Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
File: CEoFdH74ii68ny-u9iAZ3IfRolM.mft (raw, json)
Hash identifier: SwY/BzFiDgY4XvCujv1xGLrLeSkeLRUL67u+jkXZISY=
Subject key identifier: D9:45:3A:32:08:01:2D:53:9A:2C:5F:0A:3E:CB:46:A0:B4:F5:97:8C
Authority key identifier: 08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
Certificate issuer: /CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Certificate serial: 019650487C088055195FDE30D9EF42617005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
Manifest number: 11D7
Signing time: Sat 19 Apr 2025 23:00:49 +0000
Manifest this update: Sat 19 Apr 2025 23:00:49 +0000
Manifest next update: Sun 20 Apr 2025 23:00:49 +0000
Files and hashes: 1: CEoFdH74ii68ny-u9iAZ3IfRolM.crl (hash: IM4PmYiT2vl/ABpL+vizn+Y7B92q1NBXFyfGhq4vaj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:7c:08:80:55:19:5f:de:30:d9:ef:42:61:70:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Validity
Not Before: Apr 19 23:00:49 2025 GMT
Not After : Apr 20 23:00:49 2025 GMT
Subject: CN=d9453a3208012d539a2c5f0a3ecb46a0b4f5978c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:a0:f6:22:fb:18:cf:f0:13:5b:a9:b1:e1:
3d:64:78:0b:99:df:a0:bc:12:14:26:91:e5:4f:e0:
c3:ba:b9:f3:f9:45:7d:13:e6:9d:a7:ee:88:c0:5f:
49:32:5f:e9:08:80:6b:1f:47:7d:0c:f6:25:bb:4e:
cf:0d:55:17:d7:1b:51:af:4a:a3:44:68:c5:1b:95:
4d:a9:07:e2:69:a8:09:64:c5:45:d6:12:43:bc:3f:
97:0f:d7:31:b9:0d:e1:cf:d3:db:1a:63:60:6e:fb:
ed:35:ee:49:32:b5:44:45:fc:45:ff:e3:6b:3e:8d:
02:73:48:af:20:b6:91:d5:81:45:ad:eb:4f:69:56:
c1:5c:d9:8e:71:cc:b4:c7:14:95:e6:e5:bc:7f:ea:
c4:61:ab:43:76:9b:c3:eb:87:61:1c:90:f1:68:08:
3c:37:ed:74:26:4b:f5:4f:59:dd:4e:cc:ca:9c:eb:
fb:4b:d6:92:c6:7c:ea:e7:0b:45:50:90:14:62:21:
de:6c:72:19:01:ef:43:65:fa:8b:48:99:0c:16:22:
d8:7e:74:62:a0:fd:8f:85:e1:a3:d5:c9:6d:93:76:
33:2b:b7:d4:79:10:10:14:67:cf:be:03:07:13:ba:
d1:f7:5d:20:af:6b:89:3e:93:cf:13:d9:1b:a4:30:
7f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:45:3A:32:08:01:2D:53:9A:2C:5F:0A:3E:CB:46:A0:B4:F5:97:8C
X509v3 Authority Key Identifier:
keyid:08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ff:bc:a2:ca:8d:29:11:86:a2:0e:ca:27:55:b1:05:25:56:
69:73:7b:67:26:d8:9e:5b:ee:94:e7:af:e8:6d:b6:83:03:58:
c2:8a:d3:14:d1:e3:57:e5:d3:c0:a0:0e:cd:a4:4d:e0:b7:77:
c5:31:8c:46:df:6e:6a:2b:30:bb:34:a3:dc:fb:e0:1b:a9:00:
82:94:b0:34:3f:32:f1:08:c5:3b:11:67:52:21:48:b3:a9:81:
e3:7c:06:8d:d3:06:75:92:bc:a9:17:64:d3:b7:91:3f:ff:fb:
2d:e8:3b:9c:4a:75:ad:d5:c7:8e:7b:c6:a1:49:a1:29:2d:74:
54:0b:3c:04:ec:e7:e1:eb:79:93:bd:79:b2:b4:98:14:08:9b:
db:dd:7f:0c:50:e7:ef:e3:c2:7e:db:60:7b:03:ef:59:7a:27:
33:9d:c2:11:5f:75:86:0a:fa:b7:58:f2:94:29:28:6f:cd:6f:
3c:b2:22:98:3b:97:d0:67:9a:bd:ae:4b:78:80:27:81:75:17:
3b:7d:8b:a1:dd:6d:29:6d:31:af:58:7c:76:06:28:f7:85:96:
f9:7f:74:fe:f7:8b:d9:71:5a:bd:d5:07:b6:66:88:c7:e0:2d:
a9:44:fc:a5:f4:53:ba:6f:72:34:0e:60:5c:44:f8:de:1f:0b:
22:d3:68:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:50:13 2025 by rpki-client