Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
File: v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft (raw, json)
Hash identifier: juYRrxNcI/ef5YNKm2nW3AVKCBw3UIWQQs6atMGE5kU=
Subject key identifier: CB:4D:5B:44:BF:DB:60:65:89:A1:71:DE:C9:FA:CF:08:98:A4:A7:B4
Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
Certificate issuer: /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Certificate serial: 0196760C59F786B8C9E0D401154E932AE53B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
Manifest number: 11A2
Signing time: Sun 27 Apr 2025 07:00:42 +0000
Manifest this update: Sun 27 Apr 2025 07:00:42 +0000
Manifest next update: Mon 28 Apr 2025 07:00:42 +0000
Files and hashes: 1: CwTJXDuwwtXY5lds5AcNMw4m4MM.roa (hash: pkjwfyNy3tBr0gdIHHue6NuT85XueEkqyX3eSoK30mk=)
2: v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl (hash: HcrewskXYKzrApuziROTnC0LfuFWCl17hmS8PloJ9Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:59:f7:86:b8:c9:e0:d4:01:15:4e:93:2a:e5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Validity
Not Before: Apr 27 07:00:42 2025 GMT
Not After : Apr 28 07:00:42 2025 GMT
Subject: CN=cb4d5b44bfdb606589a171dec9facf0898a4a7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a1:93:4d:72:8b:5f:fb:b6:26:c7:15:59:2f:
7e:e6:6e:08:ca:74:a2:fc:03:fd:75:b3:8b:81:76:
b6:b9:e7:cd:d9:fb:91:90:d2:1c:db:49:0d:39:eb:
6e:32:cd:99:cb:7d:84:3f:0f:b3:a2:2d:72:3f:48:
60:bd:ab:b0:9f:56:24:bc:ef:d2:fa:cc:b8:dd:93:
6d:7b:65:d8:83:47:69:ad:42:ed:ca:05:6e:8e:fd:
2f:fa:8a:b8:9c:24:d9:30:f7:b0:f6:b5:54:7a:a8:
3f:55:b4:52:b7:1a:af:76:59:4a:b4:38:98:47:e9:
86:db:e7:6d:a2:09:7b:95:c7:0f:21:39:8d:37:d4:
8d:8d:89:f2:10:3f:fc:52:02:4b:01:f4:75:1d:54:
5f:66:6a:c7:82:55:2a:02:4b:94:4f:4b:21:37:82:
bd:bb:72:d1:da:10:1a:95:be:1c:3d:10:e4:95:0f:
c1:9a:17:c0:52:e4:0d:12:95:28:ef:6d:a3:61:54:
5a:c0:b2:3e:b0:03:b5:24:51:8c:71:16:22:8b:1f:
3b:c3:cc:33:cc:8a:dd:b3:28:fa:e7:92:44:8e:42:
3e:76:65:aa:b9:db:2e:2a:f4:f9:d9:e1:f7:ec:b5:
a0:7e:cc:cb:05:a1:6a:61:1a:1c:61:a5:98:b9:80:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4D:5B:44:BF:DB:60:65:89:A1:71:DE:C9:FA:CF:08:98:A4:A7:B4
X509v3 Authority Key Identifier:
keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:66:17:fb:81:63:7a:2e:fa:66:a3:6e:f1:fe:cc:e0:28:d8:
cc:3a:73:5a:d5:e3:3b:c4:f1:50:2c:c8:11:0c:7b:10:63:4c:
34:bc:f0:46:29:3f:a0:54:9d:fe:17:cb:ec:0b:1d:bf:1e:b1:
82:33:09:94:92:a8:fa:b4:13:c6:37:e4:65:6e:de:d5:7d:af:
76:05:65:03:71:3d:56:dc:c1:ef:d5:b5:96:7f:62:3e:15:8a:
7c:ff:06:dc:26:7c:25:cb:54:a9:e0:16:79:d7:98:8a:75:2a:
2c:4a:40:b8:57:c1:32:2c:40:8c:1c:ca:8c:98:c1:82:f3:58:
c9:2e:db:e2:98:7e:23:11:8b:04:67:5d:fc:ce:a0:2d:08:b5:
81:a5:e7:3e:05:27:bc:f9:ef:67:5d:87:d5:e0:e6:16:2e:a6:
63:41:3d:3f:9b:60:fc:ee:5e:8d:db:8a:b8:83:28:f0:ae:ae:
ac:db:a6:73:c1:e3:8e:c9:ff:98:5e:19:1a:9d:41:9e:2e:ee:
d4:5a:e8:ca:ff:8a:1c:17:2c:81:26:87:3b:c0:8b:9e:99:e8:
4a:b1:bd:8f:38:c5:16:1a:94:0c:43:80:41:51:5e:ad:8a:24:
97:02:ef:86:72:bd:4a:f0:5b:ce:40:87:8d:9f:9a:5f:66:58:
2a:18:d6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:18:38 2025 by rpki-client