Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
File: CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft (raw, json)
Hash identifier: Um48eegDYII3/BemeZDvcK/NBGTP+ipGOIzBM5ozekQ=
Subject key identifier: D5:81:05:4D:A3:C6:B4:36:4F:6F:2A:AB:34:14:5B:59:6D:78:AB:11
Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
Certificate issuer: /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Certificate serial: 019676B0B0175E0E1DB909527B28728E010A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
Manifest number: 0CA9
Signing time: Sun 27 Apr 2025 10:00:12 +0000
Manifest this update: Sun 27 Apr 2025 10:00:12 +0000
Manifest next update: Mon 28 Apr 2025 10:00:12 +0000
Files and hashes: 1: CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl (hash: h0BK/IEnsqUkzOWCpEx3yrwH1aAoTAOBmkwiOpMFVeI=)
2: YVDiu2Bt78Tw59IN2GiD08sPbEY.roa (hash: gfGYuVaf6Cp8c+ZZnEv2bV6oyjPxVpLPDTmNGZk2jGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:b0:17:5e:0e:1d:b9:09:52:7b:28:72:8e:01:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Validity
Not Before: Apr 27 10:00:12 2025 GMT
Not After : Apr 28 10:00:12 2025 GMT
Subject: CN=d581054da3c6b4364f6f2aab34145b596d78ab11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0b:ea:fe:cc:7c:03:02:2a:99:de:56:cf:41:
1d:58:10:96:67:fd:2a:27:cf:8a:31:ed:22:2a:eb:
18:62:66:82:22:93:ea:74:d7:c4:3f:a4:66:07:1b:
30:61:59:ac:ea:5a:ff:ff:59:a4:37:53:71:5d:77:
6d:3a:5c:16:af:0e:16:d1:83:cf:35:d1:eb:f8:8e:
cd:fa:ac:46:13:cd:30:30:58:59:1d:89:13:35:85:
e6:e2:98:16:f6:b1:96:42:c3:3d:10:de:58:e4:1a:
eb:88:ca:99:2b:d3:4d:a8:ca:c2:83:d0:dc:f8:04:
41:48:de:81:f3:11:49:60:05:ad:49:6c:b3:1f:98:
fc:7a:9b:dc:da:5a:f8:10:e1:79:c2:27:2b:33:3f:
8c:9c:53:6b:bf:50:de:e6:0c:59:db:92:8a:c3:63:
2c:a6:56:1e:d5:21:db:12:7a:5e:61:c7:d2:c1:93:
75:bf:69:92:c5:a7:ed:2f:85:c1:44:65:f4:d7:91:
5d:74:19:32:79:49:50:10:a8:25:e9:f1:77:36:b1:
33:96:ce:17:75:28:0b:97:02:77:87:7a:ff:3a:97:
6a:e5:40:33:12:14:66:53:7a:4c:49:22:32:e9:6c:
42:d3:41:50:4b:72:86:d5:ad:f8:03:5f:c2:72:92:
2f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:81:05:4D:A3:C6:B4:36:4F:6F:2A:AB:34:14:5B:59:6D:78:AB:11
X509v3 Authority Key Identifier:
keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b6:d0:7b:ba:75:53:34:54:15:b5:3e:8f:ec:41:6c:56:1c:
2b:f8:03:41:c1:27:39:cf:d2:c8:f9:65:d5:77:49:f3:fc:65:
cb:e3:c2:4e:93:a3:f9:55:a7:af:31:c9:71:a7:27:9c:5e:6e:
1a:25:2b:24:d1:ea:5f:8d:8c:dd:c4:08:6f:d4:3b:ea:00:8e:
b8:c2:7f:72:44:77:52:cb:4b:42:1e:b5:4b:11:e8:76:29:46:
ff:53:3e:08:a8:53:79:5c:f4:db:bb:be:32:7e:2f:6c:16:ac:
c6:91:df:0c:d6:89:4f:64:db:65:e7:47:08:66:26:61:c1:90:
89:b8:87:eb:c1:a8:cc:cd:57:7f:c3:91:46:3c:2a:d8:27:a9:
6a:3a:03:4d:0f:2b:9b:91:be:3a:0e:02:4b:80:67:de:66:c9:
14:28:10:c2:a1:2f:e6:d1:81:86:59:4a:ba:0e:70:90:9a:f5:
e9:3a:de:69:78:37:2b:8e:ed:1b:5f:75:42:f8:00:3f:25:ea:
54:34:07:f5:cb:40:21:35:05:7a:07:a2:8a:75:8f:d7:91:93:
f0:d0:1b:9b:86:14:db:7e:6a:f0:d0:eb:4d:8b:d8:94:b1:8a:
a1:0e:0c:8d:22:ff:e2:7e:ef:6f:10:7c:52:84:dc:af:88:4f:
a6:eb:0a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:49:16 2025 by rpki-client