Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: GzEqILL8mPMtFZdSrmcLRyOruERmi1esw0zW0QPIxd8=
Subject key identifier: 36:B6:AC:BC:FB:CD:4E:8E:D7:E4:1A:40:C3:60:7E:65:86:11:13:5C
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 019643D6146424BE49ED85DCB852D7D741DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 0909
Signing time: Thu 17 Apr 2025 13:00:25 +0000
Manifest this update: Thu 17 Apr 2025 13:00:25 +0000
Manifest next update: Fri 18 Apr 2025 13:00:25 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: dUyly/tYs2jPR47eSty83+mUFJbKjQ1SdQ0vWCn4rl0=)
2: RymBY7lnNBMXp_yUGm6cXmk9pIY.roa (hash: NXhw0vi4/QtrtywYV0kwabkAShMb2W3sLGUUgAEfvq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:14:64:24:be:49:ed:85:dc:b8:52:d7:d7:41:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Apr 17 13:00:25 2025 GMT
Not After : Apr 18 13:00:25 2025 GMT
Subject: CN=36b6acbcfbcd4e8ed7e41a40c3607e658611135c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6c:7c:55:8c:4d:c5:29:3f:e7:93:90:69:d1:
ec:3f:02:99:37:ea:27:e5:c2:ba:06:5f:b1:f8:d6:
7c:4c:be:5d:78:26:dd:1a:99:a2:9f:05:69:60:34:
1e:2d:e2:5b:75:4a:63:20:69:d5:75:06:14:d8:c6:
e1:bb:52:ff:db:cc:df:75:1e:9e:66:ba:36:a3:6f:
58:1e:88:aa:0f:b4:01:c0:d8:1a:a9:15:bd:c7:48:
01:ea:42:15:53:b1:3a:63:99:72:27:7c:0d:22:fa:
d6:01:e3:62:1e:bf:f8:8f:8b:cc:cd:0c:86:df:82:
e9:11:48:36:57:86:56:97:50:b5:c7:cf:ea:94:1b:
a9:29:c5:11:24:f7:02:9c:70:93:49:c1:fb:0b:94:
8a:74:c0:b6:0d:58:b7:79:d4:f7:95:4f:13:23:b5:
5a:25:a0:da:37:67:29:64:b6:d5:84:c8:6f:45:a4:
40:7a:36:3b:2c:ef:8f:1d:6a:25:bc:00:64:6c:54:
e5:9d:0d:29:63:d7:63:f2:c1:03:86:78:c9:75:24:
95:6c:f9:3c:97:b0:94:d0:2e:9a:1f:0e:d7:b7:cd:
2a:07:83:5e:b6:05:aa:bc:bf:ed:66:74:26:be:5a:
c9:8f:4b:03:86:56:5f:60:da:77:1a:57:27:82:31:
d7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B6:AC:BC:FB:CD:4E:8E:D7:E4:1A:40:C3:60:7E:65:86:11:13:5C
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:32:11:87:ab:e9:c3:4b:fc:56:92:43:3a:54:b4:fa:32:a9:
5c:7e:17:56:e7:ff:01:6d:a8:13:c8:62:39:75:94:80:fb:05:
0f:64:7b:d3:80:a6:28:9d:2f:39:36:2b:e9:f6:d2:8f:a6:d7:
3b:29:b3:36:0a:dc:4c:24:16:bd:6a:6c:33:94:d0:eb:6d:15:
ab:7e:70:3d:57:25:8b:d7:ee:b1:0d:fe:75:92:cd:b3:c5:be:
5e:8f:57:3a:a9:31:d1:33:85:b9:3e:fd:63:e5:e9:4a:fd:b7:
38:03:59:c2:8a:98:cc:86:e5:0a:18:53:34:ea:05:6d:89:62:
41:3d:71:f5:ec:b2:a5:96:21:78:61:75:7d:b5:01:53:7c:57:
fd:99:ae:5e:32:99:0f:39:0b:8a:aa:3c:f3:73:2d:6f:dd:63:
83:6d:f4:f7:45:84:21:1d:1a:ca:6b:cd:1a:87:ed:9a:79:29:
55:ae:4e:7a:9a:1d:84:cf:89:47:c5:eb:1f:3f:1c:33:85:2c:
6e:ad:1a:ec:93:5d:11:14:4c:4a:9a:76:b7:2f:ef:9f:8e:02:
13:71:b3:c1:04:4e:e2:b9:16:61:3b:d5:d4:fa:e0:a7:41:5c:
92:18:5d:c3:f4:9b:8e:da:7d:65:1b:1c:88:0f:ae:6a:a8:83:
7e:7e:c8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:33:09 2025 by rpki-client