Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: 8N368DQotKGVcxj3aA27athHKVi28dbErWKOCudZiKk=
Subject key identifier: CC:DE:84:02:8A:16:BE:91:2F:40:21:54:46:40:39:E8:7A:F6:4F:08
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 019654257186F5B62E4D286148ED2459EAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0913
Signing time: Sun 20 Apr 2025 17:01:02 +0000
Manifest this update: Sun 20 Apr 2025 17:01:02 +0000
Manifest next update: Mon 21 Apr 2025 17:01:02 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: FAb6ESJFmlJ7OtCQsMEe6LnsXHawRbAd331m4gAfVq0=)
2: Khmhefi6kwckslHGfWvU_2oMALk.roa (hash: GCH2SF4oCWT5irU/tNDWYDBbGKrkiI0SguGZAk1/bwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:71:86:f5:b6:2e:4d:28:61:48:ed:24:59:ea:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Apr 20 17:01:02 2025 GMT
Not After : Apr 21 17:01:02 2025 GMT
Subject: CN=ccde84028a16be912f402154464039e87af64f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:c1:02:d4:1f:92:34:49:a1:0e:7d:c0:8e:
f9:32:b2:7d:20:3d:5d:fc:fd:dc:59:ea:f7:ce:29:
38:86:f4:b4:5c:47:f9:69:c3:cd:e3:ac:ab:f4:2e:
14:b9:75:9b:fc:2c:c1:05:8c:52:14:70:32:29:64:
5a:4b:3b:98:7d:a5:33:8e:6c:f3:54:02:84:22:8d:
71:95:1d:98:b0:37:b6:17:25:c1:e4:0e:11:3f:90:
c6:e8:ce:68:8d:77:18:af:bd:27:05:4f:45:c3:9a:
b0:e0:ee:71:1d:a2:b9:74:10:46:64:a0:8a:fb:14:
d9:65:5c:0f:91:d3:d0:dd:b5:9b:20:94:b1:18:7d:
42:30:90:a4:8d:ee:54:0b:bd:99:e3:64:06:b9:7a:
d5:f4:55:cd:f0:b3:ba:98:8f:6f:1e:69:27:27:04:
17:c3:17:f1:49:d8:89:79:3b:c4:e2:e2:66:e4:96:
d0:9a:37:00:bf:9b:c4:a6:eb:d2:74:54:68:ea:70:
57:fc:0c:44:32:a2:8a:32:2c:3c:d3:cc:a6:fc:ef:
8c:cb:03:db:27:eb:99:0f:f2:77:f8:cb:23:e3:33:
46:55:8a:b9:6d:75:85:f7:6a:2c:62:fd:24:e1:45:
83:2a:60:86:64:0f:f9:e2:2f:77:44:18:6b:38:83:
f7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DE:84:02:8A:16:BE:91:2F:40:21:54:46:40:39:E8:7A:F6:4F:08
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:11:1e:49:69:9f:f4:a8:ad:a7:13:2b:65:53:bd:12:08:50:
1f:52:d0:3f:8e:8c:78:48:69:76:e6:0c:03:06:21:e2:91:68:
68:6c:34:ae:c2:85:cf:59:ab:b4:85:7e:c0:7a:67:1c:0e:88:
18:2a:e9:50:e7:db:25:a2:80:d5:86:00:6b:d3:da:49:f0:44:
09:fc:21:12:3b:9c:04:96:d6:54:37:4b:59:c8:73:a0:74:f5:
da:c9:8e:c4:a8:cb:2d:9b:6f:d7:27:8a:16:6c:80:b1:86:a9:
c8:d6:e3:2e:f4:41:96:1a:de:54:02:97:e8:76:fb:7c:33:c6:
54:64:ab:86:e7:6c:3c:c3:e1:d3:8e:f2:d7:38:80:2f:6e:1d:
74:a6:db:c9:c7:24:b5:7d:75:23:e2:da:2e:b3:ff:31:8d:f0:
97:ad:04:a2:60:74:be:83:66:5b:e2:46:c1:1b:62:37:9a:c9:
7a:57:1b:f4:34:1f:19:e7:9e:ea:e5:42:c2:34:84:98:09:25:
3e:44:cb:3d:41:29:d5:50:b3:43:b4:9f:a3:08:ba:2e:f5:da:
15:a1:25:2e:de:69:5e:78:85:6a:17:af:ae:4e:d8:d3:d1:aa:
1f:59:0e:cf:59:cf:65:d3:94:18:f1:0e:d6:9c:11:24:d8:90:
50:87:dd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:39 2025 by rpki-client