Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File: C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier: LO4Xl1wlWUVHwz4OGlTkbxpOf+Lu7FW+cTW3QBpzDUM=
Subject key identifier: 5F:2B:DB:64:22:23:DF:8B:8D:38:B2:AB:AC:18:C7:C3:05:11:E8:4E
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer: /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial: 0196564A45BE358CEBF926EC05164E11F833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number: 0C94
Signing time: Mon 21 Apr 2025 03:00:30 +0000
Manifest this update: Mon 21 Apr 2025 03:00:30 +0000
Manifest next update: Tue 22 Apr 2025 03:00:30 +0000
Files and hashes: 1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: A8Zw7vIgkA+UShZbaLZPhYuwFUfiffV2sRwhpAay094=)
2: c5yD0OO2hJCHbzdGNR8uwMLkI7Q.roa (hash: 6J584Pfcm2xEEOIgm8HDbt6jhB1m8yFiIXBl5VE/wrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:45:be:35:8c:eb:f9:26:ec:05:16:4e:11:f8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Validity
Not Before: Apr 21 03:00:30 2025 GMT
Not After : Apr 22 03:00:30 2025 GMT
Subject: CN=5f2bdb642223df8b8d38b2abac18c7c30511e84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:2f:4f:f2:62:5d:e9:79:a9:5e:37:c1:73:
58:d5:07:71:eb:87:3c:ed:6c:fc:c2:69:72:bc:cd:
21:99:15:39:ac:72:ff:3c:c1:a0:2e:62:af:fa:30:
45:a3:1b:b8:12:37:be:d4:19:25:8f:22:d7:5e:81:
fd:e6:4c:98:fc:12:85:a5:e4:15:8a:ed:b1:d9:30:
4c:4f:cb:22:dd:9c:20:e3:80:9f:55:cd:05:69:77:
2b:c8:ae:79:92:5a:b5:7a:40:b4:a9:9d:c4:9c:91:
d1:33:9d:d2:4d:fa:6c:c3:86:af:f0:38:2d:bb:d0:
f7:e0:4f:75:15:be:99:fb:8e:05:ec:fc:97:4c:03:
1d:9c:2d:5d:cb:68:64:f5:3c:72:9d:2a:ed:8a:54:
1e:21:a8:76:b0:4f:45:d0:f7:bf:c5:6a:d5:ff:e3:
cb:a1:44:9d:4a:e4:7e:f6:dd:da:2f:1f:c2:3c:2e:
b2:47:74:5c:62:d8:6f:5e:82:12:32:1c:56:5c:9f:
c9:eb:20:ce:ce:a7:07:58:35:d7:ab:1e:7d:c6:94:
98:d2:3e:22:76:38:da:c9:61:bd:93:9f:c0:1c:4d:
c4:34:8b:8a:68:2f:00:22:a3:f4:17:52:5d:99:be:
1c:1f:49:3f:bc:e1:c2:d4:2e:78:86:12:4b:0f:c6:
bd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2B:DB:64:22:23:DF:8B:8D:38:B2:AB:AC:18:C7:C3:05:11:E8:4E
X509v3 Authority Key Identifier:
keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ce:1a:14:4b:89:43:d4:0c:64:92:67:a2:dc:b4:b8:7d:9d:
aa:87:4f:1e:5a:cc:84:5f:2e:59:09:3e:02:d9:e1:58:f6:bf:
cf:78:4e:52:bc:ca:5f:97:32:ed:c8:23:44:c1:b4:ea:a7:22:
c9:3c:39:e1:4b:d0:92:9e:54:43:01:8a:9f:e6:bf:e0:cb:57:
af:48:60:ed:8a:67:09:11:e6:23:1e:3d:35:f8:a5:ea:f8:84:
5f:2a:d3:c3:52:a9:fc:42:61:4f:09:59:c6:f4:ab:d2:52:5b:
ea:de:0e:54:d4:1a:fa:eb:4b:f1:8c:47:fd:52:cb:8c:d3:93:
b9:eb:ad:de:db:79:df:0a:90:1c:d9:f2:ca:e4:bd:dc:c0:ed:
40:f3:47:b7:d3:03:2f:8f:8c:ff:7b:a4:c5:e6:6c:81:3e:2e:
2c:3a:51:af:be:e3:2d:fc:b2:49:fb:98:c0:c3:c6:cb:ff:ed:
fe:bb:50:82:4a:79:f7:84:21:5d:57:b1:f2:5c:e1:4a:f9:3d:
5f:1b:bd:c4:3b:b7:10:02:aa:49:d1:e2:ec:de:ae:72:b0:b5:
26:4a:5d:29:a0:a0:89:1f:1a:88:63:a7:77:b4:ab:ab:55:2d:
83:59:95:d8:c1:fc:d1:97:8e:e5:e3:c9:95:72:7f:53:e4:86:
78:98:9d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:19 2025 by rpki-client