Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
File: cJ626qpJ3WtIPgSxQ05NrHntnTE.mft (raw, json)
Hash identifier: uCRVLwpXLoeQHFcbLLRQqLNDGiTMjn6rrlS1PGZnzlE=
Subject key identifier: 5D:0D:FF:90:5C:FF:46:E2:C0:0C:ED:E2:A9:FB:56:46:4F:A7:EC:14
Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Certificate serial: 019650483EFC996964024534B8CCE781CFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
Manifest number: 1082
Signing time: Sat 19 Apr 2025 23:00:33 +0000
Manifest this update: Sat 19 Apr 2025 23:00:33 +0000
Manifest next update: Sun 20 Apr 2025 23:00:33 +0000
Files and hashes: 1: cJ626qpJ3WtIPgSxQ05NrHntnTE.crl (hash: jpiwNGGD/2oqbxISPqaw+aQnf6unoXtW343lYfasODY=)
2: pszj2ow_8e4yhWJ4p_2OlR6lAZA.roa (hash: Bkleu+zwlUm+Ij3pdF+L2pghaKZyEcPMCuJgamcNwU0=)
3: x05s8cxNFz3Ea01ENwVR0hPrDdY.roa (hash: 7Z21y2oOiXJmBN38XDJhWItGwbzVeLKb+Gde/eJFRgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:3e:fc:99:69:64:02:45:34:b8:cc:e7:81:cf:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Validity
Not Before: Apr 19 23:00:33 2025 GMT
Not After : Apr 20 23:00:33 2025 GMT
Subject: CN=5d0dff905cff46e2c00cede2a9fb56464fa7ec14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:c1:f8:ad:c5:98:b3:d0:8d:40:1a:a5:64:
60:61:7b:42:17:55:bb:c8:89:3a:3f:09:33:36:f1:
5a:7c:60:1e:fd:81:3e:ca:90:b3:aa:9f:8f:5a:55:
ec:bb:74:45:21:73:b3:b5:b7:55:e9:d6:f4:45:22:
69:c1:09:02:a5:c8:96:77:51:67:e4:d5:b6:87:d1:
5a:14:41:b4:a4:54:6f:fd:22:d7:8d:f4:10:da:a3:
41:b1:24:71:1c:0c:a0:f1:ca:28:2d:a7:9d:3c:ca:
67:ce:bd:9f:fa:a2:90:85:7c:27:6f:19:1f:3f:93:
9b:3c:b7:6a:e4:b1:8f:1d:12:86:24:2c:99:65:13:
0e:e8:28:83:50:e8:d7:cb:83:49:ab:57:0e:9f:f7:
b0:5f:61:45:2c:5c:de:57:4a:d4:aa:c4:b6:94:7c:
e4:76:88:c1:0d:e6:cd:b2:df:61:3f:04:1b:86:ed:
09:27:4e:2e:be:9a:8d:ba:d7:a0:e0:dd:65:b2:6e:
c1:f9:ea:20:aa:32:3d:a2:40:47:19:57:08:2b:7c:
d3:ba:1d:af:bf:77:72:1f:23:6f:5d:48:f8:d5:25:
53:56:66:85:99:60:64:7e:c8:ca:58:cc:cd:de:b3:
80:6c:ed:e6:71:66:93:aa:54:16:a1:03:b5:12:fb:
38:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0D:FF:90:5C:FF:46:E2:C0:0C:ED:E2:A9:FB:56:46:4F:A7:EC:14
X509v3 Authority Key Identifier:
keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ae:9c:13:21:c5:0f:60:24:2b:a2:94:3e:77:73:84:9e:48:
80:18:38:57:85:8c:1b:68:7b:db:5e:90:af:c1:7a:e9:b4:9f:
fe:30:c5:d5:8d:2d:f5:0d:35:2e:ad:61:f4:ec:84:d7:7c:83:
ec:74:a2:ef:dc:0d:26:ed:f1:1a:bc:5c:10:9b:cb:14:20:7c:
94:15:3b:68:64:52:1a:8c:97:3f:0c:ae:36:26:d4:b5:61:f5:
00:9f:64:5b:73:e3:e2:0e:af:66:aa:72:fc:f8:10:51:84:1e:
45:06:4f:94:94:c2:5d:a7:23:a8:0c:e8:17:82:de:81:38:0b:
7a:f5:db:e6:08:80:13:30:5a:04:c8:3a:34:f7:fb:30:cd:f9:
5d:4a:4e:f4:de:ac:01:11:e7:53:a5:cc:e2:ad:b8:e2:96:31:
63:30:f0:2b:0a:10:b0:df:90:ba:fa:6c:48:bf:5d:e4:de:4b:
32:e1:bb:8a:1f:60:5a:80:99:7a:2f:8c:a7:fa:53:2e:ac:18:
b7:39:b3:ab:ea:6e:c4:d4:0e:ea:17:e8:1d:e9:69:4d:19:5e:
58:39:24:4b:1c:77:a2:a5:f4:26:ac:15:2b:30:21:00:6b:27:
05:9c:d0:42:45:53:88:1c:4a:d6:8a:e1:5f:19:f1:98:17:8f:
9d:a4:08:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:12:15 2025 by rpki-client