Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
File: CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json)
Hash identifier: JHNiIrHmmSNadCp0YU7e6guNao7PT5RyP8gikjNrEL8=
Subject key identifier: 39:75:B9:9B:4D:9E:50:9B:C5:47:EA:23:52:1A:7B:31:F6:F2:D4:5E
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial: 01965424F47AF5D390417B82F187B6FB3404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
Manifest number: 05F9
Signing time: Sun 20 Apr 2025 17:00:30 +0000
Manifest this update: Sun 20 Apr 2025 17:00:30 +0000
Manifest next update: Mon 21 Apr 2025 17:00:30 +0000
Files and hashes: 1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: LuQ50vBeTO8kWltkJNZf3X41XmC4vjL/A7OTG3RjHMs=)
2: CepTD_sRHzQKM1km_XqGFUiFw_A.roa (hash: 6VmSpRvYGLL0kNu4j1w0e4FEukjB/A4DJqf8FlG66dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:f4:7a:f5:d3:90:41:7b:82:f1:87:b6:fb:34:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Validity
Not Before: Apr 20 17:00:30 2025 GMT
Not After : Apr 21 17:00:30 2025 GMT
Subject: CN=3975b99b4d9e509bc547ea23521a7b31f6f2d45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:11:d7:b5:39:e0:d4:6a:ef:4e:0e:d6:6a:db:
89:5f:85:68:8d:81:2c:6c:b2:9a:17:77:41:7b:b7:
3a:d5:a0:2f:58:fd:17:3f:33:53:e8:47:da:79:1a:
6b:36:d9:35:f5:f0:5c:db:51:43:d6:46:ec:8e:2e:
d7:cb:54:ec:8b:98:af:3f:49:eb:3e:81:9e:7a:e6:
63:2b:56:9b:64:79:22:6e:44:1c:6a:4c:ec:ad:2d:
1b:d3:58:79:0b:f7:24:80:e2:8a:ec:9c:89:87:f8:
fc:8e:ad:ff:5d:6b:94:c5:f8:99:93:61:f7:c4:d2:
fc:d6:77:d6:63:f4:5b:96:2d:28:44:98:2e:2b:03:
91:e7:18:64:11:e9:25:70:81:06:e0:a0:89:a3:99:
21:86:43:84:04:fb:08:0e:17:aa:e8:3b:07:7e:de:
fd:c5:d6:cd:27:38:20:70:45:8c:8b:84:f0:c5:c5:
d3:1b:ff:f6:57:1c:34:1a:16:64:73:ad:ae:dc:ae:
98:32:80:a4:48:56:cc:08:05:c9:12:8d:47:54:66:
da:52:c8:9d:63:97:6d:03:34:67:16:f6:47:bd:02:
35:5c:39:0b:a6:0a:10:bb:5e:c1:86:e1:53:31:c8:
e9:f0:a1:eb:0e:cd:2c:74:df:71:f1:6c:89:3d:b4:
f3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:75:B9:9B:4D:9E:50:9B:C5:47:EA:23:52:1A:7B:31:F6:F2:D4:5E
X509v3 Authority Key Identifier:
keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e7:65:d4:94:3f:8e:a6:5c:32:18:db:2a:00:ed:d6:56:05:
5c:5d:47:9a:93:6d:b8:8e:a5:ae:bb:45:a6:42:1f:58:8a:44:
2b:0b:c1:b6:58:37:43:31:8a:cd:20:46:99:f9:ce:96:f3:5e:
11:0a:d5:c8:fd:ef:29:f4:57:09:bf:b2:83:99:e4:6f:d7:12:
d6:f9:73:a8:67:a9:c7:c6:ec:ac:3d:b3:d7:ac:73:50:3d:d4:
1a:bd:f3:81:f0:22:0b:fc:a0:12:3c:2c:e2:0d:fd:17:d0:f9:
c3:28:b0:4c:36:fb:58:fb:38:f0:02:54:ee:86:4a:2f:15:73:
94:c2:92:4d:c7:86:44:20:25:a9:aa:7f:8d:72:1d:15:a4:c4:
ff:0f:62:2d:aa:85:7c:38:45:89:d6:69:c7:64:b1:73:c1:90:
c5:53:0b:a3:9e:60:63:d7:13:92:c8:c0:e1:7c:00:1c:7c:b4:
bb:dc:25:63:e6:fe:0b:ac:0d:04:3e:4f:63:47:4d:26:28:f2:
5a:0e:6a:78:67:06:6f:d9:47:e1:48:8e:3b:5e:29:57:82:3d:
a6:26:8f:18:83:e3:f8:cf:21:fd:9c:9b:7f:3d:95:48:92:9a:
21:99:db:7f:75:d5:99:aa:bd:4b:a6:3d:b1:6a:62:89:99:7f:
c2:81:59:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:49 2025 by rpki-client