Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
File: cCjsnM1thh9fGv2tAEbzPJEDugY.mft (raw, json)
Hash identifier: LYG5R1G6+lx9nBiuEZddUEddArc/pmft8zRJZ/8uSn4=
Subject key identifier: C9:B2:28:F0:63:8B:34:8C:9A:E1:3A:85:EB:75:72:20:5E:8D:EC:EE
Authority key identifier: 70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
Certificate issuer: /CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Certificate serial: 01964BC6D24D289DBEC38444012AD2380D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
Manifest number: 066B
Signing time: Sat 19 Apr 2025 02:00:43 +0000
Manifest this update: Sat 19 Apr 2025 02:00:43 +0000
Manifest next update: Sun 20 Apr 2025 02:00:43 +0000
Files and hashes: 1: QZoLuFkftySTBFXm0IVGsdEjWSc.roa (hash: OleeaSAA+3wpsX1eMFtI7iInTKkVtH+3kKO3RFIPMMo=)
2: cCjsnM1thh9fGv2tAEbzPJEDugY.crl (hash: 09jqVlB4wIYBZ3+Woe4Xvs0nqBWewdyjWTvN67uRZf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:d2:4d:28:9d:be:c3:84:44:01:2a:d2:38:0d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7028ec9ccd6d861f5f1afdad0046f33c9103ba06
Validity
Not Before: Apr 19 02:00:43 2025 GMT
Not After : Apr 20 02:00:43 2025 GMT
Subject: CN=c9b228f0638b348c9ae13a85eb7572205e8decee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:5c:74:6d:1b:bf:e4:a7:b4:66:9f:cc:31:
11:8e:be:25:1f:07:86:e6:70:82:20:d7:32:97:64:
5a:22:39:ad:b8:63:0e:f9:a8:4f:df:e7:1b:ce:ee:
55:d2:87:73:57:55:35:dc:9a:92:29:ff:76:bb:b7:
64:f1:84:d1:a2:2e:59:67:5b:79:94:64:bf:53:a5:
0d:33:18:fb:52:0e:65:28:77:bc:3e:3c:0b:9c:5e:
47:32:c3:bd:70:ae:53:20:7b:39:58:97:82:06:22:
0d:dc:88:3e:45:07:09:bd:5d:86:ed:97:6d:3a:94:
91:ae:cf:d6:12:44:8b:98:2f:33:48:6b:f3:0a:c2:
b3:ee:79:1f:3a:fb:91:87:96:fe:c2:77:61:2d:d8:
30:b1:74:ce:67:ae:0c:4c:95:4d:15:f3:cb:2f:46:
fd:cb:f1:4b:17:44:cf:27:41:c2:2b:9b:8f:d4:ac:
94:40:dd:ed:61:17:77:81:a6:3d:35:46:fb:42:32:
16:93:0f:23:67:36:3e:36:64:9e:be:b8:33:a6:f3:
a8:54:ba:12:50:ff:7f:fe:ea:c3:90:24:ae:7c:f8:
c7:ff:37:77:08:9d:3e:bc:e6:ad:be:0c:41:07:e4:
f5:c5:9b:0d:ee:a6:95:d4:65:67:43:4d:c8:90:31:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B2:28:F0:63:8B:34:8C:9A:E1:3A:85:EB:75:72:20:5E:8D:EC:EE
X509v3 Authority Key Identifier:
keyid:70:28:EC:9C:CD:6D:86:1F:5F:1A:FD:AD:00:46:F3:3C:91:03:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCjsnM1thh9fGv2tAEbzPJEDugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3c3154-7803-4ec6-bf70-ccdd06563a5f/1/cCjsnM1thh9fGv2tAEbzPJEDugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e8:05:5c:04:46:7b:0c:15:65:26:db:8c:6e:c1:19:76:28:
d3:40:39:4d:9a:cb:04:1a:ff:26:57:a1:19:46:99:e4:8b:e0:
4c:f6:17:04:9a:dd:79:a1:2f:0a:26:74:77:fa:23:9e:fa:f0:
f1:ad:26:bf:e6:1f:ef:bb:4b:fc:eb:85:61:80:26:6d:6a:d7:
9c:4e:f6:3c:63:64:7d:fd:71:28:79:3b:de:1c:d6:e2:74:e8:
70:72:9f:9a:53:d5:26:d2:27:5c:2c:1b:88:0d:e1:cd:87:59:
87:86:6e:8d:1f:4e:66:c7:16:4c:6f:9b:0e:fa:b4:20:4b:ee:
b4:29:d2:45:02:ea:e0:18:a2:62:cd:f1:eb:a7:06:d1:e2:b6:
8f:bd:31:e3:cb:09:0f:8f:b7:5a:e4:51:eb:a0:3c:3d:d9:60:
96:df:f5:3d:68:85:23:8a:62:c4:89:9e:b7:3c:b0:3e:12:2e:
08:7a:f4:48:14:51:42:30:29:fc:77:25:c6:97:99:b8:1c:0e:
92:46:8f:aa:62:b7:f6:a9:43:90:91:96:67:c3:7d:a3:97:9f:
82:2f:48:6c:d7:72:bd:61:50:a4:98:0f:6d:9d:71:06:12:fc:
54:47:38:67:a7:b6:6d:3e:66:f5:f8:c2:5c:a3:a0:d0:60:f5:
e8:34:44:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:36:09 2025 by rpki-client