Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json)
Hash identifier: XHSgTHSfJZ5Fep0+JKzYCPI16nAkzGEZ6Kb/zPfALew=
Subject key identifier: 02:56:60:A1:74:00:E4:37:A9:B2:C2:0D:5E:4F:83:49:47:F1:13:97
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 01965613858057B17C9C5D66B9155C70D9E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
Manifest number: 1198
Signing time: Mon 21 Apr 2025 02:00:42 +0000
Manifest this update: Mon 21 Apr 2025 02:00:42 +0000
Manifest next update: Tue 22 Apr 2025 02:00:42 +0000
Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: hOjGx1AVFFrenLMxWJFZ8bPr4CWL8Zh1s1Zm20J8l/U=)
2: tFsxYNJ-pvk9ebf-ewoCu0vCFeI.roa (hash: fEyaOVZRLIFifs+RWkNXOgYvzq9xsl1Jvqnurm5BNu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:85:80:57:b1:7c:9c:5d:66:b9:15:5c:70:d9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: Apr 21 02:00:42 2025 GMT
Not After : Apr 22 02:00:42 2025 GMT
Subject: CN=025660a17400e437a9b2c20d5e4f834947f11397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:78:43:36:d4:e1:4b:e7:cc:f5:92:89:15:
e7:11:15:5d:84:8c:fb:cf:c4:77:6f:e5:f5:8d:bc:
48:15:37:34:49:9b:a4:22:ef:45:c1:80:89:e6:97:
ed:1c:c9:ab:4f:c2:5f:f9:8d:b1:98:6c:46:eb:da:
2b:98:2f:44:d0:46:38:2c:e5:69:0d:b9:a7:3f:63:
f8:05:3b:ce:0d:2f:7a:f4:ea:7a:b5:5f:ad:34:c9:
46:92:c7:84:03:f4:4b:e3:1b:a6:f1:6a:49:e3:fc:
60:34:25:e0:53:6b:77:00:b1:55:52:65:39:31:c0:
d0:c7:61:15:59:93:48:f3:fd:a5:a5:98:6e:4c:38:
bc:66:2b:27:e9:b9:1e:33:88:de:ec:c0:92:f7:0a:
1e:e5:3a:fc:39:ad:85:3d:84:2e:b4:56:74:2b:52:
8b:5e:2c:07:f0:e0:e5:2d:2c:06:16:96:4f:9f:be:
fb:a4:ed:e3:0d:ce:42:d5:e2:a6:cb:d1:a0:42:42:
df:7b:fd:57:dc:da:35:64:9d:5a:dd:9b:ab:e3:a0:
14:3f:e5:29:6d:60:d9:1a:c8:b8:4b:28:df:c0:ad:
a0:24:13:b7:a6:34:37:00:42:61:ed:cc:88:2d:40:
73:17:ee:16:a7:ac:2e:df:90:9b:ca:84:5b:6b:64:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:56:60:A1:74:00:E4:37:A9:B2:C2:0D:5E:4F:83:49:47:F1:13:97
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:30:91:9c:be:ce:77:95:df:af:01:a1:c5:67:18:37:79:50:
33:55:b3:b6:3c:e0:c3:7f:b8:fd:e0:c0:7a:6e:ae:00:5c:c3:
ac:05:38:c2:d0:f5:14:53:78:04:25:34:fc:c6:b4:20:56:e0:
ff:ac:db:b8:3b:65:ef:47:6a:0d:ec:b6:cc:ec:c9:e1:4e:d3:
00:30:d1:31:2c:13:aa:97:f6:19:ae:79:06:c9:fc:d3:38:19:
c2:d5:73:26:f1:bc:ed:1b:0a:35:9a:00:f4:51:ac:51:6a:bc:
c5:bd:01:f2:75:77:76:ba:57:8a:8a:f3:73:8f:e3:4c:ec:18:
fd:f9:10:c6:43:9a:83:a1:3d:c1:a0:a6:0d:5b:86:35:eb:cf:
91:5c:8d:55:98:59:56:97:f7:67:96:17:51:cc:7c:80:20:2c:
db:e7:95:39:90:a0:9c:df:0a:84:43:9f:42:49:b5:ab:54:27:
94:54:0f:ca:1c:37:0e:70:72:85:dd:c5:be:9d:b8:e2:25:a2:
58:8c:cc:97:97:ef:9e:85:42:27:30:c7:d0:e1:32:8a:bd:d0:
ab:ff:c5:34:28:43:79:ff:72:f9:ae:87:ff:d9:7b:ec:69:d8:
6d:b4:42:9f:97:b9:2f:58:7f:1b:32:f2:77:94:43:65:13:b5:
e9:d0:9a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:19 2025 by rpki-client