Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
File: cV2dGCxjrtg5f743LjYA9D2-62o.mft (raw, json)
Hash identifier: NEJSdm+NkRqrpzR6CViQWjwYQzPe+BZPfFY0T+USniE=
Subject key identifier: 39:30:62:52:74:37:76:93:81:A6:AA:36:AD:30:A9:ED:E1:EE:F8:A0
Authority key identifier: 71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A
Certificate issuer: /CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
Certificate serial: 01958C6115136ADD91E8E11D89CCF32E1591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
Manifest number: 1427
Signing time: Wed 12 Mar 2025 22:02:07 +0000
Manifest this update: Wed 12 Mar 2025 22:02:07 +0000
Manifest next update: Thu 13 Mar 2025 22:02:07 +0000
Files and hashes: 1: cV2dGCxjrtg5f743LjYA9D2-62o.crl (hash: 2Keq95tjeI/PUogXWCSXzHh3r3OTCH4DHZXDYkcQg2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:61:15:13:6a:dd:91:e8:e1:1d:89:cc:f3:2e:15:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
Validity
Not Before: Mar 12 22:02:07 2025 GMT
Not After : Mar 13 22:02:07 2025 GMT
Subject: CN=393062527437769381a6aa36ad30a9ede1eef8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:fc:c1:1a:29:89:28:98:5d:4f:98:62:75:
10:a9:ff:3e:82:46:bb:77:09:9e:4a:d0:18:8c:ed:
0b:06:55:09:f3:35:7f:46:a0:17:d0:67:2f:18:b8:
f4:d4:0b:11:39:e1:a1:01:0d:e7:af:76:53:a9:aa:
5f:76:f8:1e:79:93:43:65:eb:3a:8f:2c:40:d6:ae:
d8:82:5d:86:f2:ea:96:57:c1:94:a8:d1:74:cb:4a:
b1:02:56:98:87:fc:ae:73:6f:c6:e4:9e:2c:4e:82:
5d:92:51:ef:4c:af:e3:46:61:34:83:39:02:fe:49:
4f:18:51:65:e1:30:25:47:5f:f6:e0:53:c0:3e:01:
d6:52:68:78:8c:8f:77:e9:5c:3e:b9:d6:96:71:dd:
c0:50:ed:b9:88:fe:cf:4a:3a:f9:0f:37:b4:de:16:
3d:77:8e:5c:33:e7:20:b3:1d:98:29:d7:7d:5f:42:
02:b7:f4:03:69:a4:c1:08:14:fb:8d:6b:3d:75:f4:
09:5d:5c:c4:0b:95:8c:5a:84:26:af:ed:1b:38:07:
29:dd:6e:39:b2:28:e8:e8:5a:40:d6:39:df:b6:f5:
89:6a:7e:ab:b7:ab:b6:a7:36:ba:25:76:23:6c:7f:
6b:39:b0:3a:6b:0e:d4:6f:29:e0:10:31:e1:11:51:
00:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:30:62:52:74:37:76:93:81:A6:AA:36:AD:30:A9:ED:E1:EE:F8:A0
X509v3 Authority Key Identifier:
keyid:71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0f:af:33:8a:6b:55:32:2f:ab:0f:74:d8:da:e8:74:15:f8:
9d:f1:68:a8:70:14:4b:41:92:ff:8b:68:19:2d:67:4d:66:72:
6f:8c:50:e7:7b:f2:0c:1d:73:02:00:17:85:61:db:a4:7b:f0:
ff:23:09:09:81:6d:13:da:37:13:4d:1a:6d:36:a1:cb:21:fa:
73:45:8f:cd:54:33:ca:cc:74:cd:be:5c:a7:24:ef:63:12:38:
23:4c:76:17:63:5c:be:73:e3:9d:94:eb:2f:05:a8:9a:75:3c:
b8:dc:9d:aa:3d:3f:04:9b:12:45:73:95:cf:e2:19:cf:cc:f5:
8c:24:c9:66:3a:1f:72:10:04:d2:5a:fb:5e:21:31:01:c2:a1:
ef:3f:ae:ee:36:b6:36:5c:b5:98:52:94:7d:02:00:60:9f:7d:
ce:ce:ce:8c:ba:3d:d1:2c:28:b6:fa:aa:00:ed:56:83:97:15:
f8:ef:2c:93:a8:06:df:3a:f0:8e:94:9e:15:41:ff:cf:70:2e:
da:c1:23:75:e7:16:88:ce:8d:37:d0:39:ee:24:33:43:12:3e:
cb:85:e2:fa:8c:6d:af:ac:ad:bf:c2:73:29:a5:35:f0:d5:aa:
20:ce:4e:03:7d:23:7f:27:ea:07:31:c7:a9:a0:bc:7d:7b:4b:
e3:47:33:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:19:25 2025 by rpki-client