Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json)
Hash identifier: mSBx6wq3VhPWcTlNazOgzk/QgLrvsZGBoYC0QZ0LEZ0=
Subject key identifier: 7A:20:FA:C1:70:61:4C:AF:83:22:1D:59:31:D5:B8:37:B0:2C:46:47
Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Certificate serial: 01963EAFDDFC352154E1F82C0636A5777917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
Manifest number: 14F3
Signing time: Wed 16 Apr 2025 13:00:35 +0000
Manifest this update: Wed 16 Apr 2025 13:00:35 +0000
Manifest next update: Thu 17 Apr 2025 13:00:35 +0000
Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: trsjAIANKp5s3APKQQDqDxysn002p5vVR/sEooejiz4=)
2: mWwPnP2S4g9JhxWYKKryZjEy1Ao.roa (hash: HyXUe+PYjqIKyOZOZZRdFXR1ckNBvzFOngXjiDgbrBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:af:dd:fc:35:21:54:e1:f8:2c:06:36:a5:77:79:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Validity
Not Before: Apr 16 13:00:35 2025 GMT
Not After : Apr 17 13:00:35 2025 GMT
Subject: CN=7a20fac170614caf83221d5931d5b837b02c4647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:3b:32:a2:e6:54:ae:9d:90:79:9c:ec:ab:
51:e9:8b:09:a3:c0:ad:73:89:73:ee:9a:f0:2c:02:
dd:d0:1f:59:2d:0f:ec:4e:8d:48:1e:b4:39:83:a8:
13:d5:2a:c8:7b:4b:a6:09:bf:dc:74:a5:93:c3:96:
1b:c6:0b:df:8e:20:ed:01:ce:71:c3:24:1c:45:f5:
94:dc:b4:dd:fc:a5:c0:2e:e6:79:14:31:84:2a:8f:
23:b9:fa:25:bd:13:0b:d0:72:3f:08:81:89:9f:44:
6e:65:40:d6:24:c1:1a:08:be:be:f2:bc:bf:f5:f3:
cb:6f:f8:8b:d8:7a:a8:cd:9c:52:6a:27:a8:5b:54:
6f:59:3c:0b:03:99:71:52:fc:8a:fa:e3:8e:16:2b:
ba:76:d7:a8:c5:a6:c2:3e:8e:97:f8:ca:89:7e:80:
92:d2:2f:33:e6:0b:44:97:a2:26:6b:b9:83:cc:45:
ab:31:13:27:ae:46:51:6a:3b:db:3d:b7:28:21:f9:
02:b9:cb:dc:ba:a6:f8:48:a7:6a:84:37:3b:ad:b3:
07:56:f8:5e:00:6a:f7:5c:07:03:2a:9e:e5:dd:ce:
30:66:db:21:c4:56:e0:61:a0:d9:ed:75:29:80:7b:
a0:81:1e:8e:57:02:91:c8:d6:37:6f:f6:91:e3:ab:
6c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:20:FA:C1:70:61:4C:AF:83:22:1D:59:31:D5:B8:37:B0:2C:46:47
X509v3 Authority Key Identifier:
keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2e:16:de:04:65:19:43:8c:d3:9e:f1:bc:2a:e5:2e:e4:fe:
62:6e:d5:de:53:a7:8c:1e:92:21:18:b7:ea:bc:5a:68:9b:10:
46:76:51:67:37:a9:a6:31:05:dd:e1:5b:7a:20:27:41:5c:49:
c9:30:21:3b:67:c3:25:ff:cc:ad:d0:b3:eb:1a:d2:a5:63:e3:
e4:4d:3d:0c:5e:f9:cc:0d:40:b9:0d:49:9e:14:34:e0:a5:20:
29:50:c7:2a:d9:0f:88:66:b0:83:a8:b3:7f:36:5a:86:6f:e0:
80:8a:31:2a:fb:76:db:7e:91:19:c3:0d:b6:f2:c0:28:4c:21:
9e:49:01:c5:32:28:06:7a:d1:b6:03:3d:79:6e:6c:d2:ed:79:
41:71:94:99:33:f0:41:c3:7c:79:93:42:c5:d7:32:7e:d5:74:
8c:73:d1:c5:a9:c9:a2:ae:c9:98:2d:cb:9d:68:22:b5:62:e4:
fa:b1:38:57:f4:94:ea:21:03:05:c4:9b:74:dd:2e:86:6f:ee:
17:fe:12:6a:09:40:82:1b:b4:37:88:74:4a:4a:76:e0:e2:63:
35:40:76:62:87:7d:43:07:0b:fd:64:86:0e:91:bc:3b:38:9d:
d6:0c:0e:f8:cf:9b:05:cb:ac:ae:c5:60:68:53:83:cc:26:f5:
c2:9d:3d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:19:03 2025 by rpki-client