Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier: HjCQNCwha98tdYnFnIKQHfYF9o3U+CEGD25cl7hgMYY=
Subject key identifier: 39:9E:80:74:42:D0:2E:6F:EC:C6:FD:7C:20:07:27:A9:9D:9F:10:20
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 0196564A7400E6AAF79E0E0CF59386B38CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 03:00:41 +0000
Manifest this update: Mon 21 Apr 2025 03:00:41 +0000
Manifest next update: Tue 22 Apr 2025 03:00:41 +0000
Files and hashes: 1: 1NnPIelPhTu2KqOrRaVheTjGDtA.roa (hash: rysz73IInmOVJuH+riwA3J47+EGtI1eXu44kPUE1b4E=)
2: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: KjCD8UKU/2v7ycIAuqzMg2QQR8F7sgInWYzdh+gKia4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:74:00:e6:aa:f7:9e:0e:0c:f5:93:86:b3:8c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Apr 21 03:00:41 2025 GMT
Not After : Apr 22 03:00:41 2025 GMT
Subject: CN=399e807442d02e6fecc6fd7c200727a99d9f1020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:11:28:70:58:ef:8a:90:a5:36:64:7b:ea:
35:a1:d5:a8:c3:07:11:2d:83:bd:27:c8:07:07:36:
c5:fb:51:88:d5:98:f6:f7:d2:24:0e:9d:80:65:c8:
61:b5:f7:8c:9a:4a:36:59:86:5b:af:81:61:80:c4:
03:13:dc:f1:1f:ec:3f:f0:91:d2:ea:98:1f:de:f5:
9a:86:67:5a:a2:85:47:c4:44:23:a4:81:a7:a1:1f:
34:89:ff:90:47:05:a6:8a:56:f0:b8:36:34:58:7d:
41:ef:16:21:e3:04:25:a5:77:47:32:55:cb:be:ad:
d1:22:6d:0b:2c:d8:e6:e0:20:f0:4f:ee:a4:bd:64:
26:a0:59:b3:39:5c:d9:cd:9a:ae:9a:e1:b1:04:08:
01:7d:5f:b3:0d:86:7d:a5:5a:a6:5d:25:21:9d:9f:
38:80:b4:e9:8f:67:fd:3b:88:08:54:65:97:e5:57:
ed:5b:85:bb:ec:bd:27:df:0d:b4:1e:48:01:3f:65:
98:e1:e3:ca:d6:91:5a:2f:00:7d:c1:be:d2:8f:9b:
28:b9:9b:9c:8f:bd:bb:92:98:86:dd:51:65:3f:22:
81:76:0d:0c:23:32:95:9a:00:31:41:55:27:0e:b1:
ad:6b:7a:7f:75:44:01:3a:3f:3b:a4:2a:ec:ab:cc:
35:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9E:80:74:42:D0:2E:6F:EC:C6:FD:7C:20:07:27:A9:9D:9F:10:20
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:97:7c:60:0b:6b:88:a3:76:a8:e7:3b:be:47:0c:e9:0b:8b:
6d:f0:76:35:f9:7e:41:b3:2d:a9:39:35:6d:d3:9f:2c:8e:f0:
c5:7b:2d:48:d6:a9:68:0c:88:bb:c3:0a:a5:1d:32:a1:3b:40:
b7:9b:d6:0f:2c:9b:aa:27:39:a5:ad:3e:a8:31:86:25:0c:02:
75:2b:22:c9:3a:10:11:c0:dd:54:bf:c1:54:26:ec:ce:31:33:
6e:cf:48:f4:da:ab:be:2b:28:b1:0c:0d:10:40:3a:a6:58:d8:
05:f2:79:99:10:28:e7:cc:e3:26:7e:cd:92:13:84:c4:91:b7:
fc:2c:35:14:df:9d:ef:c3:ea:63:6f:e7:66:71:87:19:fb:74:
1e:a8:ee:73:31:38:aa:bb:e4:c7:f4:02:36:bd:4c:f6:2a:78:
cb:9f:c2:be:db:a9:74:01:e2:17:95:42:96:2c:95:ec:14:4a:
18:8f:b1:dd:8b:32:e5:ae:17:3e:5d:b0:16:5f:75:ec:a7:44:
c4:ca:67:c6:6e:a3:4c:0d:7c:34:52:41:71:19:fb:f1:9e:4f:
59:ad:7f:cf:b3:c2:89:e3:d4:f7:93:ca:43:39:28:db:e1:6d:
5a:80:fa:fa:a4:df:17:6f:1d:d7:2a:7d:cc:5a:fc:5b:b5:ab:
bc:2e:f6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:10 2025 by rpki-client