Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft (raw, json)
Hash identifier: ezQNOHIFrvKpXqe006rhFKDPPLHgsG9xgB7+Yg2d/3c=
Subject key identifier: EE:10:68:3E:B7:82:E9:E5:FB:2C:AA:8F:20:A8:4A:F4:98:90:9A:CD
Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Certificate serial: 019655379C151985D05F616D7257CAA59A07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
Manifest number: 04BE
Signing time: Sun 20 Apr 2025 22:00:29 +0000
Manifest this update: Sun 20 Apr 2025 22:00:29 +0000
Manifest next update: Mon 21 Apr 2025 22:00:29 +0000
Files and hashes: 1: 4vVSxg0KLKszb_U4S9rSdoaFOw8.roa (hash: RPAXRjtOt5jMNeEYJ4PrQAbbA73WZ8/bw4emEczQVts=)
2: Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl (hash: ks/C4u+KZYS+f8vVQ+o7qnsb3Vuv5YXiOn9e+12rBG8=)
3: t3uXJVNYIcETNH2wbIt0kGmTa3E.roa (hash: TpjYWQB/dEWPF8i95tLxQWL3noXfiwIkXuk9Gm2aR3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:9c:15:19:85:d0:5f:61:6d:72:57:ca:a5:9a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Validity
Not Before: Apr 20 22:00:29 2025 GMT
Not After : Apr 21 22:00:29 2025 GMT
Subject: CN=ee10683eb782e9e5fb2caa8f20a84af498909acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6d:e1:b7:9b:a1:ae:ab:0e:7a:61:52:41:81:
00:9b:98:6d:65:3a:d5:0b:4f:12:a4:bd:72:f3:05:
72:54:ff:cf:fc:ca:d9:93:28:7b:26:c7:6c:a0:69:
8e:55:11:50:32:e0:52:de:cf:a9:20:f9:fe:ca:59:
1f:f9:2e:4f:7c:3d:10:a7:a5:37:c7:5c:31:d0:7a:
af:c0:c9:2b:a9:03:fb:1f:a3:46:9e:e7:c5:bf:93:
ad:36:3a:e9:76:c1:0d:08:bd:77:2f:07:43:68:13:
c6:c4:7c:e4:25:57:68:08:33:c2:a4:6b:4f:b3:cf:
5a:9a:cd:c0:52:b3:68:25:73:7c:ca:63:39:e3:66:
4d:58:e3:67:95:0b:31:22:ef:42:11:e7:52:2f:72:
13:b5:03:e3:7d:6f:4a:31:76:09:49:e6:0c:5c:16:
53:5c:ee:40:cc:6c:d1:64:14:bc:5a:eb:1b:e0:e2:
99:20:af:65:be:7c:6c:d0:c1:2c:26:18:8c:a0:2d:
0d:a4:95:84:73:ca:32:31:aa:98:b3:85:8f:a5:e5:
39:f5:3a:04:e2:04:35:53:24:52:9c:c4:ae:36:de:
57:71:ec:0a:d6:7d:fd:03:f1:0d:98:a1:64:64:1c:
e7:46:a6:0f:f0:e3:f7:32:35:a3:52:0e:e3:1c:a7:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:10:68:3E:B7:82:E9:E5:FB:2C:AA:8F:20:A8:4A:F4:98:90:9A:CD
X509v3 Authority Key Identifier:
keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:83:da:06:c4:3d:2c:73:96:83:43:1e:0c:8f:06:9c:81:13:
55:60:df:64:61:2e:b9:cc:b5:e2:da:16:7a:6a:02:e3:16:d6:
6d:9c:22:1a:ca:04:ea:a7:ba:ba:a4:fd:e9:08:6d:84:c2:26:
44:c7:1b:13:ae:da:40:60:03:a5:76:b4:64:aa:df:60:37:c0:
31:fd:c3:9c:ad:7a:f5:94:29:80:c7:2b:f7:a4:50:92:07:0a:
0b:94:c7:7d:89:f7:1b:ef:97:dd:e5:98:34:2e:c8:79:10:fa:
de:64:dc:2f:99:16:a2:d9:68:0b:da:c2:20:81:75:c0:22:8c:
19:4b:32:73:8b:86:48:cc:ef:3e:e5:dc:9e:92:2b:39:26:20:
ab:8d:4f:4b:85:97:8c:6e:95:bf:50:31:54:8d:99:d2:47:89:
44:39:8b:a1:55:a9:49:17:b0:3e:eb:78:1e:e7:db:f3:68:4f:
e8:41:c9:05:1a:51:58:b7:b9:5d:7a:f1:4a:95:ea:e9:98:f7:
47:0a:df:03:e5:0b:ec:84:46:fd:a9:96:4b:f6:30:90:e8:33:
f8:31:63:0d:a1:7b:cf:28:ca:65:ae:7b:63:48:52:64:88:92:
a2:fa:82:6c:cb:b6:b0:10:eb:81:bd:17:08:33:52:78:05:8c:
80:bc:d9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:28:31 2025 by rpki-client