Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
File: Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json)
Hash identifier: AzYGxGa24Xr321w5aA8+fOW3GaeQG64U45kg32IhbLw=
Subject key identifier: 1D:C7:BC:2A:EF:24:DC:65:1B:77:4B:F1:0F:55:EB:56:12:D8:73:6B
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial: 0196550066B26C66AA2394ED1CDC9EB66D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 21:00:11 +0000
Manifest this update: Sun 20 Apr 2025 21:00:11 +0000
Manifest next update: Mon 21 Apr 2025 21:00:11 +0000
Files and hashes: 1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: figdLJEzhIDi5YnFjjcBhXcWQIZFJeWZ8wJzEpMVZ6o=)
2: CuosGZsAQa_atOUfAfS4SUVwI3o.roa (hash: Ah8ug2ZnqIvKy7wR+jjWOatqPL6Ooi9wmYyJPajHlvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:66:b2:6c:66:aa:23:94:ed:1c:dc:9e:b6:6d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Validity
Not Before: Apr 20 21:00:11 2025 GMT
Not After : Apr 21 21:00:11 2025 GMT
Subject: CN=1dc7bc2aef24dc651b774bf10f55eb5612d8736b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:2c:05:fa:a0:5a:d2:66:73:cb:b7:3d:02:
a3:9c:21:9a:59:78:f1:4b:a4:50:8f:f5:e6:83:12:
74:69:66:56:b3:aa:5b:60:61:81:18:6b:ef:88:73:
4b:d2:83:4e:24:a0:b4:6e:98:a5:3d:5a:47:39:1d:
81:22:24:27:5e:26:96:dc:71:b8:83:0e:0d:9e:7a:
6f:a6:03:cd:b9:a9:bd:65:e9:ac:bb:3c:4a:fd:ae:
1e:f3:37:43:15:73:b7:9b:3a:8c:77:93:d4:0c:9f:
ed:1c:05:0c:bd:80:8f:fb:2f:9d:ae:68:6b:3d:1f:
fd:01:cc:c2:1a:c1:7e:3f:99:58:3d:bd:c4:b7:46:
37:af:40:10:f4:cb:f6:17:34:5d:e2:ad:2a:1f:a6:
2a:6a:69:5a:8d:76:26:51:ee:82:ad:17:7f:49:db:
b3:32:0a:6c:e6:2d:53:5d:b9:77:b3:74:10:4c:fb:
50:9c:ed:2e:44:77:05:5a:5c:00:9c:19:c4:13:68:
aa:70:37:99:13:3c:7d:8a:81:cb:84:60:1f:69:6e:
8f:c4:ff:52:ac:42:72:93:c6:a5:e6:89:ae:0e:2b:
59:c7:b5:de:3d:08:c7:6e:9b:b5:91:b8:1e:ba:b1:
2f:70:0a:15:93:fc:52:cd:0e:6e:54:dd:0d:83:3e:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C7:BC:2A:EF:24:DC:65:1B:77:4B:F1:0F:55:EB:56:12:D8:73:6B
X509v3 Authority Key Identifier:
keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f5:79:e1:e1:7f:05:bd:5e:20:e9:bc:32:1c:e4:43:22:8c:
e7:83:27:f1:5d:85:83:44:c5:7a:8f:b1:81:0a:7e:24:e4:6d:
bf:bb:18:9f:57:17:80:80:92:c3:58:d5:16:67:c5:fb:84:0b:
98:01:2a:85:41:be:e2:1b:02:9c:df:0e:f9:6f:a6:a0:9b:97:
94:27:fe:f6:3e:48:a2:b4:91:dd:8e:99:75:84:0a:81:b1:d1:
e4:8e:77:bb:58:72:5b:01:01:71:10:c8:99:c7:30:f9:68:07:
e6:fa:12:86:18:65:9e:03:a9:29:cb:a5:76:c0:f0:b2:09:b4:
08:ca:25:39:33:6b:bf:8e:a6:a4:57:cb:a4:c4:3a:cf:61:1d:
0f:e0:d3:49:f4:76:d4:be:26:f8:39:81:b6:25:f3:a1:f9:e1:
1d:7e:65:43:8b:29:32:9f:30:19:fa:7a:ac:42:66:14:4e:ab:
f7:02:1c:ea:4a:dc:38:61:3c:7d:ec:8d:ce:61:79:b8:c1:56:
ac:d8:5f:bd:e8:7f:2d:59:6f:d8:d6:bf:53:2f:0b:87:2b:3c:
7a:36:f2:e0:d6:d6:3c:9a:b2:61:82:3c:82:8f:f9:d9:e1:7a:
06:14:d2:d7:9f:3d:01:b1:a0:0e:ae:aa:e3:f6:2f:b5:68:b6:
4f:4e:e3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:37:53 2025 by rpki-client