Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: OdQXKz1rcWT/rx/FYZX+TmgQKrxy0DaZTEDR7hJNZlU=
Subject key identifier: 99:FA:E0:69:11:1D:BA:5E:21:D3:87:5C:56:1A:41:76:FC:A4:09:2F
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 01963FC24BD107AEF5A2E7EB0D8C9E4F09B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 0BD3
Signing time: Wed 16 Apr 2025 18:00:20 +0000
Manifest this update: Wed 16 Apr 2025 18:00:20 +0000
Manifest next update: Thu 17 Apr 2025 18:00:20 +0000
Files and hashes: 1: 5kFz87V3cREdddc3AsaZImesrc4.roa (hash: GMf/VeYSaAQLAvigW84goiaYuSw8QRXcx94y9RzK0U8=)
2: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: N16vdOQrhkAzft2F0+RfX+/EBnHPVrF1lfJGTQ5cPqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:4b:d1:07:ae:f5:a2:e7:eb:0d:8c:9e:4f:09:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Apr 16 18:00:20 2025 GMT
Not After : Apr 17 18:00:20 2025 GMT
Subject: CN=99fae069111dba5e21d3875c561a4176fca4092f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bc:5b:cd:ef:42:84:dc:4b:db:8d:79:46:e7:
17:da:f5:01:21:56:f2:fe:14:2c:88:73:9c:ec:7b:
bb:bf:fb:81:c1:eb:01:68:33:0b:40:8c:1f:d1:a9:
b2:18:bd:28:b3:c5:9b:41:33:f1:30:5d:8b:10:1d:
66:86:d2:27:00:3b:46:ad:2c:14:04:46:92:79:4b:
97:91:87:30:31:53:44:fb:bd:f2:d1:1f:c4:1d:60:
be:3e:b5:a6:ed:1a:05:47:7b:8e:ce:1f:8d:d1:de:
83:47:25:70:6c:70:dd:7c:0f:c6:9b:70:2d:d6:a0:
0c:56:7c:50:1d:ba:24:52:0e:e4:33:37:0c:7c:5b:
ef:cc:d2:cf:73:f5:db:0a:34:dc:ea:a3:7c:f2:7a:
b9:cb:53:72:f8:64:d2:c6:63:6d:84:4d:56:bd:d9:
52:de:16:d5:c0:66:6a:0e:49:8d:d0:db:50:57:6b:
54:86:e9:f2:54:22:80:50:c9:9d:81:dc:1d:ea:53:
0c:b9:a4:30:1b:69:39:4f:8d:14:13:58:6a:4d:82:
d2:0d:2c:56:4d:aa:5a:48:0e:bc:a4:b9:3c:1e:9a:
42:68:c8:bb:fb:ff:cf:dc:3d:98:ce:f2:ab:aa:0a:
32:99:d6:8f:93:ed:4a:b6:2c:bb:50:51:71:d3:e8:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FA:E0:69:11:1D:BA:5E:21:D3:87:5C:56:1A:41:76:FC:A4:09:2F
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0a:43:00:1b:b3:bb:1c:ba:0c:40:9e:eb:d6:b3:38:15:82:
b7:e1:81:85:68:c4:09:c2:cf:e1:94:b6:f0:02:68:98:72:a4:
f8:0e:c9:95:25:30:fd:9f:86:9e:a7:24:45:e2:8a:40:a2:29:
cc:ad:33:12:b0:9f:e7:24:57:44:a9:c5:78:5a:68:35:d6:7b:
66:7d:cd:94:72:15:14:3d:fb:7c:a0:ce:96:9e:f0:5a:0b:97:
c3:ad:0a:9b:37:98:9f:59:0f:20:06:7e:4b:40:83:ae:c5:57:
c4:ae:ea:f6:7d:e9:d0:6d:1e:08:be:f9:1a:50:2c:f9:ed:fc:
74:01:5c:73:1f:89:58:dc:b9:aa:df:1c:69:28:82:8c:db:41:
d8:6b:ca:bf:27:7a:33:7f:f5:9f:67:36:f3:d3:fe:01:0d:fd:
d2:d1:df:1b:7f:b1:86:46:38:b6:63:ba:07:2b:4c:49:03:2c:
c5:3a:d8:82:fb:a8:67:2b:17:78:b2:0f:56:49:43:4d:6d:81:
3e:e6:ac:42:8b:a6:d6:91:32:6f:ce:f2:71:ee:a3:77:c0:0d:
5b:a9:c5:c3:06:1b:76:5f:7a:8c:29:ee:76:77:bf:56:20:16:
e4:74:14:94:24:73:a3:2a:98:47:02:1f:74:8e:c3:ab:12:88:
46:9a:82:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:53:42 2025 by rpki-client