Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
File: CTKC_j89fUa9Gxy3ey_sN97gBmM.mft (raw, json)
Hash identifier: QPF9Y5aEsVtw+/niMul6WFuqHKdBCI16aUcn1CdZ3IM=
Subject key identifier: 23:79:BC:1C:B3:E8:F9:96:4C:D2:1F:EC:B3:C3:52:6D:F2:8C:68:71
Authority key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
Certificate issuer: /CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Certificate serial: 019652DB1FF458D59DB6F980F28DB10EDACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
Manifest number: 0EF7
Signing time: Sun 20 Apr 2025 11:00:14 +0000
Manifest this update: Sun 20 Apr 2025 11:00:14 +0000
Manifest next update: Mon 21 Apr 2025 11:00:14 +0000
Files and hashes: 1: CTKC_j89fUa9Gxy3ey_sN97gBmM.crl (hash: HwErhVGUl+jpJySfStHATufJJO1z3aI2UDVA66hholM=)
2: p9dm9G2iCzsw8k2RDOLA-aoAnro.roa (hash: RaSFGXIJc/dpz2m+EsrfJ2ccZ5vMg1R8ZkPmnS2txJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:1f:f4:58:d5:9d:b6:f9:80:f2:8d:b1:0e:da:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Validity
Not Before: Apr 20 11:00:14 2025 GMT
Not After : Apr 21 11:00:14 2025 GMT
Subject: CN=2379bc1cb3e8f9964cd21fecb3c3526df28c6871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:4c:f3:02:57:e4:b9:a6:7f:5c:56:ce:e4:
4a:fe:d6:fc:82:00:d5:e1:a3:f5:75:98:a1:d3:13:
1d:44:1e:a7:51:3d:8a:38:e2:36:a8:6b:3f:13:66:
08:3b:88:71:e1:84:11:03:fb:81:b6:6d:d0:20:b9:
26:48:bb:00:d5:eb:e8:26:a7:bc:4b:cb:6a:bf:03:
8e:bc:1c:b5:69:0f:5a:d0:7e:be:c3:88:a9:fc:bd:
1e:cf:52:80:9e:d7:20:84:db:03:c2:90:3e:35:33:
d4:7e:28:b2:ca:2c:09:29:ab:b5:e6:3c:4b:bd:5a:
88:44:d1:62:7d:ad:e4:9b:f2:fb:b6:22:38:9c:b3:
45:1a:8a:04:54:69:1a:4d:1b:30:47:b1:86:5e:a5:
bd:01:3c:7b:d1:d1:9a:e0:49:4d:52:fe:66:88:2a:
03:6e:45:27:cb:43:01:b1:0e:04:70:c4:92:4d:e3:
73:99:a1:fb:75:f6:70:83:fc:5e:13:21:11:5d:ff:
09:64:30:3c:cc:84:39:98:9f:d7:a6:a6:0f:73:bd:
74:7d:d2:a2:2d:41:0d:d2:7a:cb:1f:6d:7f:6a:69:
bb:06:7d:65:04:bb:49:2d:9b:4f:d7:81:dd:f6:db:
44:9c:5a:2e:0a:23:71:64:82:5a:1b:53:51:eb:84:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:79:BC:1C:B3:E8:F9:96:4C:D2:1F:EC:B3:C3:52:6D:F2:8C:68:71
X509v3 Authority Key Identifier:
keyid:09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:04:7b:cd:1e:a1:1b:0e:65:37:cb:3f:bc:1c:21:a0:dc:9c:
02:de:58:48:f3:87:0f:2a:af:18:c0:1f:ea:53:b4:b5:ce:9c:
1b:d2:fa:27:49:c7:7f:09:7b:73:ef:09:b1:32:d4:e3:a0:f2:
47:a0:b8:1c:9a:3d:89:91:84:8f:f1:42:e0:04:bd:39:a4:b9:
d1:c4:41:1e:6a:d1:72:71:82:5b:5d:3d:d2:c9:da:41:e9:85:
c8:7c:b8:ac:68:52:b8:17:38:07:84:4b:56:12:22:d7:d9:f2:
fe:77:a3:a9:2c:14:bd:db:43:80:2a:83:44:8c:12:3d:98:60:
c0:94:a0:6e:f3:45:f5:a7:4d:19:49:d6:1f:a9:86:75:fb:7f:
28:2d:7c:e3:cb:c0:a8:7c:c1:0c:c7:46:46:83:dd:62:31:69:
0d:fb:01:2d:b1:f6:64:5e:66:6d:dc:7d:c2:56:64:4c:11:53:
da:55:fb:8e:f2:ac:fc:93:db:0f:29:89:58:ad:61:36:cb:81:
39:2b:2e:28:87:ec:67:0b:1d:93:e4:3d:1e:e0:81:0e:ec:b3:
03:2e:a6:a1:39:f4:d8:29:7b:36:87:46:3e:b1:93:cb:87:57:
26:09:09:1d:aa:ac:72:7b:58:f4:4f:9e:4d:95:2e:d2:5d:e9:
7f:b3:9c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:20 2025 by rpki-client