Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
File: ciLFq32z3TlmGS-q_gfzEVsMjuU.mft (raw, json)
Hash identifier: +qO2/lCcJFse439dOO8I0+2Y3rTSEqKAdW3zpAY723c=
Subject key identifier: 5D:6B:2F:34:67:BD:37:D8:CB:E6:2E:96:C7:35:F8:D4:BD:7F:61:D6
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 01965914799F2362B779ED7B5486FB03A5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
Manifest number: 11D6
Signing time: Mon 21 Apr 2025 16:00:35 +0000
Manifest this update: Mon 21 Apr 2025 16:00:35 +0000
Manifest next update: Tue 22 Apr 2025 16:00:35 +0000
Files and hashes: 1: ciLFq32z3TlmGS-q_gfzEVsMjuU.crl (hash: ccCq40qIP0kUQ2Ci7IZqeZyHvHEl/Necfdwb2GFDrsQ=)
2: eBm4FcENh4mdv8uF5hjrhyaeTNk.roa (hash: Ler7/mk93wlcxw6BHOT02mce04EHfQvKLLwFRXlVbjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:79:9f:23:62:b7:79:ed:7b:54:86:fb:03:a5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Apr 21 16:00:35 2025 GMT
Not After : Apr 22 16:00:35 2025 GMT
Subject: CN=5d6b2f3467bd37d8cbe62e96c735f8d4bd7f61d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:61:eb:c5:05:5e:1d:af:2f:d9:14:c4:af:d0:
58:43:0c:26:36:0e:48:3e:3f:b4:79:91:1c:be:d8:
e3:c1:e4:87:04:13:a7:be:07:27:63:b2:14:1a:f8:
0f:a9:5d:ab:2c:d2:2b:8b:f3:da:69:68:99:be:e2:
34:fc:f8:7b:aa:48:4d:01:44:b1:b0:0e:7a:53:73:
0b:e2:65:ec:04:7b:cb:e3:3c:f2:7d:1f:65:08:bd:
e1:9d:4e:3a:87:b0:4f:e9:a0:f8:3f:58:67:9c:db:
21:af:55:99:5c:66:b1:a7:73:34:a1:c7:f9:2a:d9:
07:c0:b8:23:01:b6:17:2b:03:7e:92:d1:a1:b2:93:
29:84:f7:b0:f9:c3:b6:d3:03:8f:e1:db:49:92:5f:
46:a3:20:0d:e5:e7:22:94:65:4c:7e:9f:00:65:42:
e6:2f:5f:a1:10:c5:66:22:0e:b9:75:52:e0:89:6e:
cf:39:f5:99:55:9e:c0:0f:e1:40:54:1e:89:e2:00:
5b:55:95:ef:79:cf:8b:02:da:f5:3c:eb:0b:c5:57:
01:b7:ba:c1:58:e0:72:bd:bd:4b:9a:34:fc:6a:f7:
6e:e1:af:7e:99:67:26:97:88:b9:0e:97:ad:d0:8a:
1f:b0:16:7e:60:f8:26:27:03:ff:0b:98:01:59:cd:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6B:2F:34:67:BD:37:D8:CB:E6:2E:96:C7:35:F8:D4:BD:7F:61:D6
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:78:55:b3:e9:e8:9c:46:89:35:0e:30:1d:84:cd:8c:ed:4f:
00:67:44:d0:aa:c8:06:fc:4e:9c:51:d9:3d:f3:eb:91:81:60:
07:e6:69:d1:b7:d4:73:67:bf:0d:b4:12:9d:39:e4:8d:52:16:
32:d8:1f:e0:d8:c3:b3:7e:a5:ae:2e:4e:58:49:38:0c:e7:24:
77:4b:4e:d0:f4:30:b1:74:92:35:48:87:f0:34:44:ed:69:7a:
1d:2f:69:00:60:38:99:15:a5:aa:42:a8:fa:c4:50:57:55:18:
58:3c:92:a9:39:b4:04:ed:98:59:e8:d2:19:fc:0e:9d:4c:b1:
71:83:09:f2:87:02:ba:eb:48:58:d4:31:3b:79:62:72:b7:4e:
1a:fd:76:7e:bb:7d:c2:55:20:9c:76:e3:70:8b:9a:84:0c:ac:
c2:d4:e0:a7:ee:68:44:51:5c:d2:2d:ce:77:7b:81:7f:9a:42:
4d:4a:da:aa:3a:7d:52:f0:05:2b:f7:e7:4d:f1:80:b7:d7:30:
9c:22:d1:9c:3e:8e:36:5c:27:8e:c7:25:81:ae:f3:2a:56:2f:
af:34:ce:70:4f:51:da:ff:2c:bf:59:6b:79:a3:a3:01:83:c9:
a9:33:31:e8:64:36:ce:45:74:92:5a:f0:62:6a:d1:cb:5f:f5:
80:b8:cd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:51 2025 by rpki-client