Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: VO8qMvzDDgA3lzit7eIpA4g8HkKgXoVcCH8T1IZepGo=
Subject key identifier: EB:F7:83:22:18:95:34:35:2D:D9:85:0D:77:14:49:B5:63:61:9A:21
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 0196515BEC70F023D1264D1D6D560AF9B530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 0939
Signing time: Sun 20 Apr 2025 04:01:40 +0000
Manifest this update: Sun 20 Apr 2025 04:01:40 +0000
Manifest next update: Mon 21 Apr 2025 04:01:40 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: 5arjxaDRUvSwNaIQmzMAT3qgpOtv1rJLTk4X4tNcuoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:ec:70:f0:23:d1:26:4d:1d:6d:56:0a:f9:b5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: Apr 20 04:01:40 2025 GMT
Not After : Apr 21 04:01:40 2025 GMT
Subject: CN=ebf78322189534352dd9850d771449b563619a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:5f:0c:4f:ee:9a:59:b4:c7:88:2f:4f:84:
d1:95:cf:96:f5:69:ee:06:81:db:d5:a6:a5:b4:fc:
d3:57:d8:70:e3:69:39:a6:46:2c:17:10:95:bf:05:
ae:eb:fe:0c:67:8d:0d:a0:3a:42:51:93:3c:27:90:
be:70:7f:5a:24:d7:8f:66:68:20:02:55:be:14:9a:
7f:0b:20:1a:76:87:1f:f5:94:9a:ba:b7:06:6d:34:
d7:66:d9:a7:22:6e:cd:52:75:07:f9:4f:2d:2c:fe:
aa:43:59:53:78:81:9b:02:97:12:ea:7d:84:d5:4a:
da:b8:fa:26:60:64:8a:52:b8:4e:61:0a:c0:b7:0c:
6a:d0:f7:c6:c4:6e:5c:41:9d:40:f8:36:6a:c7:13:
1b:33:b4:87:2d:17:ea:e4:8b:bc:7d:17:aa:bd:61:
51:90:9e:4f:e9:39:f9:0e:8c:e7:07:e5:b5:cd:64:
54:9b:a4:9e:df:a4:5a:a8:02:5a:72:49:cd:ba:de:
6f:b0:e6:82:04:ab:79:1b:84:a4:92:d3:29:5f:16:
c3:66:be:33:87:ae:6a:93:4a:f2:c7:b2:19:e2:68:
84:5e:25:01:b1:b1:79:d1:ca:6b:37:a4:76:33:9f:
22:8d:1c:e5:51:93:1a:1b:62:48:35:34:e1:87:3a:
3d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F7:83:22:18:95:34:35:2D:D9:85:0D:77:14:49:B5:63:61:9A:21
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d5:b0:c4:9f:64:7f:56:3d:33:89:7b:ef:5e:af:de:53:36:
20:d2:00:2f:5d:9d:85:60:6f:43:84:56:0d:83:0e:1a:58:08:
60:ec:f7:ad:d6:e5:24:57:dd:fb:22:af:00:d9:ff:cc:c9:c9:
d8:b2:14:61:38:79:f2:21:81:29:79:02:de:19:28:19:b6:15:
de:76:2e:8c:15:7b:e8:91:50:5e:b8:12:72:ab:7a:c7:a2:1c:
fa:b6:19:38:6e:42:9c:6f:71:ec:5b:55:b1:bb:aa:d4:7d:35:
2d:c8:56:35:23:53:a8:a9:63:60:22:8c:54:99:8b:78:5d:ea:
bf:e8:2b:97:bb:d9:2e:51:68:19:ef:01:3a:04:6a:08:51:ce:
73:96:8d:ac:43:24:4b:bd:c2:ca:4c:4c:5e:37:73:70:4b:5b:
3c:ef:e9:b3:69:98:dc:57:76:9d:72:35:b6:e5:76:01:02:52:
f4:b8:fd:cb:4a:a8:98:74:07:2f:e5:13:11:bb:11:4b:93:7f:
93:12:ac:0d:66:4f:64:7a:e3:6a:6b:4e:b0:e3:ba:7f:8d:7e:
b3:06:ec:bd:f0:50:ed:ce:9a:95:23:3c:18:bb:01:91:99:c4:
bf:0f:85:18:02:0d:14:53:c8:02:66:0b:66:61:21:aa:f8:12:
fb:7f:42:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:14:55 2025 by rpki-client