Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
File: Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft (raw, json)
Hash identifier: Mk5pQTYt7FaOnxpzalHRWrptJEDwGbXZbGkbx8Jy7iQ=
Subject key identifier: 42:B4:45:F8:C6:E2:88:2C:21:1F:31:F6:7F:6F:A1:C5:B5:65:98:A1
Authority key identifier: 0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
Certificate issuer: /CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Certificate serial: 019656B7EC4C4CA8C248A6850C63822DFA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 05:00:16 +0000
Manifest this update: Mon 21 Apr 2025 05:00:16 +0000
Manifest next update: Tue 22 Apr 2025 05:00:16 +0000
Files and hashes: 1: Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl (hash: zEcracu9qKrGp+27dQ4147cgo40SbnlH0O73yAdpvYU=)
2: jNQsNrl4OFuXyBApJXCWmUTjpZk.roa (hash: N8A4PApBA9zWi0+/3/LkUNmVkYXpRd84xcIjX23MSx8=)
3: sZIsfl2SHxbYgBp6wBGthOfYd7Q.roa (hash: XDzfTTG5ZalMDxihCFcFH9odfMn9DlFUshPNduKnlps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b7:ec:4c:4c:a8:c2:48:a6:85:0c:63:82:2d:fa:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aeeaee0863d1dca624f61f39b2181c7db6cba3f
Validity
Not Before: Apr 21 05:00:16 2025 GMT
Not After : Apr 22 05:00:16 2025 GMT
Subject: CN=42b445f8c6e2882c211f31f67f6fa1c5b56598a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c9:84:16:a5:82:6d:d9:9e:5e:42:cf:44:fe:
7f:cc:91:96:e6:b3:3f:c9:4d:20:e0:9f:4d:a0:2d:
e9:da:81:f2:3c:fd:6e:0f:29:61:78:01:b5:82:ff:
f7:07:70:04:5a:09:21:f5:b2:57:63:20:7d:f5:3e:
2e:f2:a5:de:aa:af:f1:da:cc:c0:e8:f3:49:ca:c4:
7a:cd:e8:9d:15:23:16:6c:ea:05:8b:98:ff:1f:48:
c0:f2:75:74:3a:8a:80:5a:97:dc:31:67:14:03:2d:
70:ef:56:e6:9b:18:47:63:d7:7f:b9:fc:b6:65:77:
56:12:97:54:3c:26:27:2f:26:f6:9b:c3:96:8a:4f:
de:75:92:32:c5:18:b3:05:7a:89:ae:d7:78:5e:42:
05:46:23:83:4f:27:33:06:41:75:ff:6c:f0:5a:63:
b7:fe:d2:a6:2c:21:83:96:13:2d:33:6f:56:f8:aa:
ce:4d:e7:21:e1:46:40:cf:07:15:d2:9f:81:4d:b9:
f9:9d:26:31:6f:32:24:bb:a9:66:83:7f:fb:f5:7f:
72:86:07:13:49:3b:ae:a2:07:7c:6c:a3:bb:c9:7c:
53:23:7c:b4:60:ce:c4:90:56:ca:a0:5e:a2:ac:1a:
77:0c:72:58:08:d3:bb:a5:c4:72:10:db:5f:23:33:
a4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B4:45:F8:C6:E2:88:2C:21:1F:31:F6:7F:6F:A1:C5:B5:65:98:A1
X509v3 Authority Key Identifier:
keyid:0A:EE:AE:E0:86:3D:1D:CA:62:4F:61:F3:9B:21:81:C7:DB:6C:BA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b62878-ccc8-4d57-9fe0-7a104b80cd71/1/Cu6u4IY9HcpiT2HzmyGBx9tsuj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:79:80:b9:dd:aa:ac:d2:0f:33:3e:46:df:2c:20:06:d4:39:
b1:47:92:03:bf:e8:b4:a6:7c:5e:a5:63:e1:b6:c3:2b:ad:2d:
38:90:a8:6c:cf:18:ed:5f:03:f2:13:a4:7f:1d:da:cd:87:11:
62:91:e7:91:a5:bf:d0:ac:81:de:b5:18:46:72:4d:2b:c5:20:
79:fe:1b:76:3c:06:ae:79:a4:8b:d7:f4:1c:ea:24:05:d3:91:
08:35:e7:cf:ad:c7:14:8c:46:92:aa:7b:33:58:68:32:0f:dc:
79:c3:9a:39:37:2c:c4:45:4a:93:d4:94:e0:12:37:a2:dc:c1:
e4:47:f2:a9:73:79:ae:92:35:11:c2:9d:85:27:d1:82:00:d1:
f1:b2:3a:f9:a9:74:5a:d3:b5:7b:8d:d1:8d:d8:77:07:32:a4:
3b:3a:54:16:c1:b8:31:41:eb:bd:d5:c4:6a:08:1d:88:6c:39:
c5:b5:2f:38:57:50:9c:2b:19:aa:bf:a6:55:6d:3b:1b:18:7c:
69:81:98:35:67:3b:57:23:ab:8c:66:84:8a:8b:dc:a1:c4:8a:
89:8c:a7:53:38:df:e1:7e:c2:bc:ab:b0:f4:b8:56:4d:12:36:
1a:7e:5f:de:61:59:2f:4a:b2:ad:57:0a:d7:9e:19:80:45:26:
61:50:f9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:32:27 2025 by rpki-client