Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: nEgGCfXobOjwgkQaYwkklZ6A1XgZP/1iF8UPPIu75Sk=
Subject key identifier: 7C:89:69:AF:CE:F4:8D:AC:25:72:00:85:D9:97:24:89:B9:CD:8A:66
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 01958C2931A0F743F53CB9C16BB48D637441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 1497
Signing time: Wed 12 Mar 2025 21:01:04 +0000
Manifest this update: Wed 12 Mar 2025 21:01:04 +0000
Manifest next update: Thu 13 Mar 2025 21:01:04 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: sx9c9Re2/z2UAOE0+qz11m/X7MqXbW4lbYgsPhJTxLI=)
2: lcycvAbT-2PUUx_keEjD_rzNQVg.roa (hash: ohYpD8zllBNGHneXiioDVg0sD783EBRieTug607OnxU=)
3: oAvccpdYptAzS_BGXpnm48hNKj0.roa (hash: UcqHCV81R5HjZRazwae448gGQvQVwy5vVk7J2zutre4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:31:a0:f7:43:f5:3c:b9:c1:6b:b4:8d:63:74:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Mar 12 21:01:04 2025 GMT
Not After : Mar 13 21:01:04 2025 GMT
Subject: CN=7c8969afcef48dac25720085d9972489b9cd8a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:d8:58:94:fe:9b:e2:f6:8c:14:9d:16:d5:
4c:26:0b:d3:d4:be:de:3a:ca:73:88:19:af:bb:10:
fb:12:74:69:26:d8:03:82:ce:74:8e:06:6a:95:6e:
9b:6d:6b:1b:8d:18:c8:91:bf:8e:ed:68:53:5f:c2:
3c:49:5d:97:2b:a8:09:91:35:7a:0d:32:e5:9a:af:
31:58:4c:16:e3:2a:f8:e2:04:fe:6d:e0:7e:ff:ca:
94:c5:52:21:cf:5b:7c:2b:39:5b:6f:b6:6c:ec:e3:
e6:ce:80:70:d7:39:79:35:bf:26:5c:5f:d3:ef:d5:
91:c7:4c:3e:12:d9:99:1d:51:b4:27:62:07:73:8c:
f0:62:38:04:e5:eb:09:74:35:22:75:dd:d7:fb:96:
f2:eb:28:d0:2a:6e:a5:98:a7:ca:57:44:1f:23:27:
2f:3d:aa:86:ad:d5:2e:ba:8c:93:c9:0c:a5:93:08:
36:73:57:0c:3d:4b:66:1a:79:67:b3:4a:03:c7:26:
46:8d:7a:03:f9:ca:ca:99:48:a3:0d:33:3a:56:cc:
0f:2b:29:8f:bb:06:28:4c:9f:30:9e:ef:4f:de:09:
26:91:58:eb:d0:28:a7:9f:be:82:a9:13:9c:0d:47:
13:c5:72:71:76:3f:54:a1:9b:ea:35:7d:25:1f:76:
13:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:89:69:AF:CE:F4:8D:AC:25:72:00:85:D9:97:24:89:B9:CD:8A:66
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:cf:6e:c6:1c:2b:5a:da:4a:be:3e:02:ec:c2:de:03:90:57:
ba:ca:4c:c2:f4:2f:a3:b4:d5:e8:c2:8b:da:6c:13:3a:cf:53:
95:d6:a8:17:ef:b6:a1:86:b5:ca:39:3c:f8:1c:93:bb:77:fb:
c1:e4:e9:3d:f1:54:0b:ec:4c:77:3a:59:76:6c:4d:51:36:a2:
8e:80:a6:cb:84:f9:9d:e2:33:e4:7e:8e:ae:dc:41:36:ac:bf:
97:47:06:9b:92:c5:b7:4c:13:da:8f:6a:5e:60:26:3a:96:0f:
98:f6:86:6e:8a:8e:ad:17:46:47:56:55:b8:49:b4:3c:d2:05:
23:05:53:35:5b:b4:62:15:97:94:25:4f:88:da:66:9c:e0:bd:
a3:e0:e2:cb:d6:f3:38:f5:50:88:9c:80:03:79:ae:0a:d5:8e:
9c:3e:1a:d6:d0:3c:d1:9c:00:26:f4:3f:25:37:85:5b:a7:b1:
2a:b5:92:53:12:8b:1d:03:a3:d2:20:4a:9b:24:90:75:ec:f9:
1b:66:d1:f0:00:8e:53:ec:7a:9e:50:9f:f1:60:4b:d7:3a:e9:
41:b2:2c:e9:e5:66:64:86:84:90:b9:bd:54:12:f2:b5:22:b0:
90:85:39:83:0f:c2:cc:85:57:35:27:f8:b8:75:a4:bd:13:15:
4d:d0:34:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:09 2025 by rpki-client