Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
File: CccUYOpB0-ZWXEtBCybJ54zhb58.mft (raw, json)
Hash identifier: M/J2gy/J/8lPzHn6GKnixBXHvqBBoUSvkRSGKzOhjWg=
Subject key identifier: 9D:51:B7:EB:71:7A:2F:90:A3:D9:4A:82:D1:0F:DF:97:EC:C7:B0:92
Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
Certificate issuer: /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Certificate serial: 0196379B74D3A49F7B817FD28584AFED35D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
Manifest number: 147F
Signing time: Tue 15 Apr 2025 04:00:56 +0000
Manifest this update: Tue 15 Apr 2025 04:00:56 +0000
Manifest next update: Wed 16 Apr 2025 04:00:56 +0000
Files and hashes: 1: 61-G3WXkR-SwbN4v7xZM_7MiENo.roa (hash: dPwb3l0zAU2N1RIH5n+vuaC+VR/dScikzlcMxqnd6Lg=)
2: CccUYOpB0-ZWXEtBCybJ54zhb58.crl (hash: 2hXSET/aBhOq1vJ8X20aer7fxKx6mQ11t76EuNBaKDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:9b:74:d3:a4:9f:7b:81:7f:d2:85:84:af:ed:35:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Validity
Not Before: Apr 15 04:00:56 2025 GMT
Not After : Apr 16 04:00:56 2025 GMT
Subject: CN=9d51b7eb717a2f90a3d94a82d10fdf97ecc7b092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f2:87:46:83:7e:ac:7c:35:ae:f0:e3:46:c9:
74:ee:c7:c5:a4:01:a5:82:d9:28:bf:c3:6d:3d:f5:
c0:5c:81:ad:e6:c5:fe:90:fd:e2:8d:ef:b3:86:1a:
b9:63:b4:61:71:0b:c4:e6:70:c7:5e:a3:d6:3d:34:
0e:c8:a0:ea:06:77:4c:65:d5:08:c9:06:59:d7:0f:
1d:eb:86:1f:8c:ab:eb:ac:41:3f:bb:f9:40:dd:54:
d3:95:b8:d8:77:0a:53:de:4d:ca:95:8b:d5:11:d3:
5c:b0:04:6e:57:e0:17:24:0a:b2:ba:84:07:a5:1c:
eb:50:c0:4e:25:0b:95:7b:36:70:6c:04:85:44:fc:
b2:f2:72:d0:a4:f3:5e:7d:b2:0b:78:ed:9d:c1:6f:
4a:18:69:fe:a4:b0:37:5e:6c:be:c1:dd:ce:68:81:
c0:ad:9e:78:80:5a:f8:24:26:cf:8a:37:c5:32:0f:
3d:e2:86:db:bc:ed:51:63:4a:aa:73:eb:76:da:f0:
6c:da:9e:cc:83:3e:58:3f:4d:8a:78:f3:0e:94:12:
65:3c:c2:c1:44:05:e7:bb:3d:55:91:8b:42:d3:b2:
16:af:61:13:56:c4:d8:83:7f:0e:23:ee:9f:70:f7:
f3:ce:bc:8b:c3:c4:46:cc:b6:eb:d1:a5:df:4a:c1:
87:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:51:B7:EB:71:7A:2F:90:A3:D9:4A:82:D1:0F:DF:97:EC:C7:B0:92
X509v3 Authority Key Identifier:
keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:5f:c9:f6:fd:a4:71:2f:f2:ad:f6:56:eb:d7:9e:bb:8c:e0:
42:4a:f0:1a:b3:0f:26:b7:77:32:cb:13:ae:f6:c0:8b:ef:5b:
3c:2f:0d:30:1b:f5:a7:30:a4:d6:1b:d8:90:1a:51:e8:d0:19:
cc:a2:46:9b:d6:88:f2:05:e2:8f:3a:6b:e7:d5:74:fd:4e:0f:
66:d1:6a:4f:c2:2c:e6:48:54:21:b9:8c:80:ef:ea:95:b4:1f:
bc:c2:bb:0c:51:14:13:44:b6:b4:c3:c7:53:e5:7a:4b:be:60:
af:a2:cd:22:86:c7:78:eb:08:70:00:e0:8c:a2:e5:48:31:98:
8e:7b:74:67:0a:61:1e:92:92:1b:84:a1:54:1a:cf:dc:59:0f:
fb:75:7e:3c:52:2b:ef:1f:79:24:1c:e0:6e:b6:4f:01:f8:d9:
c8:a7:a7:68:ae:16:91:3e:1a:5b:4f:3f:d8:10:c0:48:d5:a8:
31:f9:5e:f0:21:07:82:1b:9f:ca:fc:6d:6e:7a:95:c9:a7:c5:
5a:d7:81:c3:b5:d1:9a:68:6b:8b:ef:e2:a5:44:6c:0f:a7:22:
56:01:86:39:fb:5d:43:21:7f:fc:c5:43:da:67:61:31:3b:62:
c8:7d:f7:75:54:28:35:af:e9:6e:73:9f:c5:71:e9:19:6a:b8:
6b:14:bd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:07:13 2025 by rpki-client