Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json)
Hash identifier: /X99/3kVbOnWB3q6OrCOyVpizUZP9c2OQ4kiNSg9Qzg=
Subject key identifier: 88:38:2B:D9:A7:23:54:CE:F9:7D:33:40:2D:90:B5:E2:64:C5:E9:B3
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial: 01963EE6CDC3856918DA343D131DAFAAD22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
Manifest number: 14F3
Signing time: Wed 16 Apr 2025 14:00:35 +0000
Manifest this update: Wed 16 Apr 2025 14:00:35 +0000
Manifest next update: Thu 17 Apr 2025 14:00:35 +0000
Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: s27bTTStBYBVJUrLj3kbyEpOHLhUFOVLroSariaBXMo=)
2: xnuUEnVXaSzz9cF5USCrsyD97so.roa (hash: j10VBwI4MUaDD8l8nXJ3vdwJpNrClSEXJCQ84BCSTro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:cd:c3:85:69:18:da:34:3d:13:1d:af:aa:d2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Validity
Not Before: Apr 16 14:00:35 2025 GMT
Not After : Apr 17 14:00:35 2025 GMT
Subject: CN=88382bd9a72354cef97d33402d90b5e264c5e9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:7c:15:bf:7b:10:71:63:0b:db:5c:12:82:
5f:b5:cd:3a:47:0d:79:02:8a:fe:32:eb:0b:52:a5:
0e:cb:83:8d:2c:db:d3:fd:72:6f:1f:0a:fb:4a:7d:
9a:5c:28:73:5d:a1:ac:87:e6:8d:1b:ca:57:12:43:
2d:95:56:bc:bf:ea:91:b9:c8:2e:3d:77:ca:09:85:
c8:cc:a3:d1:88:e9:eb:fe:a8:7b:14:0f:34:86:a2:
b3:19:e1:fd:10:78:ce:85:02:ce:82:aa:99:b3:6b:
79:3a:a9:f4:dd:17:fb:4c:ec:f9:13:78:44:7d:44:
27:19:67:06:18:78:e0:5b:90:54:58:ea:d2:6b:38:
91:bb:b2:ff:be:7f:4f:00:45:38:74:c1:ab:e8:5f:
8a:2e:2b:3b:4c:82:7f:55:43:8f:6e:f0:7b:ca:13:
ff:aa:73:26:2d:3e:bc:a8:1e:13:8d:fd:7d:77:f1:
db:77:6b:18:90:bb:99:77:d2:56:b2:5f:d8:62:ea:
66:3e:34:2c:90:19:27:73:eb:8c:a4:9f:c1:bf:96:
7d:76:cb:a9:d1:b5:1e:26:40:92:d1:73:9a:35:eb:
38:63:c3:5c:f1:9b:ba:8c:9a:d1:c7:d3:2c:f5:1c:
37:68:23:15:ec:96:30:51:92:27:b4:28:e4:9e:71:
b7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:38:2B:D9:A7:23:54:CE:F9:7D:33:40:2D:90:B5:E2:64:C5:E9:B3
X509v3 Authority Key Identifier:
keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:25:cc:08:56:2a:ac:50:0d:c5:b4:89:17:84:a3:9b:b9:4f:
a3:94:e3:c9:21:8f:1a:54:2a:dc:c6:cf:4b:52:a3:d7:56:59:
61:4b:0b:79:df:cb:12:f1:eb:f5:ff:96:58:83:b7:89:ed:73:
d1:83:13:c5:e7:1c:6f:55:45:11:0a:12:89:93:29:d5:10:e8:
3b:2f:75:ad:8e:18:e1:b0:26:ce:bd:16:9e:63:a2:58:e2:7a:
8e:30:e4:41:58:20:07:54:2c:08:85:3f:2e:cf:d2:0f:b9:02:
a6:88:20:57:40:34:06:b6:3a:68:c0:53:b6:2d:79:60:5d:32:
8a:67:9f:be:e5:47:55:fd:60:bc:b9:1a:1a:06:ba:94:11:30:
f4:0e:ad:c9:ac:4e:f6:92:e3:1a:4f:c9:71:be:e7:31:eb:f0:
a1:1f:92:d0:c6:75:6c:90:19:9d:88:54:b7:df:ac:4b:78:07:
53:1f:54:84:8d:0f:38:4c:47:2d:21:96:bf:d5:7b:81:26:fd:
53:eb:d9:a5:9e:90:a0:1e:99:08:b0:6b:d1:d0:de:db:89:8c:
d0:b9:37:43:9d:41:26:fd:51:e7:83:6e:85:07:84:a7:7c:ba:
70:ca:dd:1f:1f:48:a2:48:0a:c9:e6:1b:cf:b4:b1:30:67:99:
3f:88:68:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:58:36 2025 by rpki-client