Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
File: CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json)
Hash identifier: y15Lz7weub87CY7Pf2uW8c9VS2PrErww8EL77AA4HdU=
Subject key identifier: F6:26:FE:7E:45:6D:5F:56:77:74:7E:EA:42:90:61:5F:BB:21:AA:F4
Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Certificate serial: 01965424E6EE2D4BE2381A440FD23A77A891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
Manifest number: 013E
Signing time: Sun 20 Apr 2025 17:00:26 +0000
Manifest this update: Sun 20 Apr 2025 17:00:26 +0000
Manifest next update: Mon 21 Apr 2025 17:00:26 +0000
Files and hashes: 1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: NSbUTb+8U/lHfnkIrVByC/mzzZpuxiYx6woTyJm57JM=)
2: Dx843zJfB2RQ1tXw_6blL8VsbDw.roa (hash: Wk3Kg6R2i9DDoDfgR64ME8g+dDPZ0Euba0eJlCA1nOk=)
3: baeYMpQTf1prfSgvYpiSJyiA86o.roa (hash: K1aC88mjEbBLbQ7U4e/CSJaIjpQ51Z65KxdLka02ark=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:e6:ee:2d:4b:e2:38:1a:44:0f:d2:3a:77:a8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Validity
Not Before: Apr 20 17:00:26 2025 GMT
Not After : Apr 21 17:00:26 2025 GMT
Subject: CN=f626fe7e456d5f5677747eea4290615fbb21aaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:24:6a:48:65:f5:2e:15:0b:f1:e1:43:af:
b3:f7:a4:d7:45:02:62:cd:c0:bd:02:2a:db:22:8b:
a8:61:75:e0:66:ee:94:e3:19:ac:1b:3c:15:0b:ed:
1a:43:09:c6:4a:75:07:31:c9:85:88:4d:49:e3:31:
64:ae:d7:13:3e:88:e3:62:8e:02:d1:58:d7:ff:82:
f9:2c:98:33:7a:61:3d:a5:24:5a:93:92:fc:3f:27:
e4:a3:f4:b2:f8:17:0e:37:ea:4a:d7:0b:b3:48:4f:
c2:30:64:ba:f3:83:0d:93:33:4b:71:53:e4:f5:fd:
c1:58:4f:63:70:90:37:73:74:4a:72:85:7f:af:a2:
c0:ad:5d:13:7c:03:31:34:94:62:f7:b8:a0:be:f0:
34:87:3f:ac:e3:3f:64:10:65:10:de:ed:3f:ed:04:
09:52:6a:fc:0f:08:10:83:c6:39:f3:94:56:cc:30:
ad:d8:ff:47:ad:af:a7:83:f0:e7:db:f4:e8:03:8a:
7d:f6:43:b8:7a:22:bf:4d:f6:ab:d5:c9:9e:2a:8f:
95:99:b3:fd:47:fe:79:0e:10:b6:aa:50:1b:d2:2d:
a4:2f:35:5d:24:4f:1c:9d:2d:5d:fc:34:b7:91:73:
8b:79:46:ad:8e:ba:0b:d0:8f:10:dd:e8:86:2f:72:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:26:FE:7E:45:6D:5F:56:77:74:7E:EA:42:90:61:5F:BB:21:AA:F4
X509v3 Authority Key Identifier:
keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e7:bc:a7:09:54:4d:31:88:9d:c3:d3:10:38:6d:8a:e3:53:
af:ea:5e:b5:3e:a2:18:4f:28:c6:cc:8c:8d:6f:57:8a:8d:7a:
c6:7c:8d:e5:00:a7:ec:37:13:2e:6f:92:83:80:f3:2e:2a:79:
e3:ae:76:4d:bf:bf:86:4b:77:27:ca:c0:57:14:c4:3c:bb:df:
73:40:ce:67:ab:d4:ab:67:a7:5b:55:d2:ce:db:96:20:72:99:
45:04:5b:41:af:ee:89:71:53:b0:2a:d5:79:cd:91:7e:ea:9c:
a9:30:26:30:ac:b1:0d:cd:5f:1a:f0:42:e1:5a:47:a6:a4:a8:
18:7c:2b:b1:57:4e:b7:39:e2:45:51:94:b4:5c:0d:64:26:23:
e4:08:ec:53:4d:db:71:c6:b4:85:85:41:84:e3:45:25:78:3f:
80:e8:15:5c:06:bf:91:12:2b:84:8d:68:64:64:37:1f:83:9b:
1f:29:93:c5:12:b9:d6:79:e3:3d:f9:b3:a2:ee:04:5e:59:f9:
bc:88:cd:c2:7b:12:64:86:9c:79:8d:fd:df:6e:d4:be:34:03:
7a:2c:d7:4c:d9:27:8b:61:8a:57:af:a0:ed:46:cf:8c:09:ff:
8f:99:b2:a6:58:ee:7a:41:a6:af:b9:1c:42:57:d4:5c:b6:46:
16:b0:1f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:46:53 2025 by rpki-client