Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
File: cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft (raw, json)
Hash identifier: OGl7ORxlZISAHvfnSoUGdR/hjWVOHXtTX78mW6/Zz38=
Subject key identifier: F7:AB:1D:89:81:62:A8:39:F9:5A:88:DD:72:86:7C:F4:B2:D7:D3:1B
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Certificate issuer: /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial: 0196225D090120403EBD039D60F5664CFE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
Manifest number: 11FC
Signing time: Fri 11 Apr 2025 01:00:44 +0000
Manifest this update: Fri 11 Apr 2025 01:00:44 +0000
Manifest next update: Sat 12 Apr 2025 01:00:44 +0000
Files and hashes: 1: HSf-a0eTcicBmzn4zJZRWXp92WE.roa (hash: vvlQV7Jpi0XVGKQA4HOtArKcD3xjeMm171XNaqqkcT0=)
2: a5SThzVTiz_HAgBiI_2C-cBicRU.roa (hash: cXR8rbnSwDhsbHRTW7l3Pqi32yZZ/V3whRHlpIMP7KU=)
3: cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl (hash: VIxD4J+fA4KacREw2qWonLF2bcvyh5UyLJi8UoGjHZU=)
4: e8yOi_zjBd2PptdyDsyc4j2wCEY.roa (hash: gTBImvzLksx7wicV0C8XssUh2BDoKizjYT0J7tkJ1HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 21:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:22:5d:09:01:20:40:3e:bd:03:9d:60:f5:66:4c:fe:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
Validity
Not Before: Apr 11 01:00:44 2025 GMT
Not After : Apr 12 01:00:44 2025 GMT
Subject: CN=f7ab1d898162a839f95a88dd72867cf4b2d7d31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:16:6f:9c:cc:fc:c7:18:5b:c4:fd:3c:90:89:
6f:b5:de:07:d3:bc:dd:bf:a5:28:6b:13:61:d9:6c:
95:3a:f9:83:ee:ae:d9:49:d4:d0:a5:29:b9:2d:6f:
9a:e3:07:ac:3f:18:e9:07:a3:3c:ce:c5:49:2d:bb:
3f:da:41:ba:4a:e9:09:a9:ba:52:29:c5:9b:d9:7c:
38:b1:7f:82:d4:61:09:aa:4c:47:2f:0e:37:b1:af:
5b:da:ce:78:0c:1b:57:d9:ad:fd:e2:1f:31:36:4d:
02:52:0e:ca:76:46:6f:20:a6:b0:4f:d0:cc:3b:2a:
05:b6:5e:7e:dc:25:be:8f:15:1b:c1:8a:b6:0b:99:
72:8a:5e:87:b4:be:1b:24:a8:1e:1b:48:43:9a:ae:
c0:b0:99:0f:74:56:a5:6d:11:0d:ab:2d:4c:6e:e4:
03:a4:e9:9b:c3:2d:4b:4c:10:8a:10:97:5d:31:a1:
25:d2:33:c8:15:e8:b7:99:84:59:b6:55:1c:83:0f:
0b:d7:69:ae:4a:6a:8f:18:b8:68:73:99:09:fd:c8:
50:fd:89:80:81:d7:48:34:c9:f3:c1:e2:f1:7b:c9:
e3:71:c4:99:0e:d6:b6:28:5a:14:89:81:cd:10:d5:
d5:55:18:35:ad:14:94:03:f5:de:10:fc:29:8d:a5:
e4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AB:1D:89:81:62:A8:39:F9:5A:88:DD:72:86:7C:F4:B2:D7:D3:1B
X509v3 Authority Key Identifier:
keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:56:98:f1:61:b4:4a:21:7b:cf:a3:e2:6e:7e:7c:15:d0:68:
fe:58:59:65:e3:2d:c3:f7:df:38:33:c3:9a:c4:46:4c:7a:86:
cc:b7:26:84:76:59:23:d9:24:fe:6e:b3:25:7d:88:87:af:9b:
82:c8:31:10:c1:0f:13:9c:32:93:4a:52:9d:c2:7d:71:ff:82:
42:ac:27:0c:58:af:38:c2:b8:b2:5e:b0:39:72:06:43:53:45:
34:e1:2a:a3:47:24:c3:bc:7f:be:01:7b:b6:09:18:47:57:06:
3c:34:dc:4a:a4:fc:2f:d1:aa:eb:93:91:b4:a2:1e:8b:28:3a:
95:5d:28:a1:9c:8f:e1:6c:50:d0:d1:0a:b0:53:53:83:ff:92:
8e:e1:24:02:27:0b:5c:6a:08:4f:a9:50:fd:fa:37:1a:67:a1:
1d:3b:25:2f:b4:4f:69:c2:f3:84:5f:09:c5:11:e5:9a:bc:2c:
1e:38:51:e1:a6:22:e4:0a:f7:4b:16:e3:72:61:05:fc:ba:c0:
67:5d:8e:d7:b5:dc:15:93:de:6f:31:18:72:58:fb:6a:d9:f9:
0b:26:7f:8d:7e:58:d4:64:a5:bb:c9:90:f0:4b:dd:fc:cf:f5:
67:c5:02:c5:08:37:09:2f:5f:cf:66:3e:d3:81:a9:d2:15:34:
9a:88:17:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 04:29:16 2025 by rpki-client