Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
File: Cr193OT9cDvD-8r8G11Xfhp1dXU.mft (raw, json)
Hash identifier: 27+1VSpJKe3XK0J4yJvRloVRSPeBGhzHRvvlDbwtP1Q=
Subject key identifier: CA:83:A1:67:F7:AC:5C:CB:E5:91:1E:71:1F:20:81:A4:5B:59:E5:09
Authority key identifier: 0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
Certificate issuer: /CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Certificate serial: 0196520023BA7E3017820FF68607C9B736B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
Manifest number: 12C3
Signing time: Sun 20 Apr 2025 07:01:02 +0000
Manifest this update: Sun 20 Apr 2025 07:01:02 +0000
Manifest next update: Mon 21 Apr 2025 07:01:02 +0000
Files and hashes: 1: AWRVDrJmsEsB9Z159jyFngqyGLE.roa (hash: DirE8id/agwWNhmtyshobBEdAnWhXbNRd3+Zdg4CPc0=)
2: Cr193OT9cDvD-8r8G11Xfhp1dXU.crl (hash: +FFmc1rkZU7E5EzVHaVv/0If+4nQ9e9PEx2fwE8WZu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:00:23:ba:7e:30:17:82:0f:f6:86:07:c9:b7:36:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Validity
Not Before: Apr 20 07:01:02 2025 GMT
Not After : Apr 21 07:01:02 2025 GMT
Subject: CN=ca83a167f7ac5ccbe5911e711f2081a45b59e509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:d3:99:99:6c:7e:00:ec:fc:d2:eb:7a:ba:
29:9d:f0:87:20:f8:78:91:99:b4:ea:8f:4e:17:f5:
7c:7b:4d:f3:51:b0:78:fb:da:5f:e3:e6:d5:72:ea:
bd:ad:18:69:f3:62:62:52:06:0d:19:95:45:b7:86:
89:01:4f:53:37:a5:fc:4e:9b:3e:be:b7:68:98:69:
06:2c:73:49:03:15:82:d1:fe:e0:18:65:10:05:5a:
ba:c6:bf:35:6a:30:b0:65:49:ea:2d:cd:29:53:4b:
6a:02:21:09:1b:85:16:ef:d4:8f:94:4e:75:71:11:
67:f8:d2:2f:d9:ee:7e:c7:47:f8:6d:99:51:2a:1d:
25:87:a4:0c:c8:55:25:96:86:d7:93:cb:42:64:89:
67:0c:02:0f:d5:1e:5a:cc:c4:18:c4:52:71:31:fb:
ce:f3:12:dc:9d:a1:e3:94:68:19:2c:8b:d2:9f:85:
7f:35:e9:1c:86:97:14:ec:b0:73:06:c6:e8:7f:11:
0c:79:2a:88:65:1c:3c:9a:b3:74:60:0e:d9:16:d5:
bc:d2:d8:7d:ce:41:88:63:68:7e:5d:2d:f7:7d:68:
40:08:6b:83:d5:3d:fd:06:a6:b5:0a:c8:c3:5d:1f:
d6:82:51:e6:97:9a:aa:9e:9f:ce:38:52:9b:0e:45:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:83:A1:67:F7:AC:5C:CB:E5:91:1E:71:1F:20:81:A4:5B:59:E5:09
X509v3 Authority Key Identifier:
keyid:0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4d:e5:a7:b3:39:88:86:e9:f4:56:a8:2a:08:23:0b:06:bf:
3d:48:89:11:05:54:83:da:8c:f8:d1:ac:c6:31:5f:01:17:25:
b7:e6:26:2f:63:f1:29:3d:1c:33:e0:d2:b7:55:bb:0f:13:24:
66:40:02:ea:06:d3:4e:f2:aa:ae:51:62:16:14:f9:9e:d1:ea:
ea:f2:20:f8:11:dc:41:1a:c2:0c:6c:c2:57:26:8e:a3:f4:43:
7b:6c:fd:d0:a2:d7:9b:56:85:83:3c:7e:db:ea:1d:b2:d8:e6:
fc:b1:7a:f3:8b:81:0b:da:15:e6:3c:53:8e:98:70:2d:92:04:
14:39:8a:11:2a:48:02:dd:9c:b8:13:46:79:39:42:c8:cd:e9:
5c:9c:2b:97:7b:86:76:ff:f5:e4:cf:48:b0:9e:bf:f1:0f:58:
a4:55:e6:fd:5b:d3:24:76:1a:75:19:8f:34:93:db:68:db:6a:
d0:1b:b0:dd:68:45:99:b9:16:1d:bb:f3:4f:2a:d8:8a:43:f1:
eb:75:80:24:dc:75:ad:20:8f:3e:98:89:7d:cd:ef:cc:04:b5:
db:cb:6f:74:96:5d:71:5e:12:5e:51:c4:19:f0:e7:92:17:66:
0b:86:4b:bf:e6:2f:ee:8a:f9:c2:10:60:97:0c:13:43:32:08:
a3:3b:14:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:37 2025 by rpki-client