Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
File: cD94XhQ0CsaoQEhj1796-U5aubU.mft (raw, json)
Hash identifier: Fe021uxASri3YCI4Lewh/HwEXUYZ8xlmnQrbGDn68sQ=
Subject key identifier: B0:73:55:98:8A:D6:AE:EC:23:5A:C4:AF:9F:DC:1E:AA:C6:6F:3D:78
Authority key identifier: 70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
Certificate issuer: /CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Certificate serial: 01963C1DA7E4E76E8074C893025337219BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
Manifest number: 0E6C
Signing time: Wed 16 Apr 2025 01:01:38 +0000
Manifest this update: Wed 16 Apr 2025 01:01:38 +0000
Manifest next update: Thu 17 Apr 2025 01:01:38 +0000
Files and hashes: 1: cD94XhQ0CsaoQEhj1796-U5aubU.crl (hash: LE9IBQyFhjkHaHqbBHfnqg/NxcORRJk1cPx9ygFVb0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:1d:a7:e4:e7:6e:80:74:c8:93:02:53:37:21:9b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Validity
Not Before: Apr 16 01:01:38 2025 GMT
Not After : Apr 17 01:01:38 2025 GMT
Subject: CN=b07355988ad6aeec235ac4af9fdc1eaac66f3d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:d6:36:bb:c9:cd:7e:32:d2:d5:46:58:45:
93:b5:c0:1c:fb:ff:7e:7a:40:34:3e:bd:35:51:f0:
2c:76:c6:61:17:46:b3:ab:f3:61:50:3a:22:ee:36:
e7:39:db:1b:04:b7:b7:5b:df:a0:ad:7a:9e:9b:a2:
d8:bc:da:9d:73:6d:70:82:f5:39:90:a0:a7:b7:ab:
52:c7:12:75:02:bf:bc:bb:33:09:ce:4b:ac:1e:c9:
b1:16:d9:d1:57:58:ff:8c:4a:0b:74:c3:c2:52:33:
c0:49:e8:cc:c5:19:8c:8a:dc:eb:b0:bc:a2:be:3c:
df:eb:38:e7:10:ee:98:28:61:df:b5:68:88:6e:ae:
e7:6c:d6:8a:d3:b4:75:16:d1:c7:bf:0b:53:94:61:
6e:0f:17:90:9e:60:76:6b:8e:76:10:ed:aa:4d:47:
28:aa:eb:94:c1:4c:71:75:e4:47:66:94:ce:0d:20:
09:4f:ac:dc:1e:3a:dd:33:4a:7f:02:ae:a6:89:c2:
c0:ba:ca:3d:7c:d9:fa:d1:7a:68:d9:5a:99:08:c2:
d4:c5:3b:f8:64:be:7c:3c:2f:fc:9c:42:18:c7:ed:
22:24:2b:a7:67:a3:5e:7a:4b:ae:c4:ff:d4:27:8a:
3f:6b:30:79:19:1c:a3:34:75:ff:3b:f8:f6:39:81:
cf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:73:55:98:8A:D6:AE:EC:23:5A:C4:AF:9F:DC:1E:AA:C6:6F:3D:78
X509v3 Authority Key Identifier:
keyid:70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:75:fe:40:55:82:e6:23:d5:04:2d:7d:f1:08:a7:90:6b:a3:
c7:76:02:ca:f0:f6:bd:85:a7:20:5c:10:a6:39:b8:f9:67:87:
8f:70:12:60:70:a9:b5:90:23:73:d8:9f:c6:f5:b6:34:14:89:
f3:4f:1f:b8:fd:e3:50:ce:04:f5:f6:51:0b:8f:43:db:e7:d9:
da:25:c5:4c:86:6c:5d:d2:e5:e4:d8:2e:82:32:e1:05:bf:18:
e4:6a:4b:68:2a:c9:79:e0:40:c1:6b:f6:5d:f1:8a:e4:89:0e:
d3:41:b7:d1:df:58:a0:ae:48:14:f3:54:d6:92:68:97:65:b8:
cb:ac:6a:2a:9a:43:d1:f5:77:36:58:60:65:5d:19:ef:14:6d:
98:d6:3c:25:49:f3:13:5b:54:d8:08:52:ea:73:7d:8b:1d:c8:
62:2e:63:bd:fa:49:18:18:6c:20:e5:c9:ac:86:b9:ce:f2:25:
f1:2c:8e:44:ec:7e:5d:6d:2d:83:c9:65:ad:80:b8:1b:12:00:
4c:6d:44:63:0d:2c:09:89:d0:04:2c:c7:22:54:df:6f:f3:31:
0e:0f:50:54:4a:40:95:f2:7c:fd:47:05:c2:ef:08:2b:b5:87:
8e:2b:e6:06:3a:30:94:4a:3d:c4:52:30:7b:2e:5d:fd:3f:0a:
02:c4:4f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:44:41 2025 by rpki-client