Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json)
Hash identifier: T+4q61pdi1L5GGMlnQWpKhWg6cFYntNSf+MX3W//5VU=
Subject key identifier: EE:F3:02:0A:ED:B2:D8:5C:4D:B2:98:5A:08:65:04:FF:DB:0E:52:9A
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial: 01968210F78030C55104F40F56A7AD782C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
Manifest number: 0506
Signing time: Tue 29 Apr 2025 15:01:11 +0000
Manifest this update: Tue 29 Apr 2025 15:01:11 +0000
Manifest next update: Wed 30 Apr 2025 15:01:11 +0000
Files and hashes: 1: ElWcrbTwhZb7R0idVXjP0jp7adc.roa (hash: jXElL6yYNfab48AMv19NwH9bI4ZhaqIjJFV1RglaLYg=)
2: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: B0C5Z2qU8b6UpSO+bE76/rlwqmbGJYy7eTClKbmPz/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:f7:80:30:c5:51:04:f4:0f:56:a7:ad:78:2c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Validity
Not Before: Apr 29 15:01:11 2025 GMT
Not After : Apr 30 15:01:11 2025 GMT
Subject: CN=eef3020aedb2d85c4db2985a086504ffdb0e529a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b9:ee:db:77:82:42:0c:ca:35:82:6d:b3:50:
d9:90:0d:78:27:79:2b:c8:2b:df:24:a7:f8:01:92:
13:1b:18:85:18:78:28:e4:50:10:fb:ca:b2:84:ef:
04:4d:d0:ee:67:1d:53:74:52:cf:b9:c2:14:b9:0e:
82:8f:15:ba:be:1b:6f:7f:53:ba:9f:00:1a:4e:fc:
1d:92:2d:63:22:55:70:48:c7:25:d9:3a:0a:38:47:
40:22:d2:ca:8d:c7:fb:26:59:eb:0e:a6:cf:66:29:
97:52:98:41:67:13:5b:d3:ac:d4:dd:99:e5:a4:5a:
4d:42:b6:e0:2b:e3:c8:2e:6f:c9:e9:f2:f1:73:25:
46:77:48:7b:ab:09:ac:89:42:14:45:dd:78:71:5f:
67:f6:f6:66:f6:1b:cb:2e:86:fd:37:d9:84:b7:a6:
28:7b:9d:44:7e:29:d0:cb:2f:20:85:a9:dc:da:ce:
ff:33:fd:fb:5c:56:6e:30:b9:d5:a3:42:4f:de:f2:
f8:ff:99:9d:1c:4a:7b:96:05:ed:e7:28:4d:b7:e2:
7c:b3:ee:af:99:14:45:63:54:77:52:5d:c3:a8:bd:
38:44:93:cc:cf:16:43:95:54:10:d5:56:e8:66:45:
04:e0:09:2d:14:00:ca:40:7d:f0:d2:0b:95:9a:97:
fb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F3:02:0A:ED:B2:D8:5C:4D:B2:98:5A:08:65:04:FF:DB:0E:52:9A
X509v3 Authority Key Identifier:
keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:eb:c8:ae:5e:ed:ad:1a:02:ea:fb:fd:cc:ff:ac:ed:2f:68:
fb:43:9b:bb:c4:13:da:bf:89:db:24:38:76:d2:2f:bd:4f:12:
ed:68:85:71:9c:08:12:37:e4:15:27:e8:a3:e6:15:35:7b:74:
88:48:29:2b:cf:6b:47:ea:a0:92:40:90:6d:ec:79:cc:06:e3:
e9:89:ca:d4:e3:82:69:b9:bd:dc:5e:b4:d6:4e:bf:f8:69:b1:
e3:76:3c:d9:4b:d1:46:cb:38:21:c0:90:52:0d:26:c6:70:ed:
b8:5b:7a:7b:b1:58:47:77:d8:82:89:83:bd:d2:c9:eb:e8:2e:
f0:6c:47:ba:6e:d4:1b:2a:85:dd:98:5f:ee:8e:05:49:39:07:
b3:8a:a6:ab:e5:fa:92:1f:07:40:ae:08:2d:fe:f2:30:09:50:
cc:28:e4:9f:f4:d9:20:40:c2:df:c8:90:42:9b:ac:96:45:c1:
53:a2:8c:2a:50:a8:01:25:be:fe:0b:a3:38:95:00:30:04:1e:
a4:73:8e:9a:6c:c6:05:ec:dd:b2:b9:c8:f0:76:0b:14:42:90:
e6:0b:81:50:6f:55:24:27:2b:17:78:17:2d:82:6c:74:57:89:
1d:be:70:89:5e:fb:3d:ab:96:0b:4b:44:c7:6c:14:96:28:34:
f7:9c:bb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:28:06 2025 by rpki-client