Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
File: cSsCxFx16_ctVtM8KAKXwq6H6y0.mft (raw, json)
Hash identifier: 4Fj+YlNVhYV/nBIg5vGE4gpGijhLPKvR2bSGlPYLNx4=
Subject key identifier: BF:38:0A:50:B2:92:2E:E3:C8:CE:B0:8D:C7:0B:13:17:13:B4:49:76
Authority key identifier: 71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
Certificate issuer: /CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Certificate serial: 019695CDBCC71B7C5A023163E5162E9B7EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
Manifest number: 016E
Signing time: Sat 03 May 2025 11:00:10 +0000
Manifest this update: Sat 03 May 2025 11:00:10 +0000
Manifest next update: Sun 04 May 2025 11:00:10 +0000
Files and hashes: 1: cSsCxFx16_ctVtM8KAKXwq6H6y0.crl (hash: pukZL/6Wf/LNZxOduaompcmisgwcr9ALVuIa1U+sqaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 10:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:cd:bc:c7:1b:7c:5a:02:31:63:e5:16:2e:9b:7e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Validity
Not Before: May 3 11:00:10 2025 GMT
Not After : May 4 11:00:10 2025 GMT
Subject: CN=bf380a50b2922ee3c8ceb08dc70b131713b44976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:48:f8:30:17:c8:92:e8:bd:e1:11:26:22:90:
4d:1e:90:fe:af:49:68:df:d2:db:30:91:ff:69:ea:
7a:c5:af:a9:38:25:0f:f6:35:b0:bd:4f:31:6a:9e:
85:12:4a:8a:b9:c7:70:41:e6:73:0f:9f:57:1f:92:
f6:97:3c:d3:66:ad:88:ed:e9:0b:c2:06:1a:a9:df:
fc:09:6a:c8:ec:2b:dc:8f:ba:bd:0a:39:43:c9:83:
9a:ae:b5:31:ca:47:4c:16:aa:e3:7f:67:62:17:8e:
49:04:4e:00:ee:8e:33:81:4a:35:fc:92:1a:c5:91:
b7:d7:67:91:d2:23:99:26:75:3b:54:14:02:3e:1c:
f7:6a:b6:02:37:73:8f:3e:63:9d:65:dd:c9:c8:07:
ad:bd:f0:18:02:6e:88:f6:ac:12:d4:c3:54:9a:3e:
82:4e:e9:40:09:52:43:84:ee:d7:97:d3:79:bd:da:
2a:94:b9:91:c4:d2:6d:3e:c3:f8:81:3b:e8:2c:cb:
6e:45:33:b8:63:74:5b:eb:42:44:44:b0:be:67:b9:
46:d4:ea:84:d6:00:b7:98:4c:1f:0a:fb:b3:0b:39:
20:71:12:f4:31:a7:3c:38:b6:5b:7e:21:27:bf:02:
44:00:7f:50:69:2c:6c:01:9b:36:00:17:89:67:d0:
09:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:38:0A:50:B2:92:2E:E3:C8:CE:B0:8D:C7:0B:13:17:13:B4:49:76
X509v3 Authority Key Identifier:
keyid:71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:34:4a:02:71:e6:bc:60:b2:37:f5:3f:5d:00:eb:12:98:c7:
c2:24:6d:2a:c3:cc:9e:d0:e4:a3:0e:da:d0:1d:60:a7:05:6b:
3f:e4:c0:f4:7b:3e:4e:42:c7:6f:e7:02:11:de:e8:cd:9b:36:
bb:72:17:2b:39:b5:65:57:86:fa:b0:ea:1b:03:e5:53:6d:76:
34:14:ab:f4:f2:8e:9b:b2:19:25:3c:d1:58:a5:d0:6a:d0:a9:
5d:cf:8e:2f:1a:18:f2:fd:d7:28:ac:be:c7:31:70:cb:a6:46:
df:7e:90:67:f6:cf:e3:1a:1c:e3:a3:08:c7:85:8b:53:c9:45:
71:83:45:52:ca:71:01:d7:a6:40:23:e9:29:f6:66:68:35:80:
53:a3:86:82:54:a3:33:f1:5d:d4:40:2e:ab:be:6a:0c:c0:4a:
4f:21:87:04:7e:55:e9:6f:f1:b9:ab:70:d6:d3:c6:bc:2d:d2:
e0:65:41:ad:a6:b2:56:fe:b9:04:3c:86:b3:54:26:9e:9d:64:
42:d1:a5:23:61:91:99:82:fe:d0:2e:e9:51:ce:17:3f:5c:90:
91:4d:69:88:cb:a7:b6:ea:28:19:b9:a8:59:08:b5:3c:91:7a:
f9:e1:08:08:5a:fc:29:45:f4:8a:f4:86:5d:98:64:92:bb:b7:
82:0a:fb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 19:46:39 2025 by rpki-client