
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier: V7byxsuC0Yp6BrGWIXpJwKyXVOs3Pkp7E3YS/Xl9Ko4=
Subject key identifier: 15:29:2D:E4:05:39:63:C9:E1:FC:3A:5E:06:6A:D7:50:93:51:8E:BA
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial: 01968F28157CD2C62FB87913C08894071728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number: 01A2
Signing time: Fri 02 May 2025 04:01:30 +0000
Manifest this update: Fri 02 May 2025 04:01:30 +0000
Manifest next update: Sat 03 May 2025 04:01:30 +0000
Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: mzc4WiunLYRtju2q3Pt4085XdxLs3ic5HCoQoZYO3QE=)
2: GD1XX0gIhAQoOwhwNDnnnOJQSOc.roa (hash: Nxtxf8oqzQUGj2GQkzH5yxankBttLPUcZ16qJnjJRXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:28:15:7c:d2:c6:2f:b8:79:13:c0:88:94:07:17:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Validity
Not Before: May 2 04:01:30 2025 GMT
Not After : May 3 04:01:30 2025 GMT
Subject: CN=15292de4053963c9e1fc3a5e066ad75093518eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:57:89:2a:4e:2a:9b:d1:c0:b5:74:a8:58:75:
f9:c1:96:bd:4b:7b:fc:c8:7d:1b:46:d1:ac:fd:da:
9f:e4:18:f8:22:c7:7c:3f:be:e2:3b:4a:70:15:36:
bb:dc:a9:b2:49:df:9c:5e:91:b9:f3:ab:83:42:ef:
8d:de:8a:3d:49:ae:4d:d2:23:a5:93:e3:8e:90:3a:
aa:81:39:fd:a1:a2:01:fe:c1:a3:ef:f6:4d:64:9f:
4a:ce:e1:2a:9a:f0:eb:aa:3e:b0:8d:43:29:99:18:
15:de:fe:66:26:3d:26:52:b1:c1:ec:37:35:a6:ea:
42:eb:99:84:9a:4d:f8:52:3e:70:b5:72:14:e3:e4:
c5:db:01:99:0a:16:b3:f8:60:b0:3a:6c:d5:78:60:
1b:fd:fe:da:41:c7:e1:3e:ae:da:ab:24:38:fc:04:
2f:39:a4:93:7c:f0:fa:86:72:e6:ed:3e:ca:54:c4:
51:7a:b5:c9:8c:22:8b:9f:63:6b:04:d1:18:5e:9f:
7e:0c:df:37:ea:e3:95:37:c1:ac:92:78:63:3a:df:
d2:bc:a8:b6:7b:c1:05:2d:1b:74:fb:f9:2a:44:d3:
14:ce:7b:01:c4:6d:86:9d:e2:5c:85:f7:b0:79:d5:
1a:51:02:d8:06:e3:b2:a1:66:cb:a4:2b:79:fd:47:
e7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:29:2D:E4:05:39:63:C9:E1:FC:3A:5E:06:6A:D7:50:93:51:8E:BA
X509v3 Authority Key Identifier:
keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:18:f1:fb:2e:2a:82:ab:4d:89:4a:18:0d:56:6f:da:90:b2:
21:6c:9a:1f:ed:f7:c7:f7:dd:d5:05:8c:e3:d1:15:90:82:d3:
8d:27:ba:3b:64:eb:c2:ab:7b:a4:ab:34:5a:12:b8:f4:c7:2c:
e3:97:3c:a5:0b:75:a9:da:16:8a:59:1f:6d:c7:e0:36:83:01:
74:7a:57:b4:cf:c0:d2:7f:95:71:5f:84:2a:06:e7:64:87:50:
5b:85:8a:53:ca:50:4a:de:fa:f5:99:f7:ef:d2:f1:c0:b4:51:
28:83:98:82:7f:c7:28:39:70:e8:1d:39:f7:2f:b8:98:3f:3a:
f2:07:bc:5d:85:42:62:e8:f3:e8:8e:26:fa:ef:e7:27:80:2c:
70:f7:36:74:dd:4c:61:8d:27:bc:9a:0c:e0:f0:3d:14:5c:77:
fc:6b:09:2f:f4:6a:36:e5:60:27:32:04:c3:7e:38:aa:30:77:
58:dc:0b:75:1b:ee:89:85:6e:8b:7a:4f:27:8e:90:e6:88:a4:
0c:d4:31:71:79:58:af:47:8f:38:93:c5:54:41:00:ee:23:c0:
a2:fb:eb:65:46:56:e0:b7:1e:04:2c:59:cc:ef:10:e5:5c:20:
62:31:1c:c9:6c:45:20:d5:c4:0b:19:fa:2a:e4:dc:3a:2b:ae:
08:92:30:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:57:35 2025 by rpki-client