Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
File: cbbQ4ActDKspv6hzfeKlPlFBgnY.mft (raw, json)
Hash identifier: Y2wF3L3gkAg1fOTILZSiQCMdy72Pymj4khrcTuNGFGM=
Subject key identifier: 5C:7B:2F:88:3A:62:80:9E:97:24:01:95:2A:B5:06:4C:E1:65:F4:16
Authority key identifier: 71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
Certificate issuer: /CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Certificate serial: 019657946434A192FA5292B76DC72F72A019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
Manifest number: 0584
Signing time: Mon 21 Apr 2025 09:01:04 +0000
Manifest this update: Mon 21 Apr 2025 09:01:04 +0000
Manifest next update: Tue 22 Apr 2025 09:01:04 +0000
Files and hashes: 1: cbbQ4ActDKspv6hzfeKlPlFBgnY.crl (hash: C7MiMeBCDp0dYEQRYdICbKq1yfHc+pjFUkd3325Ecro=)
2: m3oyez4opl0YbbQ1CR2fl2aO7F8.roa (hash: FqYvVOjK/elvRD3q2xJweF4ZvocMCS6cmWVMXbFh3Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:64:34:a1:92:fa:52:92:b7:6d:c7:2f:72:a0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Validity
Not Before: Apr 21 09:01:04 2025 GMT
Not After : Apr 22 09:01:04 2025 GMT
Subject: CN=5c7b2f883a62809e972401952ab5064ce165f416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:f5:e2:8a:30:4c:e9:c5:ad:f4:a7:2b:1a:
31:9d:8c:63:91:4c:b2:a4:bc:47:79:3d:03:d6:78:
3c:8c:24:80:b9:ab:93:c6:ed:bd:75:e5:0e:d4:9d:
3f:5b:71:08:f6:af:a7:2b:f0:2c:07:c8:31:a2:0a:
be:73:9c:a6:94:d3:11:df:41:f4:70:a5:ac:92:f7:
89:ac:aa:51:84:a1:ea:6e:68:53:e5:d0:74:8e:36:
58:af:a2:70:5c:a5:9e:c8:54:54:1a:04:70:31:ff:
36:ba:e9:76:b0:2c:9e:7d:79:b8:54:53:79:0c:e2:
49:b3:82:4a:fe:e8:13:c0:46:7c:e1:29:f8:9a:e2:
ff:33:54:34:d8:1a:35:9b:ef:65:ee:cf:5f:14:86:
c4:67:fa:9e:28:2b:6b:2b:bb:6d:2d:27:c7:2a:ec:
77:bd:e7:39:5d:e5:25:88:bc:78:bc:35:59:2a:33:
8b:45:55:cd:a2:e6:dc:3b:e5:78:f1:80:4d:ff:03:
5d:3c:7f:40:a4:32:c4:0b:e4:a0:26:f0:48:11:44:
9c:53:53:29:72:d4:2d:4d:ad:57:7b:4a:b5:ec:3a:
d4:e3:28:4f:1e:29:67:fd:39:af:6b:42:50:32:d8:
21:25:f7:db:e2:f5:b5:2c:3a:e8:74:73:6d:c4:e3:
27:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7B:2F:88:3A:62:80:9E:97:24:01:95:2A:B5:06:4C:E1:65:F4:16
X509v3 Authority Key Identifier:
keyid:71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:35:c9:f3:2d:9b:96:f7:31:7e:eb:82:e7:92:be:09:64:ef:
8f:14:2a:d3:b6:12:58:a0:84:ce:3a:43:ba:37:1d:ab:8d:a0:
22:94:5a:96:a2:ac:c4:63:aa:18:1b:c1:f5:1f:08:77:f0:a8:
f4:da:13:50:25:7b:6f:56:6c:a1:1b:fd:0c:d8:89:68:75:b5:
ef:14:98:bb:90:65:a1:92:1e:d5:47:e2:52:0d:f5:7a:31:9b:
10:e3:d1:26:56:70:6c:ba:50:92:5b:78:60:0d:aa:78:fe:2b:
2e:68:72:43:9e:bc:43:dc:62:36:30:22:3f:da:73:97:5a:f6:
ae:ba:fe:c5:31:ab:09:77:84:04:0c:c5:66:82:c6:9d:ee:f7:
9b:04:4c:55:d8:d0:7e:9b:ff:cc:8c:72:81:c2:df:f1:84:ae:
cb:56:a0:d2:1b:41:a2:4b:09:90:63:ac:64:46:9f:98:d5:f0:
81:af:b9:b1:1f:04:99:b1:87:3d:c8:7b:08:e4:42:35:d1:3a:
31:68:9d:cb:a2:24:35:0e:f7:1c:38:a2:32:4b:1e:88:ff:e3:
00:a8:3a:69:bd:fe:6d:8e:f5:af:e6:16:e2:a4:bd:32:f2:29:
ea:5c:72:58:33:01:cd:03:11:b0:3d:13:ba:45:df:70:a0:f8:
b8:e3:bd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:19 2025 by rpki-client