Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier: 7PXRYlYIWxBkxHejUkctNCXgFn+IlbA0R0WcjXbVV3M=
Subject key identifier: 6D:2F:EB:5C:32:80:DD:DC:E5:B5:FE:A9:64:4B:01:1C:1D:9E:1E:0E
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 0196760D3BBF0D72537714D6D608E1041CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 07:01:40 +0000
Manifest this update: Sun 27 Apr 2025 07:01:40 +0000
Manifest next update: Mon 28 Apr 2025 07:01:40 +0000
Files and hashes: 1: 1OOgCvrkMSPlJGXfwud-L77F8RQ.roa (hash: OfGMkg4R8dFeR/FCs55Nk0J17chraeTKhOgexIz+stY=)
2: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: PqI8C1hLo5OYUgiHIOsdYjz0FFNgZ3bNQeWn+6VPUWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:3b:bf:0d:72:53:77:14:d6:d6:08:e1:04:1c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Apr 27 07:01:40 2025 GMT
Not After : Apr 28 07:01:40 2025 GMT
Subject: CN=6d2feb5c3280dddce5b5fea9644b011c1d9e1e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:a8:2e:2f:a9:47:17:6f:8a:7a:b0:00:d3:
31:81:64:af:cf:0a:94:fd:f5:06:94:f7:85:2a:ab:
62:03:75:55:4d:a7:64:d3:01:f5:34:9e:b4:9b:49:
b6:a6:ea:d9:cc:ce:a7:7c:41:48:d7:af:a3:cc:2c:
aa:2c:28:68:62:c2:e4:3d:7b:a3:32:ca:c8:ef:0e:
40:36:d2:56:fc:a3:10:14:89:41:78:04:35:ce:75:
04:aa:e9:23:a7:99:49:50:19:e0:5c:e5:17:8f:49:
11:ca:32:76:d2:0d:1f:7c:ab:ba:6b:dd:ba:13:0f:
65:8b:23:b5:4f:9f:af:bc:70:15:52:4d:ce:be:31:
f4:06:50:81:51:19:c9:7e:8c:0d:df:21:16:08:57:
91:51:5e:59:37:1a:b3:2e:be:c6:86:07:18:5e:8c:
69:07:cb:18:df:52:7e:2d:75:36:91:70:21:0f:2e:
f7:5b:f6:fc:1f:4e:46:b4:7a:83:bd:1d:d4:4e:81:
f0:a1:1a:f2:8e:99:f8:00:b3:13:43:6e:4f:af:27:
05:2d:2b:5a:5f:57:87:27:71:28:e4:1b:96:1f:f4:
8d:7f:ce:74:b7:8e:7a:44:df:af:66:84:90:2e:fc:
a0:e1:f7:4f:f7:be:f2:1c:c6:d0:dc:ce:75:6d:fc:
f7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2F:EB:5C:32:80:DD:DC:E5:B5:FE:A9:64:4B:01:1C:1D:9E:1E:0E
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1e:b2:5e:68:a1:d7:ba:e0:5d:78:b3:5e:9d:e8:90:81:5b:
78:d4:9b:2d:15:52:b7:c1:ed:37:25:8f:8c:ca:ee:cd:1e:e0:
9f:3d:9b:a4:9d:cf:c7:51:96:da:90:44:dc:ab:13:b6:b5:48:
82:e2:c2:25:21:51:b4:22:b8:96:d7:1f:ea:ea:ff:cb:2b:5d:
23:5e:db:8e:f4:a4:d4:f3:32:4e:d4:28:06:6f:1a:4b:79:a9:
23:e8:8b:5b:8b:04:02:4c:1b:c6:ff:11:82:89:72:ef:d7:72:
ad:d2:22:78:1b:9a:d6:a0:f6:d5:36:4a:13:f1:54:f4:a1:20:
72:0c:1d:7c:8c:7a:55:a4:37:1b:6b:78:a1:bb:57:d5:8f:fd:
13:21:0e:53:e2:b3:01:e6:69:6b:ab:17:a7:60:8e:7c:99:5f:
1a:87:49:50:8e:bf:68:cb:a6:aa:74:be:c6:85:eb:c5:39:3b:
cb:4b:48:3b:78:6f:00:91:77:72:c9:2e:4b:13:3f:29:04:16:
c7:47:3f:6d:4d:22:16:f2:ea:bb:c7:2a:5b:83:a2:80:b4:7b:
1c:9c:84:3a:5d:6f:00:a5:e3:e8:30:ce:ab:c3:70:6c:db:2f:
e5:70:cf:00:ee:99:c9:4f:03:9a:86:b8:49:84:90:d4:54:e8:
64:0e:4e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:10:08 2025 by rpki-client