Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File: CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier: j77dl6I1ByFtX47A/AfATn3VhO0/d4e6adXPXoIvBg4=
Subject key identifier: DA:06:B9:34:6F:CC:46:DB:8D:6F:64:24:F1:49:B5:33:54:3B:2E:75
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer: /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial: 019674F9B16DE2876FB4F3D366B8379A7029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number: 143C
Signing time: Sun 27 Apr 2025 02:00:42 +0000
Manifest this update: Sun 27 Apr 2025 02:00:42 +0000
Manifest next update: Mon 28 Apr 2025 02:00:42 +0000
Files and hashes: 1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: QD3GQ91b6LlWhiIQW9apJjV8i5jmfiFFWUvyu3duT7E=)
2: rWZ0G5VOafQid-7UN-2veJfKGgo.roa (hash: DH2O3e2b1+vrztrC2zTAL363y7HUBnCFCMC6xfBGVbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:b1:6d:e2:87:6f:b4:f3:d3:66:b8:37:9a:70:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
Validity
Not Before: Apr 27 02:00:42 2025 GMT
Not After : Apr 28 02:00:42 2025 GMT
Subject: CN=da06b9346fcc46db8d6f6424f149b533543b2e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:f3:c1:9b:66:6d:03:41:40:9d:0a:47:86:
e0:1e:29:c9:e5:f9:37:12:5d:d9:08:82:6a:33:67:
4c:0f:b0:30:c0:41:46:b5:b5:66:2c:2e:00:5a:c0:
60:41:bf:7e:c4:7c:cd:79:8b:1d:ca:94:b3:75:62:
56:34:d6:ad:4a:06:a1:5f:50:2c:06:8b:0e:25:d2:
da:6d:61:ab:bb:d4:98:7f:2f:05:07:53:fd:35:0b:
ec:ef:bf:ac:86:11:8b:26:f2:26:f2:9f:34:3f:e2:
ca:cf:ba:4b:90:32:24:8b:8c:29:bd:58:b8:70:f4:
f4:df:b8:88:65:15:16:73:ce:60:f2:e9:e0:55:e1:
ec:fb:b0:4a:66:5a:25:24:4a:91:8e:40:3f:87:1a:
d8:63:86:59:bd:db:3c:99:48:36:78:13:b0:cc:c0:
fe:78:36:99:91:a9:a5:dd:79:85:6c:bf:db:16:cf:
77:b6:03:02:6c:18:81:05:da:f8:a1:91:8b:3b:f3:
97:e9:68:7d:78:54:e9:12:ad:04:15:05:4f:84:a5:
b0:b7:fe:37:cc:0e:d5:d7:7f:0b:25:ab:3d:f4:5f:
66:58:3a:52:ee:4e:4a:cb:df:a4:3e:64:f4:da:e4:
dd:e2:7e:02:ae:05:c7:73:f3:6d:fc:20:36:b9:c8:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:06:B9:34:6F:CC:46:DB:8D:6F:64:24:F1:49:B5:33:54:3B:2E:75
X509v3 Authority Key Identifier:
keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ed:46:e2:44:7e:fb:fc:74:0b:77:7f:8d:4d:44:91:01:80:
e6:c6:02:66:38:74:8d:95:40:35:fa:79:b1:8c:42:f6:6d:99:
da:04:4b:0e:c4:eb:24:a1:a8:3e:3b:5e:b3:c3:a0:ed:7b:18:
b5:1a:ee:e0:3d:3a:8f:4e:52:3d:9a:72:f9:93:02:0a:8f:be:
92:35:43:62:de:9b:35:27:67:19:1e:5b:6a:90:fd:f2:6a:8a:
68:7e:ec:52:e3:3c:07:23:f0:98:05:23:84:0c:3f:a2:b2:f9:
d2:ac:66:bd:16:c3:01:29:59:19:3a:8c:c0:85:98:44:55:f5:
cd:95:8a:fb:46:42:88:ee:3c:0b:2b:fd:78:8f:38:63:05:63:
77:9b:ce:3e:50:bc:f2:0d:4d:f8:fc:35:07:9f:0c:9e:7d:18:
7d:01:1f:b5:44:ec:74:a2:b1:92:52:d9:59:46:94:fe:a6:dd:
fc:d7:6f:ac:57:24:27:c7:00:95:f1:7a:47:bc:86:80:56:c2:
2b:63:e8:c9:ec:28:65:41:76:00:5e:0c:2e:b0:f4:26:d9:c3:
a1:87:76:1d:dc:78:7b:6b:70:a8:2a:74:0a:b4:0e:50:7c:e9:
6c:27:fe:4f:90:28:fc:f3:eb:dc:68:f5:0e:cc:03:c8:da:f7:
49:58:c9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:07:55 2025 by rpki-client