Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: jN7tlp9bB0AuhaCAdIq2X8OtE0pQ6wC3ZZQLhljriyM=
Subject key identifier: C3:CA:1A:DE:3A:F4:88:A0:D6:BF:27:AF:C7:4A:2C:E8:29:27:7C:8A
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 0196052EAB01968804FADC0C7D061F60C5ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 046E
Signing time: Sat 05 Apr 2025 09:01:06 +0000
Manifest this update: Sat 05 Apr 2025 09:01:06 +0000
Manifest next update: Sun 06 Apr 2025 09:01:06 +0000
Files and hashes: 1: 1VjQoZc10lerLTuv0g4YHMLtXf4.roa (hash: IN8Xed87+TwZ0pVib4LiLY2cu5Cx22VcMoeEWlN76yU=)
2: 20RbcG86t8HtXkcLzrMiwyakZOs.roa (hash: B09OOZ6EDjWUZ2dxHE39ZhiZAqdtKGsJkWVnQD/N6aU=)
3: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: NKB+ed+SRZZ7ZcEAihDXM4AWylTPZn/FT/Zs8FkQcs4=)
4: RqxbdMSh8w-5alXpfvlUin-3Y-A.roa (hash: K1mxLLRur8HwafCJYeka7QKzlM8enWjpiWi6lOKQXkI=)
5: qCfNSjbitI7Et5lSX1rtmaive_0.roa (hash: 1fS+iseUgmiw070ru2CUkkEKwBoPzkT1Bp7jleLafaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:05:2e:ab:01:96:88:04:fa:dc:0c:7d:06:1f:60:c5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Apr 5 09:01:06 2025 GMT
Not After : Apr 6 09:01:06 2025 GMT
Subject: CN=c3ca1ade3af488a0d6bf27afc74a2ce829277c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:c5:f3:1c:75:71:d1:15:68:01:33:0a:af:
52:6b:82:62:a8:b3:bf:89:7b:8b:cf:99:5b:5c:ca:
eb:a8:9e:54:cf:5d:11:a3:af:bf:93:2a:c2:c2:54:
40:6e:85:d0:0f:7f:76:92:09:9b:35:a3:6b:bd:d7:
4f:21:4c:1e:9f:6f:eb:79:42:2f:d0:e4:4d:c3:fb:
7b:cc:a8:68:e9:a8:50:a3:be:f6:df:56:aa:eb:de:
c9:e5:fe:f9:ec:05:70:7d:a1:59:72:66:72:d7:fe:
d2:15:6b:ae:8d:03:86:f9:91:59:50:bc:58:99:a2:
09:d9:a9:38:7b:9b:ac:82:70:eb:ff:b4:ca:53:4a:
03:a3:d0:bd:67:8a:cf:cb:0d:fd:a3:78:34:2d:96:
7e:b5:ff:ef:05:ed:c8:1c:39:e3:84:ac:e2:da:19:
55:67:ff:15:74:86:c8:44:4f:0d:16:f9:ca:13:44:
3b:e6:2f:d5:65:08:d5:87:c6:05:b6:57:eb:dd:96:
a1:d4:bb:0c:ef:b7:77:00:2c:bc:75:57:6e:4e:e1:
9a:69:55:8f:41:9a:9d:1b:ea:ec:0d:6b:0b:78:86:
bc:ac:96:4c:fa:d1:9c:7f:df:4a:16:cf:53:af:56:
f4:b8:18:b3:b1:4e:9e:5d:07:6e:1d:86:ce:bb:aa:
f2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CA:1A:DE:3A:F4:88:A0:D6:BF:27:AF:C7:4A:2C:E8:29:27:7C:8A
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:be:17:a7:56:33:f1:8c:49:3d:ff:ed:19:29:25:4f:22:b6:
97:bf:d8:01:b9:f3:82:7f:54:93:17:3f:e2:7f:1d:a4:3d:2d:
23:4d:1a:d8:9d:6d:8a:75:f0:1a:cf:d0:b0:f4:48:82:86:a3:
7d:9f:3b:9f:3a:d9:f4:91:cb:af:e4:a0:5d:b7:43:8b:0e:ad:
a6:aa:0f:2a:7b:43:95:2a:4f:6b:3a:d7:21:fd:02:ef:1e:90:
a3:f1:5e:c4:03:7b:0c:83:8c:72:51:35:15:e5:bd:2e:1e:df:
67:5d:4c:ba:8d:e7:20:88:61:37:82:d7:fd:74:0d:97:76:f7:
40:6b:81:b1:1e:2c:c8:f8:b1:1d:15:e0:58:af:c5:5a:44:3b:
94:c1:a8:09:de:4e:c1:fc:bf:1e:30:e9:20:48:e1:eb:27:a3:
51:5c:b1:9f:63:ab:4a:1f:9c:21:3b:80:7a:a8:2f:f7:b6:b7:
0a:e3:88:e7:f5:a5:19:39:90:c6:f0:6b:e7:33:05:43:9e:84:
4c:ff:3b:ff:16:8f:b9:c6:49:11:ec:dc:03:d4:07:5f:65:32:
1d:0e:6f:f2:68:93:dc:5b:3e:de:08:39:97:c2:9e:7e:7a:0e:
fa:ea:79:1e:78:42:ba:b6:7d:d5:71:c5:2f:aa:11:ca:95:8f:
36:05:b3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:39 2025 by rpki-client