
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: 0KGPqd9JptoDpd4awCoHj11o6j5TsjtV/sV2NZwfZNc=
Subject key identifier: D9:F8:50:55:1D:49:D1:32:75:23:50:91:31:F9:07:64:3B:A6:F2:8B
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 01964EFEF8326F03F30808104B1A16CE1319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 0E85
Signing time: Sat 19 Apr 2025 17:00:54 +0000
Manifest this update: Sat 19 Apr 2025 17:00:54 +0000
Manifest next update: Sun 20 Apr 2025 17:00:54 +0000
Files and hashes: 1: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: CqeNCjxuZ6ZJH4oxEBCt3t5vjbYi6nfynESds/DB11s=)
2: qVT8jOoIg3NQ7grXFr4I7SQu8PY.roa (hash: OKj4yzwEJbloQV+D0rgvNOZHy8KXLKDzSxRsqanfakg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:f8:32:6f:03:f3:08:08:10:4b:1a:16:ce:13:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: Apr 19 17:00:54 2025 GMT
Not After : Apr 20 17:00:54 2025 GMT
Subject: CN=d9f850551d49d1327523509131f907643ba6f28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:78:17:ca:c4:2f:a0:c4:16:75:32:2c:30:1e:
ee:f8:ab:91:fd:1f:73:ed:c9:64:ea:41:f1:c1:46:
c6:db:ac:b9:78:8e:1f:16:b9:f7:c0:2c:21:45:fd:
51:a0:10:98:3d:d3:04:dd:4c:80:b1:72:37:8f:a7:
9d:a1:13:6b:6f:6d:9a:a5:e5:91:09:11:cb:ad:b7:
a0:98:69:c8:e4:fc:d5:cd:22:ab:29:75:45:cd:e5:
5b:57:36:31:1e:3f:27:01:d4:8b:7d:db:e3:6c:f5:
e9:66:1f:ef:89:4f:17:a0:ba:00:35:c6:c4:9c:99:
09:42:67:80:41:58:db:a2:5a:d2:08:04:3c:04:92:
a8:c7:9d:68:69:eb:1e:fe:20:18:a4:21:e2:c6:21:
35:9a:7e:90:3f:02:cc:a7:98:97:c5:1c:a6:aa:4c:
43:c9:6d:23:3f:4f:fb:1a:75:b1:69:da:0c:c0:1e:
c6:52:77:7a:54:f8:f6:5a:bf:4a:06:3a:c1:35:50:
1f:f9:8f:d5:43:4f:89:3a:00:e3:4a:bf:e8:d2:b5:
4e:c4:54:4b:03:c7:0d:82:43:d0:57:85:ad:b7:ee:
d9:94:f1:3b:2e:1b:03:a0:13:f1:f6:5a:e2:91:71:
45:6f:6d:de:c3:91:16:e9:2a:ec:07:ed:4a:ee:aa:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F8:50:55:1D:49:D1:32:75:23:50:91:31:F9:07:64:3B:A6:F2:8B
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:96:6e:5d:3a:8b:f5:88:20:5a:22:52:4a:35:71:17:ab:4b:
33:31:52:7c:cf:ad:55:31:db:d2:a7:89:e2:72:ed:22:1c:21:
73:e6:44:88:29:7a:c8:92:d3:06:2f:7f:bd:d0:5a:54:ed:cb:
6b:35:22:c3:2f:0f:2b:01:99:72:d9:7b:4d:8a:a0:c2:b6:e6:
a0:50:00:e0:d2:5e:27:46:bf:6b:2b:55:89:98:d6:da:ce:9a:
fc:f9:c2:3f:e4:39:90:42:e0:66:bf:0f:54:75:a3:b8:71:94:
25:3a:ca:cf:de:76:c2:01:66:03:70:d9:1f:e4:45:4c:ff:8b:
15:78:01:e7:4f:de:09:5b:d8:55:1c:a0:73:e6:16:d9:2d:c1:
15:f3:e3:83:86:27:96:28:21:60:3b:29:ca:1b:04:68:dc:f1:
d1:8f:14:94:9b:f5:d0:71:d4:77:33:04:27:7a:00:e9:90:4d:
30:d7:72:2a:f1:62:03:26:3d:ea:78:87:1f:13:30:ad:5f:f5:
64:61:27:a6:5f:18:18:fe:06:14:82:65:f2:d8:65:76:95:57:
7e:7e:dd:d7:f8:ed:02:33:59:a0:ec:ec:7b:f1:45:bf:b2:b2:
5d:13:cc:e4:cc:08:61:d6:d9:31:a9:7f:e1:da:85:36:cd:9a:
36:bc:6b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:20 2025 by rpki-client