Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
File: cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft (raw, json)
Hash identifier: 0DPOJNf7dYkVg+xa8sqTG3avNzYGLuGFZIAB9791xZ0=
Subject key identifier: 26:6B:7B:2B:7E:F4:59:AC:5F:8E:3E:5F:F2:39:B4:E5:C2:39:CB:70
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial: 0196579479EA99D73FD743B954BEAADC347B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
Manifest number: 1504
Signing time: Mon 21 Apr 2025 09:01:10 +0000
Manifest this update: Mon 21 Apr 2025 09:01:10 +0000
Manifest next update: Tue 22 Apr 2025 09:01:10 +0000
Files and hashes: 1: cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl (hash: McgUVsaB6zp2w/aG/Q8gfaygQLe7VtlEKhAKdRrxT7s=)
2: fs0ZmJI91FgrAyS_qaO4SZnCnx4.roa (hash: ycybeagUIzrtezPLqz+FSenm/c5GMC1YyzGUnHiNwd0=)
3: jswQ5MS9x68GoZ0Y-qDOtNDQJpI.roa (hash: RvRrftZ+/LxLaZ6N2kHwAtDW2/FTXY0AOnQQBNDsQnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:79:ea:99:d7:3f:d7:43:b9:54:be:aa:dc:34:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Validity
Not Before: Apr 21 09:01:10 2025 GMT
Not After : Apr 22 09:01:10 2025 GMT
Subject: CN=266b7b2b7ef459ac5f8e3e5ff239b4e5c239cb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:2a:c5:a4:db:5f:cd:b2:b9:a5:30:cd:aa:
2c:65:74:e2:ad:e8:ba:80:17:56:48:3f:aa:d5:3c:
8c:2c:7c:63:33:5f:38:8b:ff:eb:e3:50:2f:24:3f:
00:7a:03:31:00:37:bf:91:c2:2c:b5:6a:bf:94:0a:
3b:ae:81:f2:ac:cc:5c:44:75:db:f8:96:ec:75:1b:
62:5d:fb:83:53:45:d7:ad:06:f4:6b:b7:ea:49:7b:
c8:de:39:67:b5:9d:91:7a:ed:e2:e1:ed:3d:e5:d3:
ec:20:ec:4d:60:89:a2:48:94:b5:7f:65:7c:da:10:
95:cd:28:8e:5a:ba:4c:5f:21:4a:fc:dd:bc:d2:ae:
2f:1e:1c:73:d3:ca:82:d3:0f:c4:64:52:c4:41:48:
3a:9c:11:c6:6d:dc:db:9f:d1:fe:c4:1e:a9:17:d8:
5e:92:d4:f1:bc:84:3e:23:00:16:db:96:a9:8e:b4:
e3:d5:34:9e:18:ba:d7:25:c8:de:98:6d:b2:e2:d6:
7d:d4:e9:59:aa:b4:a5:0f:86:5e:35:32:e8:da:83:
dd:71:1a:52:b4:8c:b5:1a:e0:d0:5a:57:2a:f3:57:
50:f0:be:73:19:c6:8a:1a:b1:a6:9f:c5:27:db:15:
c2:0a:dc:16:b2:b0:46:a1:7b:c0:2d:5a:a3:cf:2c:
bd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6B:7B:2B:7E:F4:59:AC:5F:8E:3E:5F:F2:39:B4:E5:C2:39:CB:70
X509v3 Authority Key Identifier:
keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7b:d3:52:c4:88:78:cf:e5:22:cf:c8:d8:5a:87:4b:12:b8:
47:35:d9:4a:09:f8:56:ad:34:8c:e9:2f:48:84:4c:3a:07:26:
61:13:4c:ee:1b:74:11:01:bb:cf:5f:b5:47:b0:8b:eb:ff:86:
fb:70:91:db:65:d8:0c:c5:53:4a:26:83:e8:c4:3b:5b:67:1b:
f8:71:11:4d:17:e4:fa:2d:79:c5:b0:02:26:6c:c0:5a:8e:02:
54:6b:ab:03:2e:c0:ea:e2:07:3e:e6:a5:60:29:5b:a7:11:5e:
09:d0:f8:cf:5f:d9:d5:d1:7a:41:fb:84:10:5c:de:c3:05:6a:
74:dc:de:f6:31:f8:ff:75:df:71:a3:2d:a3:d1:ff:23:64:7a:
55:18:cf:2d:e4:d2:f2:40:48:8d:e7:aa:0d:6b:bb:9f:d0:6a:
31:dc:4c:30:b9:f8:c1:64:91:62:bf:92:c4:67:79:77:4c:de:
39:12:56:dc:41:c8:10:75:52:a6:65:d5:19:48:15:8a:9b:ac:
61:b1:06:2d:f7:cd:95:5f:10:e2:66:b9:0d:16:c8:83:0e:5c:
4d:24:e9:3a:24:e5:66:e1:30:74:a1:27:83:90:4c:06:69:64:
98:67:11:cf:2a:4e:f8:49:c4:a9:fd:cf:b2:51:0e:76:ff:ca:
d3:b8:a1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:05:19 2025 by rpki-client