Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
File: cimwOc-KrxQdbm1hbnwWkInLyzI.mft (raw, json)
Hash identifier: am17/ctrufOFP4H9cqABo+JhHSqtAn8+5o9nwwPnaD8=
Subject key identifier: 42:9A:CE:FA:B2:BA:DC:6C:0E:08:78:E7:46:0C:21:8B:30:D7:7F:5F
Authority key identifier: 72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
Certificate issuer: /CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Certificate serial: 019650119FDA4D869E7A20C76C0D080B6992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
Manifest number: 0C38
Signing time: Sat 19 Apr 2025 22:00:54 +0000
Manifest this update: Sat 19 Apr 2025 22:00:54 +0000
Manifest next update: Sun 20 Apr 2025 22:00:54 +0000
Files and hashes: 1: _11c4KnryngFBZ3LrSwCjXVWAnI.roa (hash: 4suX3JVW+dbra41XqoLSgaNnHC7+X6k6GS1R8JLgxL8=)
2: cimwOc-KrxQdbm1hbnwWkInLyzI.crl (hash: YlZKm+aZs3BtiALBdUAou8QPANex+YEYe+gZAmqtvw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:9f:da:4d:86:9e:7a:20:c7:6c:0d:08:0b:69:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Validity
Not Before: Apr 19 22:00:54 2025 GMT
Not After : Apr 20 22:00:54 2025 GMT
Subject: CN=429acefab2badc6c0e0878e7460c218b30d77f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:3a:60:34:49:86:2d:01:a4:39:1c:b2:18:
ad:a5:3b:50:57:59:3a:a9:3a:5b:50:8e:3a:9d:17:
e1:e5:dc:09:90:9f:12:b3:99:92:0a:6d:92:31:b7:
08:76:02:cb:c8:0f:1e:30:12:43:86:d0:57:3d:0b:
58:74:96:83:8e:17:21:dc:bf:0d:e6:f6:55:e9:84:
17:8b:6e:b6:b5:ea:a3:c2:c9:84:fe:dd:b6:ef:ae:
8b:00:b9:af:63:7a:20:37:b0:17:5d:4d:b1:d1:34:
56:0d:56:1d:81:09:51:21:c6:8a:b5:55:2a:93:77:
72:4a:0f:f6:00:af:c8:57:72:70:5f:a8:80:d4:5d:
12:d9:a0:ee:01:1a:cc:d3:81:da:f1:05:e8:2e:5b:
cb:ca:b2:dc:ec:45:6f:68:24:d4:32:a5:ae:5b:c4:
6a:f5:08:f8:21:06:55:74:e3:2d:a9:d1:8f:c3:4c:
de:a0:94:4d:2f:5a:fd:d8:fe:49:34:65:3b:3c:68:
91:5c:e1:08:bc:82:53:89:0d:c0:d6:11:51:a0:6f:
7c:f6:1b:1a:80:7a:8b:78:f2:b8:66:eb:d6:4a:56:
0e:a1:79:40:7d:ad:25:2f:81:90:4f:01:a5:a7:b6:
67:f2:d8:a0:67:61:d6:72:ad:ca:1d:12:a4:92:77:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9A:CE:FA:B2:BA:DC:6C:0E:08:78:E7:46:0C:21:8B:30:D7:7F:5F
X509v3 Authority Key Identifier:
keyid:72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:50:26:39:27:fc:e2:bc:21:ca:90:15:29:f7:f7:72:f4:d2:
eb:dd:05:ac:9d:94:2c:91:aa:8e:ef:35:75:4c:59:83:1f:f2:
40:f0:c8:9a:a7:bd:98:2d:19:bc:30:26:1b:53:b8:fa:58:94:
5a:3d:25:ea:bc:03:80:81:74:b8:33:dc:db:42:e1:0c:5e:2d:
af:71:cd:88:09:0c:e9:ca:5c:cd:ca:1a:45:86:2b:75:48:52:
5b:8f:74:5a:e7:7e:4c:23:32:ae:40:24:e2:e5:e0:e3:d9:27:
22:c4:08:43:39:65:61:45:d7:31:f7:1f:76:60:24:2c:ba:2e:
c5:7c:83:eb:2d:2a:9c:33:a6:55:69:e4:d6:15:ee:92:fe:e1:
ee:1e:4b:cb:15:16:e3:7b:70:fb:d5:46:ce:10:e8:f7:0c:0a:
9f:ca:02:59:82:89:4d:a4:b9:ab:5a:b0:9b:9f:67:36:01:ee:
5e:07:a8:72:b9:a1:8e:0e:95:01:eb:09:08:5d:c3:43:6d:69:
c7:b5:d8:e4:8d:46:a1:38:76:01:91:52:52:46:8d:9c:ce:fc:
48:ba:c2:06:d9:68:0b:5f:79:ea:32:45:39:be:84:de:86:6c:
58:64:7e:0d:b6:99:dd:07:af:b5:bd:63:b2:f7:a5:07:e4:1d:
fc:6d:b7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:19 2025 by rpki-client