4c:3f:f2:f4:ee:cb:4d:eb:3c:c5:a4:e1:02:e8:c3:c9:66:
3b:51:fd:35:59:f9:6f:a4:4d:a0:9b:70:5c:50:42:63:08:54:
e1:b9:87:19:54:93:f5:ea:57:a4:39:a8:d6:92:c8:14:5f:41:
81:ef:58:f7:71:70:b8:68:36:12:06:0e:2a:45:77:12:2d:ce:
9a:a4:84:0d:c4:88:b1:29:0e:31:eb:45:db:c9:93:39:92:e0:
56:e3:2c:3c:94:09:a8:46:cd:68:93:f2:9c:78:87:81:f6:cb:
fc:f0:9a:1a:fd:bd:79:fe:9b:21:73:a0:17:12:3f:70:8b:ed:
49:b2:a8:9e:fb:1f:4e:ff:a0:54:98:d2:e4:f9:c2:4e:4c:b8:
90:76:71:9a:53:c0:bf:c9:29:5c:3e:f4:de:df:f2:53:58:12:
13:3f:03:30:3b:00:6d:b6:1f:f5:60:87:fc:66:ff:46:00:d1:
8d:9a:c3:37:fd:ad:e6:fc:f8:05:71:77:f7:8b:61:81:e6:17:
44:c1:2f:57:da:cd:a2:ad:6e:2c:32:fc:ef:1a:bf:7d:bd:c6:
03:13:67:51:1e:ec:81:51:87:b7:bd:81:27:a3:5f:5a:4a:e9:
89:8d:bd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:12:34 2025 by rpki-client