Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
File: Cs1OLATDntskKmcFG4tYEmNDbnk.mft (raw, json)
Hash identifier: r2jkYh3PMQTy3CJmsvDN7n+NzMLKKU0uKr5DtUMilTw=
Subject key identifier: 92:E2:40:EF:77:B8:73:D8:EA:DF:7E:03:91:A5:EB:86:00:49:2D:24
Authority key identifier: 0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
Certificate issuer: /CN=0acd4e2c04c39edb242a67051b8b581263436e79
Certificate serial: 019679B1D32A42E49A8AF98B2F556E430077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
Manifest number: 1095
Signing time: Mon 28 Apr 2025 00:00:19 +0000
Manifest this update: Mon 28 Apr 2025 00:00:19 +0000
Manifest next update: Tue 29 Apr 2025 00:00:19 +0000
Files and hashes: 1: Cs1OLATDntskKmcFG4tYEmNDbnk.crl (hash: knQZJ3bkG5+O2QUKlBT6p5M0KlOIy8X9ZLTjPTGOTGs=)
2: bbpg3V6ZZAXBeCd1yQ2Usxzc5uc.roa (hash: zEd/mqbUQwwKdBV4qgniA93ml7cpqC5pfS1X8ei6QF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b1:d3:2a:42:e4:9a:8a:f9:8b:2f:55:6e:43:00:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acd4e2c04c39edb242a67051b8b581263436e79
Validity
Not Before: Apr 28 00:00:19 2025 GMT
Not After : Apr 29 00:00:19 2025 GMT
Subject: CN=92e240ef77b873d8eadf7e0391a5eb8600492d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:27:e3:b0:9a:50:06:ed:1e:a0:3a:da:4d:
dc:65:7e:0c:3c:e8:73:d9:ea:63:32:9f:09:cd:f5:
58:db:21:a2:0e:ad:98:48:b2:e1:e6:d7:9b:03:75:
3a:ae:ae:d7:b3:8a:fa:ea:57:f4:e1:7c:61:2d:57:
de:b2:46:9c:00:ac:3f:a2:2b:f4:23:ce:cc:ca:f2:
0b:58:a2:0a:4e:cd:fd:59:39:7b:53:f1:10:09:3d:
1e:26:ee:a6:26:ee:bd:c8:43:59:be:0d:d6:16:ba:
42:81:6d:c3:7e:da:55:86:15:ba:0c:c6:21:ea:08:
df:09:6a:e4:dd:f0:15:b5:1e:8e:af:33:f6:a3:b8:
ff:5c:4f:33:e4:90:d1:13:9d:95:9b:62:14:0a:7b:
fb:0e:03:61:1f:10:6b:15:0f:f6:7a:b5:7a:b0:1e:
80:15:81:3f:f3:47:49:03:05:94:cf:33:5f:14:a0:
b8:4c:53:43:3b:dc:4c:68:9d:5e:73:ca:8e:6e:e2:
c6:f1:48:0b:e1:62:09:87:45:eb:fb:11:d3:41:89:
2f:45:66:f2:cc:6b:ee:db:d4:98:d4:77:1c:87:4a:
7a:16:b9:18:55:9d:f0:2c:a0:12:ba:91:4f:9e:6b:
23:33:a4:cc:c4:43:e1:ba:e0:f8:26:d5:04:55:58:
0e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E2:40:EF:77:B8:73:D8:EA:DF:7E:03:91:A5:EB:86:00:49:2D:24
X509v3 Authority Key Identifier:
keyid:0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:17:56:92:dc:2e:db:51:04:80:c8:f0:2e:55:9f:05:6d:b3:
84:b6:ae:eb:fc:ed:53:c7:1a:bd:36:e7:63:ef:ac:26:73:6f:
0e:9c:88:a9:d8:91:54:c4:7f:09:32:aa:5e:41:ec:7e:89:ec:
c7:c5:60:24:00:7b:a7:0b:c9:73:d7:6c:99:58:5e:ff:4b:c9:
ee:26:1b:94:ad:d2:28:c7:08:88:b7:37:3c:a1:98:8f:32:c5:
d5:83:24:80:7f:a7:d1:d2:12:ad:b0:4a:e1:5c:7e:e5:17:98:
53:78:cc:c3:d7:05:87:7e:53:5e:e2:f7:55:4d:ba:aa:bd:26:
d3:a8:64:da:79:31:15:02:59:a3:69:84:45:cd:9b:1a:92:a3:
b7:9e:89:4c:d5:be:ed:d6:8b:5c:6a:7b:94:36:14:06:e9:2c:
b4:e6:28:3a:0b:d5:d0:c7:f6:d2:44:02:99:22:d9:f4:73:24:
67:30:e5:2b:7c:4a:f2:d7:cb:99:66:e4:96:8b:0d:7f:9d:08:
2a:d7:87:c8:44:84:06:f3:a7:b5:6e:09:c1:92:2b:ed:39:33:
3c:b4:62:36:92:98:78:53:e5:4c:90:15:bb:dc:63:99:be:ee:
1c:dc:b6:f5:52:42:30:56:cd:d4:b0:64:85:2e:43:1c:91:0e:
c9:d6:26:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:42:34 2025 by rpki-client