Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
File: CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json)
Hash identifier: 1ThVNW9vO7KIfpO6rOUfMTag2d9ZwBeXdrpK/HGtaMw=
Subject key identifier: 75:F4:0B:1D:C2:A5:A1:C0:F2:23:80:A0:DC:BE:E7:0E:72:2B:40:A1
Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
Certificate issuer: /CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Certificate serial: 0196553803A9ACE2466E1E6F491E52CEEB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
Manifest number: 07ED
Signing time: Sun 20 Apr 2025 22:00:56 +0000
Manifest this update: Sun 20 Apr 2025 22:00:56 +0000
Manifest next update: Mon 21 Apr 2025 22:00:56 +0000
Files and hashes: 1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: pdQFt/85+qPZ6V57z3AAiIpb1hGEVE3f/QTrdEg85J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:03:a9:ac:e2:46:6e:1e:6f:49:1e:52:ce:eb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Validity
Not Before: Apr 20 22:00:56 2025 GMT
Not After : Apr 21 22:00:56 2025 GMT
Subject: CN=75f40b1dc2a5a1c0f22380a0dcbee70e722b40a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:c9:11:f5:1b:be:8f:ec:8b:dc:41:7f:14:
a0:50:d6:25:4b:2d:3a:7d:c1:98:59:21:94:ae:c7:
7d:30:89:a3:6c:e3:07:38:bc:7a:a0:a2:d4:4d:24:
3d:00:62:f5:96:bf:06:10:7b:46:54:5c:6b:56:42:
85:42:b4:ee:15:7d:08:a4:b2:a7:e5:7a:f7:ab:09:
ac:38:e4:59:c9:b5:57:c9:ac:71:7c:8a:8e:d4:bb:
51:11:e8:74:25:ab:5d:3f:41:69:20:6b:9f:e5:30:
be:98:35:bb:94:37:4b:73:c3:29:db:c5:ef:c7:b5:
a5:b5:e9:01:18:28:eb:2b:e6:18:72:d4:03:0b:d4:
9c:fa:4e:42:c0:b3:62:e2:aa:6d:92:96:4d:19:07:
c1:f5:de:39:54:5a:10:fd:bb:2c:1c:2b:cd:c7:2f:
05:50:20:38:2d:f0:13:df:d7:49:77:ca:57:ee:3f:
ea:f1:02:cf:e5:65:0b:fd:a7:ae:37:35:df:50:f9:
88:65:59:a6:d2:b7:59:ed:82:1c:3f:58:0d:b5:1a:
6f:49:2c:db:a7:b6:a3:7a:39:fd:2f:84:09:c9:dd:
b2:6e:7f:0e:52:f6:a0:30:2d:50:e4:11:b3:01:1f:
05:fb:a9:87:94:ca:76:db:11:b1:67:e7:da:2e:eb:
05:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F4:0B:1D:C2:A5:A1:C0:F2:23:80:A0:DC:BE:E7:0E:72:2B:40:A1
X509v3 Authority Key Identifier:
keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b5:5b:21:5e:ce:91:c3:5f:b4:2c:b6:b0:e9:a0:18:a6:a4:
8f:3c:b7:83:43:1e:9f:0b:aa:cd:b5:57:f9:10:ef:d1:db:28:
6a:71:64:7f:ea:e6:cc:01:db:92:fa:19:79:e0:67:9c:70:eb:
5f:64:8b:33:96:29:df:2a:6b:3b:1b:d7:53:ae:04:68:1b:7f:
8f:10:fb:a9:0c:0f:db:4f:3e:e0:a2:00:ea:aa:78:3d:fd:39:
31:2f:5d:85:67:94:0d:2b:76:24:8a:0a:21:02:6a:9d:51:c7:
74:8a:f8:3e:00:4f:47:02:1b:06:0b:0c:85:2d:5b:22:ff:5c:
67:3b:2e:7f:ab:41:03:2c:3c:cd:13:8e:42:f1:90:4b:7b:82:
84:a6:b2:68:81:7a:27:37:c2:91:04:bd:68:0c:37:ff:85:24:
ea:88:86:95:e5:67:44:4a:3c:66:69:fa:e9:30:b9:9f:7f:6d:
0e:41:c0:2d:c0:4c:8a:6a:c4:d1:64:ee:e2:c9:e5:e6:68:82:
b6:a0:bf:7f:a5:56:85:88:48:79:8c:65:43:6c:15:58:16:d9:
c0:ae:e0:53:02:6c:90:20:aa:19:33:fc:09:92:d2:c7:72:9e:
3a:70:70:ff:bd:29:c4:96:9a:9c:f4:e1:7d:6d:3a:f3:6e:f8:
1f:d7:f2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:28:25 2025 by rpki-client