Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
File: CuQnEByy4r1WUITeZHH260jST5Y.mft (raw, json)
Hash identifier: VYJGZT/7sDrilowU/BAf6Gcb4o1WRobl4pZJD2FIIB8=
Subject key identifier: 7C:7D:2F:49:82:8B:04:7A:25:3D:16:18:A3:1A:D8:6E:06:28:BA:3B
Authority key identifier: 0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
Certificate issuer: /CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Certificate serial: 019657CBA8B4B0D2E8FE16C66F86E15BC51E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
Manifest number: 0A9D
Signing time: Mon 21 Apr 2025 10:01:26 +0000
Manifest this update: Mon 21 Apr 2025 10:01:26 +0000
Manifest next update: Tue 22 Apr 2025 10:01:26 +0000
Files and hashes: 1: CuQnEByy4r1WUITeZHH260jST5Y.crl (hash: ZH5tZbB2xOIZpG6nQBek7J0KTyYuKuYRAaHzLQKvvZ0=)
2: LfJ8ODju367d2avuOQm5piH-KjI.roa (hash: o3ZK8YLnbi2AKR9dzokceRf3/tnSGkPPHYTuBxrwd0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:a8:b4:b0:d2:e8:fe:16:c6:6f:86:e1:5b:c5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Validity
Not Before: Apr 21 10:01:26 2025 GMT
Not After : Apr 22 10:01:26 2025 GMT
Subject: CN=7c7d2f49828b047a253d1618a31ad86e0628ba3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:cc:a2:6c:fc:95:ff:22:5d:6c:f2:c7:2c:
e3:d9:84:3e:32:07:e5:a4:76:fd:56:ed:7b:36:49:
ad:42:1f:ca:df:e9:9a:b6:03:fa:3a:89:a8:8e:80:
69:f6:af:21:bf:08:84:42:60:0e:5d:64:ad:36:ca:
ba:51:46:bf:68:74:4e:85:db:13:9e:00:78:b8:1d:
7c:23:e7:e5:c2:86:75:82:b1:33:b5:0a:52:12:0f:
cd:4e:57:60:13:15:b1:f4:3d:f7:ab:f5:4e:96:7d:
4d:31:b1:20:70:be:8f:73:46:e8:84:dd:b5:93:0a:
30:80:61:15:de:c1:ff:21:79:c5:74:1a:d8:56:91:
5b:22:d1:62:58:91:bd:bc:c4:a1:b1:43:97:34:51:
c6:91:21:d7:71:87:1f:0c:4d:53:d0:a0:14:81:48:
18:16:28:ca:5f:b7:65:d5:5d:68:9b:62:72:0b:c3:
54:20:c0:08:4f:b8:64:75:12:70:50:80:66:f4:2d:
30:fe:e4:e6:61:41:d1:ae:41:29:ec:d6:23:09:46:
ba:cc:5f:2a:bb:a5:f5:d1:61:9b:6e:0b:b2:0f:8e:
9f:ed:7c:ef:5c:99:e1:1f:d6:94:85:ff:0e:eb:29:
9f:12:91:5b:61:e3:4b:80:a4:44:a4:93:56:0c:e8:
d9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7D:2F:49:82:8B:04:7A:25:3D:16:18:A3:1A:D8:6E:06:28:BA:3B
X509v3 Authority Key Identifier:
keyid:0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:36:53:0b:95:a9:2e:f3:a1:78:5a:ef:78:e1:df:47:ae:14:
d0:a9:dc:28:0d:ff:61:20:87:ab:4c:65:bd:f2:94:e7:dc:63:
23:30:58:ff:d5:45:83:ff:b2:bf:dc:7f:56:46:74:57:fc:83:
a9:80:3f:4c:b2:fa:94:03:ca:6d:19:33:f4:0b:82:df:80:c2:
59:88:dd:e1:07:c1:af:00:ff:89:af:c1:a8:cb:66:5c:17:fe:
ee:5f:9b:24:28:13:62:83:b8:2a:24:3b:4f:a3:b4:b4:28:ac:
dc:76:03:c9:ff:4d:d9:e1:18:16:25:88:db:6b:07:20:0a:8a:
27:88:1c:3f:32:9f:dd:7b:d2:81:b7:4e:04:c0:d4:6f:93:97:
c3:7c:a3:43:94:aa:d8:f2:14:99:3e:32:2a:0b:6b:71:4e:78:
fe:94:bc:05:a8:5b:4d:5f:e9:37:a1:38:1d:2f:5d:aa:0d:5d:
c3:0d:a7:91:b9:bb:a1:88:96:51:20:ca:0f:7e:5f:c5:47:55:
b3:58:50:41:dd:1e:1a:58:10:48:37:a0:36:b3:05:8f:c4:14:
dd:b4:7d:1b:b6:a5:55:98:5b:2a:7a:6f:b6:38:a4:38:75:1c:
a7:52:77:76:65:ef:3e:a2:69:6e:24:43:3a:d8:98:2d:ab:95:
fe:de:cb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:48 2025 by rpki-client