Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
File: cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft (raw, json)
Hash identifier: fkdU5h6GPKICL5NAxTqmnvgV2FYKbk3bhuNGbjML3I0=
Subject key identifier: 3F:5C:7A:9E:0F:73:CF:DB:B1:37:F2:44:E8:DB:69:A6:82:0B:A0:3B
Authority key identifier: 71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61
Certificate issuer: /CN=711280b1338f12fc6f621c4c90560c7bc5908961
Certificate serial: 019653EEB128C04B95090FF2BFE2203363A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
Manifest number: 08CF
Signing time: Sun 20 Apr 2025 16:01:13 +0000
Manifest this update: Sun 20 Apr 2025 16:01:13 +0000
Manifest next update: Mon 21 Apr 2025 16:01:13 +0000
Files and hashes: 1: cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl (hash: tp+UFLJKGkfm4SRyU6h8MiTjqSEuGN6ZCuli/d8dOjY=)
2: myyHg-EZ7oPvLVMt0GMINU1S9Ss.roa (hash: uTCXVchkgOWKUqBTemAVamh0cjaPQ4ao1yqdp6r41LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:b1:28:c0:4b:95:09:0f:f2:bf:e2:20:33:63:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=711280b1338f12fc6f621c4c90560c7bc5908961
Validity
Not Before: Apr 20 16:01:13 2025 GMT
Not After : Apr 21 16:01:13 2025 GMT
Subject: CN=3f5c7a9e0f73cfdbb137f244e8db69a6820ba03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:2d:b9:9c:8f:ca:91:80:08:df:fb:c7:15:
20:dd:cd:b3:f1:38:6a:7a:99:e4:4c:cf:f2:4b:9a:
e2:09:ae:84:a9:7c:9f:a6:8e:85:54:ce:2f:d3:aa:
3f:fc:7c:d0:77:1f:12:60:aa:5c:73:8c:73:ae:9f:
bd:94:b1:26:c6:70:41:37:02:44:f0:e4:5f:cc:5a:
49:c1:dd:eb:18:d0:3c:a0:1f:20:32:46:66:dc:c2:
4d:f3:15:16:44:3f:17:99:7c:26:45:c2:05:52:d0:
9c:72:a5:4e:e3:75:e6:b6:e6:e4:49:e5:49:c9:1c:
45:02:06:e1:e4:f4:20:9c:a5:0f:ab:f2:ab:54:42:
e2:f0:54:bd:31:44:4b:74:29:da:6b:d7:d4:27:ce:
48:1e:5d:ed:b6:79:c7:39:6b:6c:94:3b:e2:29:4a:
20:7b:37:70:0a:e7:5c:a4:d6:98:0f:8e:c9:d4:78:
99:7c:35:34:e3:0d:cf:27:c1:07:f1:0f:d5:21:a7:
4f:06:99:d7:05:a2:62:04:2f:0c:a6:98:9b:1a:35:
7b:1b:95:6e:30:ee:5b:43:72:3c:e6:5f:43:a3:cb:
4f:05:94:53:ca:7e:5e:c4:1e:0e:83:7e:cc:d0:d0:
96:74:a2:a3:b3:38:4a:66:8c:e9:c7:11:b0:67:46:
00:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5C:7A:9E:0F:73:CF:DB:B1:37:F2:44:E8:DB:69:A6:82:0B:A0:3B
X509v3 Authority Key Identifier:
keyid:71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ba:ed:43:3b:dc:bb:0c:2e:70:f9:44:db:61:3f:23:48:64:
45:12:88:bd:2b:5e:41:61:65:cc:af:46:6c:2f:cd:86:96:72:
97:1a:be:0b:08:6b:2c:14:52:ce:0b:5d:bf:f6:30:b1:6f:ce:
83:f2:29:30:ce:4b:be:a8:9f:c3:e8:f4:8f:3c:f2:f6:c8:be:
2d:f2:46:06:b5:e7:63:da:8b:27:4d:ba:aa:5c:c0:24:b6:d7:
9c:41:a4:5f:37:4d:cd:a1:2d:f2:15:28:a9:fe:4c:95:f1:2f:
b8:08:0a:69:23:35:6d:48:fd:20:78:d0:07:89:f6:f4:00:b6:
16:f6:f5:84:44:ce:be:53:f5:ed:b1:31:fe:de:2b:67:4e:71:
e1:85:ad:62:76:9f:80:bc:32:89:be:56:06:ad:e6:64:72:f9:
25:58:7d:f3:9b:95:e6:64:cf:8b:99:4a:4d:6c:7d:56:69:c8:
d6:15:cd:96:cf:43:93:ff:97:c6:6f:2c:18:13:a5:74:69:1f:
79:b5:1e:40:3e:28:f3:9a:c7:70:bc:0c:dd:1e:b6:95:5a:19:
fb:c6:8c:72:c2:28:7e:90:60:a2:b5:54:dd:ae:6d:3c:05:51:
9b:a1:34:79:a9:e5:14:76:9c:00:c2:e3:93:fd:90:6b:81:b2:
cc:89:6a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:33:59 2025 by rpki-client