Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
File: cX9V88YAexy91-ggiQVpAGdXs2Y.mft (raw, json)
Hash identifier: tgQ3hsEph0fdNe9ylRMcZ8C8zr6AxEUaJNda18XrsyY=
Subject key identifier: 10:F6:CD:37:38:C3:EF:83:5E:96:2E:6A:67:40:AD:A8:15:E7:AB:A0
Authority key identifier: 71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
Certificate issuer: /CN=717f55f3c6007b1cbdd7e820890569006757b366
Certificate serial: 019659155C2D86B548EA4A9DDFFBC9ED3198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
Manifest number: 0C8F
Signing time: Mon 21 Apr 2025 16:01:34 +0000
Manifest this update: Mon 21 Apr 2025 16:01:34 +0000
Manifest next update: Tue 22 Apr 2025 16:01:34 +0000
Files and hashes: 1: BNamB5vKS8VYoQEENNZLcbAD0yY.roa (hash: AZc2M6A0pF1sMbjRSCCXbLIDgidX2dUycGenbS2p6qA=)
2: cX9V88YAexy91-ggiQVpAGdXs2Y.crl (hash: immCTMCE2mpEz3XxfjFoR8Pgkt3n+Ic88JFl8v64xpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:5c:2d:86:b5:48:ea:4a:9d:df:fb:c9:ed:31:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=717f55f3c6007b1cbdd7e820890569006757b366
Validity
Not Before: Apr 21 16:01:34 2025 GMT
Not After : Apr 22 16:01:34 2025 GMT
Subject: CN=10f6cd3738c3ef835e962e6a6740ada815e7aba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:91:db:73:8c:cc:1f:08:07:8f:4c:d3:3b:
07:5b:64:9f:1e:b7:f9:46:0f:00:c6:d2:c9:0d:f4:
81:b6:d6:dc:15:64:f7:c4:1f:99:6b:4f:6b:6c:bb:
44:94:4a:fa:8b:ce:06:00:7a:26:f6:bd:73:a5:34:
52:3c:f5:4e:5f:33:61:b7:a1:76:ec:93:01:12:2d:
4d:fe:0d:09:da:88:b7:31:a2:21:58:d0:4c:13:5c:
f0:c6:a3:ee:fa:06:b1:83:b0:e3:24:3f:f3:e4:de:
e7:ab:01:e4:85:b8:c0:66:3b:e1:98:ef:c7:74:6a:
a9:3d:a5:c7:75:e5:ec:46:9e:c3:6b:a5:88:6b:b7:
32:5d:ca:a1:5a:3e:2a:29:c1:49:2e:cc:d9:c7:2e:
f9:09:c2:8e:97:bf:29:f4:42:3f:d4:6b:29:0b:e7:
03:dc:ce:78:64:6c:58:c5:31:d1:04:d3:93:93:7a:
18:66:4f:8e:f6:27:0d:97:ec:21:db:cc:cd:94:fc:
eb:ca:6c:5e:4e:ac:1e:21:0d:a6:ed:9b:61:4a:58:
fc:98:46:41:d0:8e:21:74:04:e3:f9:77:40:7a:d2:
b5:09:76:c7:8b:48:6d:78:05:53:4e:f0:14:a1:f0:
36:b4:22:ca:85:e6:93:8b:af:0d:55:f8:41:51:3e:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F6:CD:37:38:C3:EF:83:5E:96:2E:6A:67:40:AD:A8:15:E7:AB:A0
X509v3 Authority Key Identifier:
keyid:71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d7:c0:5f:3e:67:dd:f7:22:07:83:7f:f6:78:30:a6:b5:f0:
41:bd:f6:5b:28:04:e5:af:3b:88:ba:30:2c:1c:a8:40:46:ce:
56:96:b8:7c:d2:f2:0c:f0:5c:ff:16:e5:dc:be:9f:49:c4:bf:
6a:de:00:86:9f:d1:a7:da:ae:e6:91:e1:8a:bc:67:db:18:d9:
2d:a9:1b:f1:59:cb:ae:c3:8e:a7:5f:84:6c:a7:b0:06:93:a2:
bc:39:fc:e1:6e:dc:7f:4b:2c:03:f2:5c:f9:40:c0:c9:bb:ca:
6d:00:53:ee:ee:8d:9b:47:74:9b:4a:4e:c3:d3:a5:97:71:d9:
96:c0:6c:cd:38:a9:9f:84:41:ef:4b:ce:dd:c8:11:78:cf:ae:
84:f6:b9:a3:1d:f2:78:a8:bf:5c:b4:9d:a8:a7:c0:1a:6c:55:
4d:5b:9c:0f:69:16:bc:73:26:90:6f:f5:b0:22:ed:19:c7:ba:
ff:1f:76:06:a2:77:4c:2d:99:dd:e1:59:2b:7d:e4:f5:5e:49:
e6:79:46:70:9e:39:70:f1:db:90:5b:25:63:ad:5b:97:d7:4f:
0d:2f:73:69:32:f6:e8:20:61:1f:01:55:fd:b1:5b:21:39:6c:
02:57:9e:68:68:fb:f2:1d:e1:96:cc:8f:8e:82:19:64:ec:0e:
76:f1:a6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:09:33 2025 by rpki-client