Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json)
Hash identifier: gLdr8zf3z29MvcKBr5NaQ/zuuXjFGP5jYK+4etJU8us=
Subject key identifier: 1B:ED:66:0F:87:9C:B7:88:83:3F:1E:13:B0:E9:80:E0:C7:E9:91:CC
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 01958B4D3EB74F887810316951CD0A6D9FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
Manifest number: 112F
Signing time: Wed 12 Mar 2025 17:00:50 +0000
Manifest this update: Wed 12 Mar 2025 17:00:50 +0000
Manifest next update: Thu 13 Mar 2025 17:00:50 +0000
Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: 0j0C12JYEWpP6fVj/aXZvu5x1ti/ry2fXeu5d0o+buY=)
2: tFsxYNJ-pvk9ebf-ewoCu0vCFeI.roa (hash: fEyaOVZRLIFifs+RWkNXOgYvzq9xsl1Jvqnurm5BNu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:3e:b7:4f:88:78:10:31:69:51:cd:0a:6d:9f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: Mar 12 17:00:50 2025 GMT
Not After : Mar 13 17:00:50 2025 GMT
Subject: CN=1bed660f879cb788833f1e13b0e980e0c7e991cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:5a:d6:f0:1c:ef:f2:34:af:56:cf:cd:d6:
07:40:b4:d1:ec:d1:6f:fe:98:1c:a3:31:c1:f8:0f:
f8:8f:73:15:9d:ef:68:1c:7a:47:67:a0:b6:14:c3:
80:fb:94:2c:fa:8a:e5:78:3c:60:4f:a8:18:c7:99:
e6:32:7d:74:1c:ca:20:fd:2d:d5:7c:0b:f5:18:6b:
1f:ef:9e:aa:3e:cd:d2:88:02:e1:b9:27:70:ac:8e:
11:08:bc:ac:46:a7:0c:31:9e:92:66:cb:fb:7d:37:
e3:89:91:31:24:c1:52:a6:4a:54:91:9d:49:ff:0d:
af:22:f7:df:60:b2:50:d4:07:c9:13:3e:b1:39:99:
28:5f:aa:57:08:00:d9:e2:9c:e0:15:e3:6f:76:92:
48:b8:52:54:cc:aa:ea:c3:d0:e8:62:0d:df:f0:c6:
e9:45:97:50:73:ce:75:c5:d3:c9:60:28:e7:3c:c0:
e1:1b:99:8a:48:9c:5e:92:f1:82:e4:96:7c:b0:5c:
11:ad:c2:34:4c:15:7b:4c:d4:99:c6:a3:6a:82:40:
5d:1c:8b:f4:93:4a:9e:c3:57:b0:58:fe:8b:0a:93:
12:10:48:0b:a9:e7:69:18:b8:3f:c3:9e:e3:a1:21:
21:9d:09:45:fe:d3:05:4b:58:fe:d4:fb:f0:35:cd:
a6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:ED:66:0F:87:9C:B7:88:83:3F:1E:13:B0:E9:80:E0:C7:E9:91:CC
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:12:20:ac:9f:81:d7:1e:82:c4:57:ce:0c:55:51:72:0e:40:
49:06:a3:14:d7:74:f8:d0:67:6a:b0:fa:11:68:fd:27:88:18:
01:7b:e8:6e:9c:48:90:bd:f7:38:11:70:ec:84:43:a1:11:b3:
23:79:ff:3a:1f:f7:e8:99:27:89:5c:59:d9:8e:28:db:e1:20:
21:3f:0d:38:f4:88:f9:a0:89:de:2a:c0:b6:c3:3c:4b:29:e8:
27:48:e6:80:83:02:e9:1c:ca:f8:84:86:b2:08:20:de:b0:a2:
f7:a3:e9:af:83:c2:5a:9b:50:d3:5a:5e:01:2d:d8:ad:c8:c7:
6b:98:06:7f:20:7a:f6:3d:89:dd:5f:3a:2e:f5:ea:50:0a:e7:
cf:b2:25:5f:8a:9f:13:a1:28:f3:57:e6:f0:31:be:b6:10:e0:
14:7c:6d:d3:52:3c:14:0e:72:b1:c3:83:7d:c9:b7:f6:6d:99:
69:c9:49:77:29:f0:c4:ac:2c:8d:0d:b3:09:10:fd:ce:01:5a:
64:33:d7:12:70:ef:46:a4:b4:88:5b:60:15:29:c7:f6:62:f1:
b6:75:fe:c2:d1:4d:6a:d3:3d:29:13:3d:6c:0b:ec:9e:14:d8:
e6:8e:1d:09:4b:34:4a:19:df:c9:e1:52:22:d2:8e:ea:dd:a7:
e2:dc:5a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:52 2025 by rpki-client