Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier: Q/o3NUyOXxOnj1nb28wK0Z8+yuHJLlI7bk74a9iGuWw=
Subject key identifier: AA:56:BA:09:89:AD:01:54:5B:B0:65:3C:48:D5:04:2A:98:D8:77:46
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial: 0196857FCA3ABD0F70F2290A296B869D7F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number: 151B
Signing time: Wed 30 Apr 2025 07:01:06 +0000
Manifest this update: Wed 30 Apr 2025 07:01:06 +0000
Manifest next update: Thu 01 May 2025 07:01:06 +0000
Files and hashes: 1: 0xDZgWnts24csgnMxUD8LWhBHU4.roa (hash: Y8cjviLWLv7KyuSufCFJinPdimRipqIY80BDPZZpv3c=)
2: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: uY3I7iDiEO1/N1qcz0WHYsCvAe1k/NsfeTNDPjEw0OQ=)
3: U_CJPYiKsC4pTY0SsfSjtBrH8dE.roa (hash: AQXnBaIOWVXqlXh1gif0C/a7bntYjy34IbEEU6kS/30=)
4: a7j4aToRp-Rf0IqyeByNF9Ocsfw.roa (hash: 9QeK1R+lwAXK6vSpE67n1ijYEIdp5QQxcwabJABYuQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:ca:3a:bd:0f:70:f2:29:0a:29:6b:86:9d:7f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Validity
Not Before: Apr 30 07:01:06 2025 GMT
Not After : May 1 07:01:06 2025 GMT
Subject: CN=aa56ba0989ad01545bb0653c48d5042a98d87746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:41:ba:40:df:60:66:ff:1e:a7:4f:8c:9c:
6f:fe:fc:d7:13:df:14:37:73:19:95:50:cf:c0:5a:
e8:5b:b4:ec:8e:13:09:21:c8:ba:c5:d2:89:9b:fa:
ca:5e:88:49:2f:cd:32:ec:df:a5:f2:63:67:70:74:
15:fa:23:3b:9c:a7:56:e1:80:a0:c7:1d:49:9d:ed:
86:43:53:20:7b:76:7e:18:b7:a1:49:68:fe:6f:db:
4d:55:e5:8a:39:c0:7f:c1:58:5b:a6:5e:33:eb:54:
86:52:fe:82:2f:d6:d6:f3:f1:cb:2f:a7:18:8a:47:
a5:48:c0:e5:35:c8:8e:ac:d0:d4:f8:56:a5:86:65:
9b:3a:ba:49:3a:74:a6:55:60:27:ba:b9:fd:10:d1:
02:65:a0:0c:fc:55:ff:c0:55:a9:2b:a5:14:d0:1b:
c0:d6:f0:a2:e1:43:d0:ea:04:26:59:3b:09:45:10:
d5:ab:b7:be:31:5d:ed:59:6b:d5:d8:f9:4f:f4:2c:
b9:e5:73:c9:ea:8e:24:e8:c5:76:8d:a4:cf:bc:16:
3f:e0:f3:61:9f:b6:98:3f:89:51:2e:47:56:78:7c:
90:f9:f0:7f:f2:4b:19:4b:0c:99:8b:90:04:d7:e6:
f5:78:6d:79:d6:8b:dc:15:52:38:47:c3:fa:6f:84:
9b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:56:BA:09:89:AD:01:54:5B:B0:65:3C:48:D5:04:2A:98:D8:77:46
X509v3 Authority Key Identifier:
keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:2b:cf:87:59:bd:08:52:d8:fd:29:52:6c:d6:35:09:56:ff:
e7:0f:7f:e0:d7:1e:9d:91:87:d6:34:d3:f3:59:cf:34:f3:a1:
a9:31:6a:73:f0:65:a9:4a:40:c0:ba:d6:7b:d3:c5:1e:63:7b:
5a:3f:71:76:50:e5:d9:02:4e:0d:78:39:3c:93:69:03:a1:28:
97:3a:01:8e:97:27:92:7d:46:ab:08:76:90:6a:6c:0c:24:08:
d0:06:1a:47:66:40:77:c7:3a:a5:17:6b:74:61:20:ad:75:94:
60:2e:d5:cb:5a:4d:7f:5b:2d:29:92:dc:0b:f3:0f:58:04:88:
f5:e5:5a:6a:40:89:3b:39:51:b1:1d:a4:ce:59:39:8d:a1:70:
3b:71:70:88:57:8a:52:9d:03:02:73:80:21:02:e0:8f:d1:29:
dc:3b:1d:00:db:45:27:ff:fa:82:c2:bb:01:b5:03:26:59:16:
c5:2e:c1:92:7d:ef:aa:17:88:34:7b:54:5a:a9:2d:a2:cd:25:
d6:6e:d2:71:aa:dc:65:ce:e8:fc:6f:b0:49:8b:78:21:f1:44:
e2:f0:f6:7a:cd:e7:41:e8:d5:70:09:9e:1a:ca:b5:9e:9e:a9:
d8:0f:5e:aa:cd:9c:a3:c5:63:65:a3:60:f8:a3:4a:4c:97:3d:
f2:c2:5e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:17:15 2025 by rpki-client