Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
File: CiKtYJcp-O8REq28FY9REhWw854.mft (raw, json)
Hash identifier: 6EorP5OJqkksHEofxXWpaR0IKfEKqSfS6PeUaUfMp4A=
Subject key identifier: 81:D5:00:20:B1:52:D6:95:B7:61:98:45:FF:5B:36:3A:C7:29:87:FA
Authority key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
Certificate issuer: /CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Certificate serial: 01963D6676FAF85C8B697B63FCDD9F9131C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
Manifest number: 036F
Signing time: Wed 16 Apr 2025 07:00:47 +0000
Manifest this update: Wed 16 Apr 2025 07:00:47 +0000
Manifest next update: Thu 17 Apr 2025 07:00:47 +0000
Files and hashes: 1: CiKtYJcp-O8REq28FY9REhWw854.crl (hash: tlmispoDPqYf58oie46q0QNN9nFjJShkpntdtU44ztU=)
2: Xl6alk1_LCqOIwPT8NdYHl31F1Q.roa (hash: mvzboSXfNbv0bSrCewCz7JJVKGgAnpVL6t7bOyNmT+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:66:76:fa:f8:5c:8b:69:7b:63:fc:dd:9f:91:31:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Validity
Not Before: Apr 16 07:00:47 2025 GMT
Not After : Apr 17 07:00:47 2025 GMT
Subject: CN=81d50020b152d695b7619845ff5b363ac72987fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7d:65:69:22:69:e4:23:79:03:a1:a4:29:c6:
a8:1f:38:7f:98:46:26:76:f3:bc:8e:a3:87:39:82:
38:24:de:e6:67:30:6c:c3:f3:17:6f:98:9b:1c:b3:
f3:ba:90:45:27:40:90:3f:b6:38:8c:50:4b:0b:0b:
bc:3b:70:91:eb:52:29:3b:87:0b:67:f0:75:41:df:
9a:c1:e0:ff:a2:7f:22:8c:e4:6c:14:d1:6b:07:57:
7d:db:6f:77:92:12:af:f5:ed:c7:40:5d:ff:09:1c:
bb:36:a7:4e:20:23:d2:e5:e2:a3:07:2c:ba:fb:bd:
6d:c6:04:46:2c:ba:1c:3c:2d:1f:c4:e9:65:e3:3e:
1a:61:75:02:24:d9:55:d9:d9:68:83:0a:4c:cf:7c:
38:3f:75:6a:47:6c:03:02:94:46:b9:e5:0f:32:4d:
ba:ae:ba:62:cb:12:d8:26:fd:bc:c0:cc:27:5b:bb:
11:7b:3f:e8:fe:fc:3b:64:14:d9:44:e4:e2:a1:2a:
1d:34:06:3e:59:e7:8b:6b:86:fe:4a:cd:29:79:14:
c6:f6:97:d0:13:29:8c:f1:75:37:b0:6d:2c:d4:66:
ed:a7:3c:ba:2c:e1:7e:5d:c3:28:6d:b3:a0:54:f0:
a3:78:7b:60:1b:f9:99:f3:c9:34:5e:27:fa:42:48:
f2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D5:00:20:B1:52:D6:95:B7:61:98:45:FF:5B:36:3A:C7:29:87:FA
X509v3 Authority Key Identifier:
keyid:0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:de:79:66:82:40:ec:47:56:0a:c4:d3:d4:63:9e:bc:b9:ca:
aa:a0:f5:4c:b8:b9:13:34:db:39:45:03:df:8a:14:3d:3b:71:
85:b0:35:a0:fa:23:6b:7d:5d:c7:e8:e9:67:89:fc:7e:42:eb:
d0:ef:76:37:dd:3a:9d:5d:f0:ca:51:c0:57:d2:84:b4:0d:de:
2c:19:f5:1f:c3:da:75:d7:41:57:1f:ce:9a:5e:55:5d:10:7f:
07:fa:be:1a:82:04:e0:25:5c:b1:86:9a:d1:03:d5:2a:4d:e6:
0a:61:0b:17:43:8b:ef:5c:8a:91:e2:01:f4:da:ad:c9:de:f7:
67:29:46:3c:7e:09:23:90:d0:f8:29:38:25:73:ac:6b:f1:74:
a8:19:28:9c:6a:55:2a:56:f6:02:e1:59:8d:e3:20:af:b1:1a:
f5:05:ab:f6:81:68:74:a5:1f:4a:e2:1a:15:12:7d:ca:9d:89:
2c:47:16:8e:36:82:42:c4:20:84:6e:96:c8:e6:98:13:f0:79:
f0:73:a4:15:22:0b:99:ad:cd:fa:88:28:10:fd:98:d9:97:76:
d0:f8:10:5e:95:a6:d3:d2:f4:d5:63:64:70:31:16:a3:62:aa:
8f:a3:64:e6:bd:fe:51:3a:6b:6d:62:ce:7b:65:89:38:25:32:
1e:11:62:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:27:15 2025 by rpki-client