Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
File: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json)
Hash identifier: /8D2wcR9FmG8W8cxslcrIUwug7VZdf642/FVsitR+CI=
Subject key identifier: 4A:38:32:45:2C:C3:73:90:20:2F:E0:37:87:0B:13:0C:5B:38:1E:55
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial: 019656133AB73C37780D77CF5D7CF62FFCD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 02:00:22 +0000
Manifest this update: Mon 21 Apr 2025 02:00:22 +0000
Manifest next update: Tue 22 Apr 2025 02:00:22 +0000
Files and hashes: 1: ArR_qdqqwy8JJ4d9cTJadzHk7s0.roa (hash: 3c+azDmhzkHSEBi1SBo0t88glQEIBlV01Qc6ZBYXFN8=)
2: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: bk3+Yk4Pa4VWEDNuUHTElWeL6GPanteMHcMkXs1k5m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:3a:b7:3c:37:78:0d:77:cf:5d:7c:f6:2f:fc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Validity
Not Before: Apr 21 02:00:22 2025 GMT
Not After : Apr 22 02:00:22 2025 GMT
Subject: CN=4a3832452cc37390202fe037870b130c5b381e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b4:a2:6e:30:7e:65:78:d3:19:83:7c:b2:07:
e0:01:7c:b0:1c:11:10:9d:37:f8:03:d6:43:53:ca:
a1:7c:43:37:da:fb:e3:5b:89:12:9e:72:9a:6a:21:
f1:ab:66:44:53:b3:cc:a1:c8:b1:3a:aa:c4:a6:e6:
c6:61:2f:2f:aa:17:ac:84:fa:5d:0d:d2:98:a3:42:
ba:c2:a4:65:70:70:12:0d:5c:a9:c9:37:7b:c2:b9:
d3:9c:f2:0c:51:bd:47:7e:83:76:81:e9:b2:ec:99:
6a:45:a6:66:b0:f4:34:64:be:b0:bb:47:a6:9b:7f:
af:27:e7:71:df:bc:5c:84:e4:47:06:24:05:53:b5:
47:b9:de:b1:f3:35:f3:77:56:b6:b0:9a:54:dd:b7:
19:d2:30:ca:39:ab:9a:e9:48:aa:a0:55:d9:5c:e1:
8c:a8:39:09:8e:e3:28:8c:49:6c:e6:29:0a:da:a6:
d2:ea:77:06:af:e7:11:63:98:21:26:68:0a:f1:08:
ce:54:de:ef:52:9d:f6:77:26:a0:f0:ae:5d:76:61:
55:af:74:19:e5:e8:f7:56:29:2c:c4:4c:cf:e8:f9:
f0:7e:66:aa:59:f0:7e:b5:57:f1:11:77:fb:3b:00:
a7:9c:20:9e:18:6d:b6:7d:d1:e2:97:1f:90:ee:f8:
b2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:38:32:45:2C:C3:73:90:20:2F:E0:37:87:0B:13:0C:5B:38:1E:55
X509v3 Authority Key Identifier:
keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ca:f4:5f:db:4c:9b:33:65:ee:8c:66:d7:24:6d:bc:59:52:
4e:f7:1d:2c:7e:29:01:01:b9:b8:da:d5:95:a0:ac:cd:7c:e7:
48:a6:59:20:00:2f:96:ce:9d:6d:d3:a1:d1:41:ed:ad:65:e1:
1d:30:40:62:1e:c7:cd:bc:a9:95:22:c3:73:19:56:74:01:f2:
0e:07:82:bd:56:62:ea:28:c8:3a:f0:b4:59:a4:7a:8a:26:64:
33:82:b2:60:ce:a4:a5:b8:b3:7e:b5:24:03:a6:d6:84:9c:13:
12:26:6f:4b:89:5f:20:d3:18:88:19:cf:90:84:6d:25:65:08:
29:14:54:cc:7c:2b:13:fd:a4:7f:dc:13:25:cd:d8:28:96:b5:
27:53:25:ab:db:31:d1:e4:02:88:8f:04:1e:b3:74:86:95:b0:
4c:ce:ee:1c:a6:74:13:68:81:96:b8:ed:73:23:a3:81:14:e8:
12:23:91:15:0a:3f:79:29:6c:e6:5e:e8:01:91:fd:ea:3b:4c:
02:4d:d9:be:22:83:b3:e0:45:de:d8:00:2d:de:33:7f:5d:ac:
25:75:ab:38:18:62:b0:53:da:b1:23:98:bf:17:34:5c:34:ff:
25:8d:3d:85:7d:11:50:bd:55:fc:e0:08:dc:53:c9:c1:09:df:
f3:a5:ad:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:41:20 2025 by rpki-client