Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
File: cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft (raw, json)
Hash identifier: HtlNiTdCi0k6nEqCDLfNYHG2RkDhzeQe5AUuEUkYvwc=
Subject key identifier: 8D:B8:8F:59:6A:CF:33:43:5C:1A:69:C9:A8:86:1D:01:8A:FD:34:BE
Authority key identifier: 71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
Certificate issuer: /CN=71071c85a3482958f87f032b6463198c7fd9eb07
Certificate serial: 01958FCF0314A5E26E7463532283C4B7E2FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
Manifest number: 1167
Signing time: Thu 13 Mar 2025 14:01:03 +0000
Manifest this update: Thu 13 Mar 2025 14:01:03 +0000
Manifest next update: Fri 14 Mar 2025 14:01:03 +0000
Files and hashes: 1: cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl (hash: mpnTE0atCIQYVLy7u7oNYnZIk6TNGVnHvjQEWHwDXaM=)
2: oDKhHV25asaAZwnOhgVY2UWIJ6I.roa (hash: TBtdjF9kT0kXckzBss688u22tMu+NiF4J0DL0v5u2x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:cf:03:14:a5:e2:6e:74:63:53:22:83:c4:b7:e2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71071c85a3482958f87f032b6463198c7fd9eb07
Validity
Not Before: Mar 13 14:01:03 2025 GMT
Not After : Mar 14 14:01:03 2025 GMT
Subject: CN=8db88f596acf33435c1a69c9a8861d018afd34be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9b:bd:a0:90:7b:81:33:0b:cb:66:15:93:72:
7e:58:42:e1:7d:47:d0:5b:58:6d:63:60:07:79:1b:
c6:23:db:6b:a6:ed:a9:4e:c4:8d:d1:06:2e:9b:2b:
bb:d0:84:2d:f7:16:1e:82:34:c3:80:35:26:c2:de:
55:dd:4c:1e:e9:b6:85:01:84:05:78:19:2b:ff:f4:
9f:93:9f:77:16:b7:dd:3b:77:65:1e:af:7c:3c:78:
ac:4e:b7:5e:da:18:5a:3d:f3:8a:a4:84:64:cf:3b:
d6:b3:17:10:f4:86:48:54:bb:d3:46:39:7c:e4:58:
d3:d6:a9:b8:54:a2:22:de:d9:7f:ce:27:86:4b:5e:
ff:aa:75:05:c4:91:b9:f0:89:67:11:96:17:c8:8a:
ec:1a:ed:f1:ab:d1:b1:b4:04:a8:d9:db:9f:c8:51:
a6:c1:e9:04:55:93:09:83:55:9b:eb:c8:ea:8f:a4:
e0:2d:c4:9c:fc:af:20:89:58:42:56:d1:95:e6:09:
84:80:ab:3b:04:e1:70:52:15:10:de:a9:bb:fb:7b:
f6:d3:66:5a:3b:9a:61:fb:74:61:76:69:f1:b4:b2:
6e:f4:13:b8:48:32:cc:50:6a:04:97:34:08:b7:34:
25:45:3a:c6:95:af:c9:96:6a:5e:b8:bd:bf:ce:2d:
19:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B8:8F:59:6A:CF:33:43:5C:1A:69:C9:A8:86:1D:01:8A:FD:34:BE
X509v3 Authority Key Identifier:
keyid:71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2a:4e:0d:b6:15:bd:7a:23:b8:79:8e:ba:0b:a0:06:09:d1:
81:4c:dc:2c:23:2f:4e:be:3e:fc:75:0a:79:b3:2e:f8:ad:87:
fa:67:de:01:3e:71:5f:4e:df:85:b7:e4:0d:78:95:52:51:88:
1a:f5:92:0a:a4:e6:cb:a7:94:db:3d:c3:5e:38:e7:c1:ad:66:
b0:6c:12:ce:fd:6a:47:77:f5:7b:83:e9:bd:40:34:cf:15:ef:
4d:ba:ec:fd:50:81:12:a4:d4:1a:db:6f:51:bd:c0:2e:02:96:
21:17:25:d9:4b:15:fa:6e:7a:47:44:e7:e5:e2:66:5e:59:35:
08:0d:43:58:cf:8e:52:a4:72:1a:19:4c:95:dc:cb:fc:e8:2e:
9a:c9:7f:3c:79:2b:cc:90:71:48:1d:8e:fe:c0:98:34:ef:e8:
7a:c6:dc:26:e3:99:22:e6:f9:c6:34:14:83:05:df:58:26:16:
f6:23:08:c3:14:44:5b:04:6e:58:48:50:9d:87:eb:04:99:05:
cd:02:fc:17:f4:eb:4b:8d:9d:05:0e:0b:0b:0e:da:0b:9c:63:
9b:d4:91:38:7b:a3:25:a5:12:ec:eb:67:7c:bf:b6:f4:18:8f:
54:91:d0:85:91:7c:3d:06:ee:ce:d9:52:7e:d1:41:18:63:23:
46:fb:ae:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:27:34 2025 by rpki-client