Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
File: S-CVOnswPWoemgKHFgwvRg8H8iY.mft (raw, json)
Hash identifier: 5s1HFmbSC9/FNIwBS1Cnx8manvK9dLdX0RZgPRZmqPM=
Subject key identifier: F2:65:A6:D0:B2:32:41:AC:2E:03:E7:C1:0E:36:E0:64:12:89:61:44
Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
Certificate issuer: /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Certificate serial: 01958C29075DAB4B516FA1036E27CDF461CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
Manifest number: 1369
Signing time: Wed 12 Mar 2025 21:00:53 +0000
Manifest this update: Wed 12 Mar 2025 21:00:53 +0000
Manifest next update: Thu 13 Mar 2025 21:00:53 +0000
Files and hashes: 1: S-CVOnswPWoemgKHFgwvRg8H8iY.crl (hash: f8MJ4iOjDZcGiEq4tcQ8Ntxy/nYvRn7eqOHZuPQMELc=)
2: oeCxzVDUfHaJOXyvnKDzLrak4gk.roa (hash: IomvdIa0fgMjIoUuc5morX/DBZMfwMxLqyV3hq96Pqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:07:5d:ab:4b:51:6f:a1:03:6e:27:cd:f4:61:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Validity
Not Before: Mar 12 21:00:53 2025 GMT
Not After : Mar 13 21:00:53 2025 GMT
Subject: CN=f265a6d0b23241ac2e03e7c10e36e06412896144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:76:59:19:e1:01:59:56:95:cc:c7:a8:5a:
bf:c3:23:b4:92:e7:7b:aa:1c:4d:69:15:02:c6:3e:
8e:ea:c1:32:44:2d:13:88:86:49:25:ac:c0:cb:a7:
97:e9:0a:d7:ea:41:3b:20:6e:75:0a:86:76:42:ab:
11:86:a4:d5:66:e7:9f:56:39:90:dc:85:62:a7:86:
26:67:b3:80:8f:d8:0a:67:f6:54:e9:f9:86:65:a9:
b1:41:f3:74:10:3d:2e:7b:ee:dc:62:6d:e9:6d:06:
e3:4f:5a:2a:fc:03:a4:0e:76:91:9d:16:73:77:fd:
4f:ba:05:62:1e:1e:38:dc:10:3f:cb:d7:53:f7:4e:
53:ad:ad:3d:14:3a:2f:ef:c7:a5:c6:d1:4e:bc:dd:
b8:f9:2c:0e:33:56:48:21:2d:42:6f:36:0a:f9:65:
7e:9e:47:99:45:d8:2e:db:96:72:42:ab:6d:9e:72:
b6:81:01:df:38:72:fe:f5:88:13:6f:5a:e0:02:40:
38:e4:8c:ab:32:1f:55:58:af:a7:b8:00:2d:5b:7a:
d6:2d:9b:f9:dd:82:8b:8d:f0:73:92:1f:65:64:c7:
10:e4:c2:f0:1c:e0:31:bf:4a:7c:8b:e1:9b:e1:a3:
dd:4f:a5:32:85:cf:ad:d3:b0:26:6a:a5:b3:4e:a9:
dd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:65:A6:D0:B2:32:41:AC:2E:03:E7:C1:0E:36:E0:64:12:89:61:44
X509v3 Authority Key Identifier:
keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a1:8a:64:f2:69:1c:3e:0b:81:f7:49:c3:54:78:73:10:8f:
2b:23:12:4b:4e:7a:c9:dc:71:18:90:f4:bc:ec:5b:52:2b:ed:
d4:bb:59:3a:9a:61:6f:43:2e:e3:fa:b9:81:e8:1e:d7:02:4d:
40:e4:77:a7:08:d7:f3:e2:cf:f8:db:81:85:a9:66:cc:15:11:
35:72:0e:9e:47:f3:44:d1:a1:68:c9:1c:49:f6:87:89:a0:a7:
a7:b8:40:c1:7b:cd:16:30:ee:18:e7:13:ec:ae:27:e2:9a:3b:
8d:1c:4d:4d:52:eb:da:7a:ec:4a:c1:e8:31:a6:04:b9:66:a8:
5a:33:8a:f3:0b:ac:b5:68:11:36:6e:65:27:0b:b1:1c:eb:0a:
bb:3a:43:2c:63:00:71:fd:c8:d9:36:2e:d2:1e:16:3b:bd:e3:
b9:50:79:6f:e2:4a:7e:38:13:81:13:19:6f:1c:25:d1:ee:c9:
00:10:74:b1:89:11:55:40:ca:9a:20:bf:ca:8f:20:cb:a5:18:
b8:2b:ca:c6:ec:da:ce:8d:4c:27:85:8f:e8:c5:da:dd:2b:6e:
bc:a0:e5:d2:c1:db:f4:da:81:68:d7:c3:11:03:db:b9:1d:39:
44:06:0d:4f:1a:20:41:4d:a5:c6:c3:a1:dd:1a:04:28:65:b6:
b8:48:e9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:51 2025 by rpki-client