Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
File: cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft (raw, json)
Hash identifier: R/0hp9aGSsUUnCciXe48xl1cRb42BmT1nJSd9aUaCJI=
Subject key identifier: 4B:CE:E7:8D:22:A1:BC:E1:81:5D:AA:C2:63:D8:8B:1B:10:C4:84:C7
Authority key identifier: 70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
Certificate issuer: /CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Certificate serial: 01965914153EEF51E59FF0EDD500CCF034B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
Manifest number: 0942
Signing time: Mon 21 Apr 2025 16:00:10 +0000
Manifest this update: Mon 21 Apr 2025 16:00:10 +0000
Manifest next update: Tue 22 Apr 2025 16:00:10 +0000
Files and hashes: 1: cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl (hash: +/LsnTjkwdQnuk3OYWVHQo2ITB6i/QNL03S3stgPg+U=)
2: kJep7a3FRkNs3KQgMS6kDueqf3w.roa (hash: dBpCegRmmKMPJmbKSXlcIE1LjID2HAF4dE0zWcCDOWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:15:3e:ef:51:e5:9f:f0:ed:d5:00:cc:f0:34:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Validity
Not Before: Apr 21 16:00:10 2025 GMT
Not After : Apr 22 16:00:10 2025 GMT
Subject: CN=4bcee78d22a1bce1815daac263d88b1b10c484c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:93:33:df:85:97:32:8d:f5:55:74:39:c3:
f0:7a:cb:55:2a:02:29:3d:9a:f1:4c:35:bc:34:0d:
26:6b:4b:c2:05:2b:78:67:1e:8e:a6:49:b5:76:66:
7f:2c:b9:66:5a:fe:cc:eb:95:b0:71:07:49:9d:83:
eb:3a:71:5b:fd:0b:4f:8a:db:54:2b:61:a4:fe:92:
df:32:68:84:35:f1:c5:5a:b7:cd:45:5b:2a:ea:a9:
14:7d:8a:6a:41:d6:ca:7a:ae:b4:51:a4:85:0a:cf:
f6:64:45:8b:0f:6f:50:7b:db:ae:ff:4c:0d:ca:5b:
d3:47:c9:bd:5f:e6:80:c6:7c:4e:1b:c9:46:2d:e2:
e9:7b:53:9f:e9:bc:11:ae:b3:80:01:ad:3c:b2:1e:
5e:d8:e5:5b:51:87:7a:1d:19:18:39:09:fd:42:b0:
bd:9d:9c:d3:50:e6:53:52:58:4a:40:e6:92:8b:37:
81:7c:84:3b:93:9e:21:f1:bf:c4:3e:d6:cb:7b:e7:
90:8c:dd:62:31:77:10:10:d7:eb:67:fa:7f:eb:da:
b4:1b:90:36:b7:69:92:b5:4d:c5:1d:23:d1:ff:11:
05:3f:6d:ff:df:2d:55:5d:fd:ee:39:bb:c0:53:96:
f2:ee:31:80:35:9e:dd:43:17:f5:7f:1b:6f:66:94:
d9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CE:E7:8D:22:A1:BC:E1:81:5D:AA:C2:63:D8:8B:1B:10:C4:84:C7
X509v3 Authority Key Identifier:
keyid:70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9f:f8:4c:32:36:e2:08:6b:21:dd:b2:9c:d0:43:6c:3f:84:
d1:55:44:c2:d7:ca:67:d5:16:7d:52:c2:50:74:b0:2d:35:67:
72:8d:a4:a1:1e:5c:9b:81:89:22:6e:60:fd:1b:ea:8d:42:ba:
32:5d:50:c7:ef:7d:cb:0f:ff:84:59:ee:4a:c7:48:33:e1:0b:
f6:e4:11:ac:75:41:95:15:14:99:16:76:04:9d:00:71:40:10:
72:e4:20:f4:2a:72:2d:0f:5a:61:07:5b:02:fe:d3:9c:e2:79:
05:45:91:27:fc:c9:02:8f:b7:38:00:e4:61:8c:13:1f:08:d0:
d1:21:83:b6:ec:c0:2b:38:85:2d:3b:99:84:40:8d:45:b6:e5:
c0:ff:87:17:31:cd:a2:3a:40:e2:39:7f:8d:4b:07:35:22:8b:
ec:fe:91:1f:d5:86:10:bd:29:43:99:99:73:74:94:e4:d0:91:
8e:74:f7:fa:02:9c:9b:cb:c5:08:f9:df:97:1d:53:73:3a:f1:
d0:e0:c7:2f:1d:66:31:5b:45:9e:07:5d:07:7d:97:f9:4c:40:
8b:f3:cb:b3:6c:c9:e3:43:43:0e:15:e5:a8:60:34:9c:71:d2:
53:0e:98:77:af:87:f0:39:33:c5:9f:f4:47:ab:41:34:54:2c:
e6:8b:24:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:02 2025 by rpki-client