Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
File: CDMy0vYHhPErstIQrsgKtBu_EVk.mft (raw, json)
Hash identifier: 1Dun/72ZwGV3ngqePmb6RxO2W5gBjUMrmReoyAUNaic=
Subject key identifier: C2:79:76:DE:15:10:CA:56:E1:57:A3:FB:5C:70:9A:B6:2C:20:CE:E3
Authority key identifier: 08:33:32:D2:F6:07:84:F1:2B:B2:D2:10:AE:C8:0A:B4:1B:BF:11:59
Certificate issuer: /CN=083332d2f60784f12bb2d210aec80ab41bbf1159
Certificate serial: 01964BFDFAE415D86929AF7F830DC7E0DB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDMy0vYHhPErstIQrsgKtBu_EVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
Manifest number: 0CED
Signing time: Sat 19 Apr 2025 03:00:58 +0000
Manifest this update: Sat 19 Apr 2025 03:00:58 +0000
Manifest next update: Sun 20 Apr 2025 03:00:58 +0000
Files and hashes: 1: CDMy0vYHhPErstIQrsgKtBu_EVk.crl (hash: v7oLqllciGObHQPwrxhNYDdc+kwkGk73S9NzqzxHux0=)
2: q4mxRw2cAHFj9M7Ih5d-g_-dD-s.roa (hash: 8Y6K+beCDjCkbb41/Xu0GZqKC19CcyaH+HxETt6eMGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDMy0vYHhPErstIQrsgKtBu_EVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:fa:e4:15:d8:69:29:af:7f:83:0d:c7:e0:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083332d2f60784f12bb2d210aec80ab41bbf1159
Validity
Not Before: Apr 19 03:00:58 2025 GMT
Not After : Apr 20 03:00:58 2025 GMT
Subject: CN=c27976de1510ca56e157a3fb5c709ab62c20cee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:ff:63:18:99:c4:e5:b9:66:92:1b:8c:8c:
ac:6d:1f:66:b5:19:16:81:05:1f:c9:8c:88:9c:6f:
ed:8d:91:d4:46:e2:7d:d4:6a:eb:26:c9:66:15:57:
55:d2:7c:04:09:3f:91:06:95:95:20:6b:46:36:5b:
27:f2:93:97:74:60:91:e2:2a:54:5c:ac:d2:be:12:
e4:d9:7a:2f:13:d1:f0:de:e4:f4:14:c4:68:33:01:
d1:cd:ca:99:6f:13:0b:24:78:a9:75:a8:e8:f0:8b:
21:04:95:a5:32:0b:46:8c:b1:2c:da:88:de:d4:de:
f4:5b:12:df:fd:44:6e:99:f9:30:09:24:6f:b7:ae:
ad:1f:02:5b:2b:be:84:33:95:d7:89:d2:8b:de:9a:
74:74:93:0f:57:63:9a:4c:ea:f6:b1:64:1d:7b:a8:
d3:4f:c1:52:78:38:39:dd:a2:97:70:65:18:1d:49:
51:59:6a:ac:c6:ce:73:88:d7:a3:de:76:c4:39:3d:
ab:a4:2b:91:8a:df:54:81:a5:29:ee:ba:3b:ea:8c:
ff:72:f8:6e:a1:af:97:73:05:6c:75:39:fa:53:62:
7a:3d:11:cc:58:f7:fc:8b:f4:6b:2c:07:5a:05:e5:
ba:71:4d:62:e4:6c:10:e6:4e:96:67:b5:70:02:dd:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:79:76:DE:15:10:CA:56:E1:57:A3:FB:5C:70:9A:B6:2C:20:CE:E3
X509v3 Authority Key Identifier:
keyid:08:33:32:D2:F6:07:84:F1:2B:B2:D2:10:AE:C8:0A:B4:1B:BF:11:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDMy0vYHhPErstIQrsgKtBu_EVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a3:7d:fa:00:d3:84:3d:55:8c:41:5e:de:03:8c:f9:2c:ad:
ea:fd:3a:95:7f:9e:55:3e:97:89:21:58:5d:4f:96:f4:de:82:
40:39:8b:33:20:c5:8e:60:58:64:57:c5:ca:49:91:35:62:40:
cd:44:13:de:c7:57:db:99:e5:bc:3d:3f:9e:86:c0:30:06:35:
e9:a1:b5:65:62:59:42:c1:68:cc:9d:d0:b9:4b:d3:84:85:0b:
92:7b:0a:ad:6b:61:f6:c1:4e:f8:61:87:00:64:8a:ca:e3:e5:
31:69:96:ab:a0:6c:e6:d4:57:81:01:eb:9c:b6:93:19:86:45:
82:8a:df:ca:08:bd:96:b1:f5:a3:6b:5b:ab:c9:4f:4c:80:ac:
13:bf:83:fd:82:cf:14:1e:8d:42:e5:66:bc:a8:bc:b1:60:5b:
1d:5a:30:b2:e8:11:a6:f0:66:35:f6:27:5f:8b:57:c9:60:8e:
d1:56:03:02:20:9b:5d:ec:68:22:6f:34:09:c2:bf:d2:7a:1a:
b1:dd:47:2e:3e:ae:8c:06:84:4f:dd:83:5d:42:38:90:28:07:
39:a3:3d:0b:6b:4f:3e:11:86:a7:ba:2e:34:c9:21:0f:c8:2f:
da:84:5b:67:6a:29:2d:a6:98:37:1b:04:82:50:60:aa:f0:5e:
fa:b1:a1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:43:23 2025 by rpki-client