Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json)
Hash identifier: Vi5JJ2mIMcyeTtmjQnFv4MpGH9V5SV1QkDL5S7UiOzk=
Subject key identifier: 8D:B3:8C:27:CF:72:2D:CC:2D:D7:5B:2D:EF:51:5C:32:8E:CC:78:92
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial: 019674C2C1DB620EEF3094B5BCED5F8E9A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
Manifest number: 0ED1
Signing time: Sun 27 Apr 2025 01:00:42 +0000
Manifest this update: Sun 27 Apr 2025 01:00:42 +0000
Manifest next update: Mon 28 Apr 2025 01:00:42 +0000
Files and hashes: 1: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: oJzmks2XtCyGHoy1guSBEY9cBso2v+IpJ7ZHd6ENK94=)
2: JoXcYev6DySlst62DTDcDz1JN0Q.roa (hash: PRhyl4bdJivpbrgVw6w06UO6PZN+9+qwU0T6MPbrnFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:c1:db:62:0e:ef:30:94:b5:bc:ed:5f:8e:9a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Validity
Not Before: Apr 27 01:00:42 2025 GMT
Not After : Apr 28 01:00:42 2025 GMT
Subject: CN=8db38c27cf722dcc2dd75b2def515c328ecc7892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c9:97:d3:52:bb:e5:e1:c3:0d:07:23:ad:73:
7a:63:1e:36:e9:91:14:3b:01:36:7f:56:10:81:8d:
da:5c:0c:e4:69:2b:14:0e:a1:24:8d:2d:f4:8d:64:
38:eb:45:95:2b:fe:e4:c1:30:ef:6c:62:68:5f:85:
d2:25:18:8c:41:00:a6:32:a1:f7:c2:9f:54:b5:48:
e9:c0:9e:5d:4f:6d:6c:d2:8a:92:09:f4:07:85:22:
96:49:a6:3f:01:93:f5:25:aa:ff:23:4b:37:fb:ba:
4e:ca:90:0f:3e:ba:b1:cf:04:2f:71:f9:1b:ac:06:
27:8b:ae:99:b3:09:2d:ac:4a:74:69:19:26:2e:6c:
a4:ee:aa:46:1b:63:93:93:01:e5:59:a2:94:53:a3:
46:dd:b1:4a:64:69:c0:f7:8d:c9:c7:e9:43:8a:fa:
71:ad:3f:55:05:14:23:25:ba:4e:ae:9a:9f:2a:2c:
2a:74:5f:18:8d:7b:9b:b6:15:1c:81:d9:dd:8f:2a:
4b:cd:d0:a5:85:0e:f1:42:31:1c:53:6d:96:4f:0e:
81:54:e2:b5:65:88:7c:9c:48:22:75:8e:55:c0:c3:
59:c9:f8:61:b2:6e:62:e2:fb:3d:6f:82:da:e5:2a:
82:74:4b:f8:9d:a9:40:d5:03:de:f5:63:85:23:3c:
22:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B3:8C:27:CF:72:2D:CC:2D:D7:5B:2D:EF:51:5C:32:8E:CC:78:92
X509v3 Authority Key Identifier:
keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b2:30:26:b2:58:fa:c4:19:fa:85:7b:40:97:0f:96:1e:4b:
df:cf:af:11:f7:10:d4:30:c6:11:ef:34:5e:76:71:c0:2c:28:
e1:6e:4f:97:81:d7:35:df:be:13:f1:45:27:50:c3:a5:80:4c:
76:4e:34:57:46:8e:0f:b9:ce:53:4c:3e:b9:6f:de:a1:0b:2d:
71:48:b5:f9:92:0a:d9:5f:ef:df:ea:70:08:0b:af:38:8b:9e:
3c:96:1c:5e:d5:a5:8b:ab:12:38:9b:a8:dd:30:a6:54:18:7b:
fc:e0:00:ee:e0:13:42:01:02:87:18:88:f3:f4:ec:a8:fa:00:
ae:d8:e7:13:1d:e2:bd:11:46:ce:2e:7b:43:b5:ff:a6:bc:53:
04:b7:42:b0:a1:df:73:f5:9c:0f:7c:82:e9:42:f3:74:fb:71:
af:e1:c3:7c:2c:59:72:4a:1c:59:29:4c:25:21:ea:e2:af:e9:
d0:39:57:62:19:27:d9:c1:bb:3b:38:dd:da:c2:a6:a6:85:d9:
03:24:79:e6:8b:5b:1c:40:df:5e:13:8e:bb:36:12:b3:cf:a0:
23:3e:b7:e5:47:25:da:b2:db:f9:18:06:15:7b:5d:9e:84:58:
32:44:37:14:8a:83:f0:46:68:a7:a0:2d:25:d4:56:9e:fd:e5:
bb:bb:23:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:39:19 2025 by rpki-client