Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
File: ClMYxYv1unQySyXQN0BN2N2p_yQ.mft (raw, json)
Hash identifier: Gt0IS5Jdfm00zQNZlYd0W7PXyiPcSqn+sqeMJaKplgI=
Subject key identifier: EF:79:F9:04:63:14:A6:82:63:E5:5C:00:85:A2:E5:0A:75:22:05:58
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Certificate issuer: /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial: 01958B84408CB7C60CC1FB0EE5C33D048B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 18:00:55 +0000
Manifest this update: Wed 12 Mar 2025 18:00:55 +0000
Manifest next update: Thu 13 Mar 2025 18:00:55 +0000
Files and hashes: 1: ClMYxYv1unQySyXQN0BN2N2p_yQ.crl (hash: hWEOug+lnj8fNxo7mYSERPJ+XZwcAsHGjDcMfCZa/hY=)
2: DLTd3WJjxjvYe7s9RQaXW0-asFQ.roa (hash: CEzU0MiwDAlXifXvS9Fry7MUXXUL96cqYeU54NDS/g8=)
3: MzKwgAtz12wzIsjgwju5LaHLtH8.roa (hash: DsGzfZzJWXHpJi5oY7AKelnpp/ss483xMhTBHOGogIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:40:8c:b7:c6:0c:c1:fb:0e:e5:c3:3d:04:8b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Validity
Not Before: Mar 12 18:00:55 2025 GMT
Not After : Mar 13 18:00:55 2025 GMT
Subject: CN=ef79f9046314a68263e55c0085a2e50a75220558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:37:b4:09:eb:f4:71:e3:39:de:78:11:1c:47:
2d:34:0a:77:a6:12:28:cf:bd:87:b0:28:28:9f:03:
31:c0:25:3c:6a:f9:91:70:e2:a1:0a:ab:ba:2b:e0:
a0:e9:16:af:99:09:40:c4:85:09:6a:dd:89:2c:3d:
36:29:98:22:a5:b6:7e:04:ac:c5:af:07:ee:b6:11:
1d:42:ec:c1:58:4c:e7:d8:cc:16:c0:24:12:9b:bb:
b0:fa:44:56:c9:9e:7b:45:a7:90:a7:2e:50:85:57:
04:8e:bb:22:07:ad:4f:7a:9b:3c:6b:43:a7:a2:4f:
94:8d:5d:3b:ee:1e:d8:77:41:05:4b:b1:cd:87:cd:
f7:82:a9:9d:08:6e:aa:34:1d:00:e8:dd:9f:6c:7e:
73:0f:87:83:8b:de:24:b0:d3:4a:7f:57:4a:a4:e6:
dd:12:57:95:0f:0a:80:de:81:0a:c3:92:5e:cf:6e:
02:07:b3:40:f3:10:02:eb:fe:43:20:fb:e8:21:8a:
08:9f:81:92:ee:7c:f7:23:00:a1:0d:76:0c:e9:a9:
f4:91:25:cb:45:7f:e5:9d:6f:21:4d:3e:5b:ed:cb:
9b:61:95:de:6a:14:6f:86:35:69:81:4e:08:c5:f1:
bd:b3:96:80:22:7c:64:e1:5a:c2:e3:f1:86:9c:d7:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:79:F9:04:63:14:A6:82:63:E5:5C:00:85:A2:E5:0A:75:22:05:58
X509v3 Authority Key Identifier:
keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:cb:c0:1a:15:96:33:cb:6a:15:f4:cf:8f:fc:cc:15:13:6c:
47:dc:3f:dc:f4:62:99:bd:41:92:1d:81:8f:5b:54:e5:08:cc:
5f:40:bc:95:76:fc:46:df:89:d9:44:4c:b9:fd:1b:68:3e:b8:
a1:7f:8e:f1:04:05:2a:bd:90:9c:ca:e0:67:49:08:7d:f2:77:
ad:90:fb:92:e1:47:cd:ab:72:92:13:f9:d2:86:06:0c:98:88:
e4:e0:5b:69:a6:41:26:5f:a7:f8:d4:7f:59:c2:40:46:78:8d:
ed:24:af:60:55:15:5c:c7:a4:cd:38:62:69:b0:c5:46:20:e5:
8c:1f:81:c6:a5:b6:e2:26:9c:e1:58:a5:c5:6d:0c:16:9f:92:
59:7d:27:7f:f2:ce:c9:18:4c:ac:17:6f:7c:0c:5b:80:14:7b:
33:70:b4:68:1e:d1:f0:36:31:d8:27:ce:46:6c:2b:b6:3b:64:
66:43:d0:4d:98:42:c8:53:fc:43:22:61:f5:6e:ed:ef:3b:5d:
c7:7c:ff:52:01:38:b0:bf:b0:43:2a:7c:c7:84:9b:bc:9f:8b:
85:2e:66:99:ca:0d:3e:ec:51:e5:eb:7e:80:07:7d:1a:b0:fa:
ef:37:52:a8:06:11:c1:66:56:2a:4d:33:14:d3:ae:2f:84:9b:
cd:b7:fd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:29 2025 by rpki-client