Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File: C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier: 2iw96/Qyv2fQQ2zZnYIQuVF2JFmqFi+V4c6+OkU3mkQ=
Subject key identifier: 54:C8:D8:9D:7E:A4:34:97:24:DF:4E:AA:80:2A:26:3E:69:71:AF:A9
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer: /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial: 019656EF3A3D8517EC3D1E182F99F8712A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number: 0EAE
Signing time: Mon 21 Apr 2025 06:00:40 +0000
Manifest this update: Mon 21 Apr 2025 06:00:40 +0000
Manifest next update: Tue 22 Apr 2025 06:00:40 +0000
Files and hashes: 1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: PR11PhGnNW4y5gsFZ8T5JRaIG3XJK6i1FOZCWwYP4eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:3a:3d:85:17:ec:3d:1e:18:2f:99:f8:71:2a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
Validity
Not Before: Apr 21 06:00:40 2025 GMT
Not After : Apr 22 06:00:40 2025 GMT
Subject: CN=54c8d89d7ea4349724df4eaa802a263e6971afa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:65:c0:0b:4c:0c:4e:8d:05:70:c3:16:8a:
ad:b4:eb:60:4a:39:cd:19:7b:57:2e:76:14:a5:4c:
f2:74:4c:cc:24:ad:cf:f7:91:21:ae:88:af:2e:f1:
12:d5:04:33:4d:31:cc:3d:87:2d:14:8f:57:ed:9b:
3b:f7:30:ea:b7:43:52:6a:60:f2:c2:31:b9:2f:51:
e6:16:30:29:f9:f0:6f:00:6b:ea:c4:71:9d:81:0e:
48:5a:8f:fd:94:10:52:b5:f9:50:72:f8:3c:59:78:
63:ca:88:28:ba:fc:55:5d:d4:84:c4:be:6e:e3:28:
e4:b5:f5:85:2f:b8:e9:b7:98:7e:dc:29:e6:23:59:
92:99:38:7d:84:c2:7f:2f:50:65:a6:07:d3:3b:01:
cd:29:06:bd:81:7c:6f:01:b9:ce:12:e5:11:17:fb:
f6:60:3b:db:28:52:70:1d:b2:ab:76:2b:09:ca:58:
02:80:16:da:11:c3:2d:14:78:d8:2b:43:02:b3:d0:
b6:22:8a:b2:e6:f3:11:e3:e4:ae:e7:2f:b3:2e:e3:
2d:09:5e:c9:89:77:72:4f:82:71:2c:57:07:48:7d:
f1:32:b7:20:f4:a6:ca:b5:80:9c:59:55:2f:a8:70:
d4:21:1f:d6:d0:a9:d6:25:72:34:a8:10:85:6c:63:
00:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C8:D8:9D:7E:A4:34:97:24:DF:4E:AA:80:2A:26:3E:69:71:AF:A9
X509v3 Authority Key Identifier:
keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b9:56:fc:c4:cd:dd:ef:85:df:3f:49:da:3a:05:66:9a:21:
0d:57:4a:6b:03:91:7c:15:ea:74:aa:f1:e6:73:ff:17:3c:d7:
fb:cc:4b:d4:70:72:2b:d5:30:b9:00:42:24:7d:e1:92:de:57:
25:13:75:75:ed:74:12:ad:06:c7:82:70:c3:4e:16:b9:da:dc:
24:5d:55:5f:e0:7c:c2:e2:b0:ba:9d:5b:9f:0d:62:e1:f9:e5:
5c:a9:77:ee:39:b3:34:aa:61:52:54:ed:96:6c:7c:7e:78:23:
ac:69:bf:e8:c8:26:cb:f2:47:99:41:86:e6:ae:36:5e:fb:53:
63:c6:49:3c:82:7d:a4:fd:e5:1c:e5:92:62:74:ee:28:e5:ab:
9b:df:28:14:6b:7e:ab:50:bf:77:df:b8:7d:ae:6f:ba:2a:79:
0c:a4:c6:af:3b:4d:0c:e9:09:25:2a:89:e3:1c:fe:fb:be:bf:
a1:76:de:ab:91:82:d9:96:f3:14:8a:7a:dc:31:25:8f:a4:e6:
89:56:ac:86:c1:df:46:d3:c4:d7:16:50:86:1b:c8:e5:6a:d6:
a8:3b:0c:96:e5:dc:7f:1a:4d:9a:7a:dc:4d:47:ca:88:21:30:
cb:ab:57:65:95:57:dc:12:91:69:c8:d5:d0:14:05:21:9c:e9:
d1:3c:7b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:39:42 2025 by rpki-client