Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
File: cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft (raw, json)
Hash identifier: qchVRuGzANl2nLH6Trt+aSEc6yFP0eMCTA/nTxq/yQo=
Subject key identifier: B0:B5:C6:56:49:85:52:DC:15:64:5F:E9:BF:DF:6A:8E:66:43:29:A9
Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
Certificate issuer: /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Certificate serial: 0194C3BE875BBD43D208DF76DD52DB72F8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
Manifest number: 1436
Signing time: Sat 01 Feb 2025 23:00:31 +0000
Manifest this update: Sat 01 Feb 2025 23:00:31 +0000
Manifest next update: Sun 02 Feb 2025 23:00:31 +0000
Files and hashes: 1: UrZiKbhMQKFAPWba3ngxbitw29o.roa (hash: ufKGAGF9ggNlRO05HKJuF9wjEocW5862/8UZ/KZGPTg=)
2: bkHUy_sgghNYVbWsbVxAbLGezkg.roa (hash: yMeTm4bL37IzjPkhConJ8z6pYcZ3+b2hJFSO0Nigh2w=)
3: cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl (hash: qLEpD4S4CTPm1E7q1fiBX88xLbE+hPm+uu5Reh1bMbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:87:5b:bd:43:d2:08:df:76:dd:52:db:72:f8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Validity
Not Before: Feb 1 23:00:31 2025 GMT
Not After : Feb 2 23:00:31 2025 GMT
Subject: CN=b0b5c656498552dc15645fe9bfdf6a8e664329a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:64:02:57:0f:92:40:47:e3:1e:2f:06:d3:56:
e0:69:77:71:7e:a3:3d:d6:91:a5:fa:ff:67:4f:38:
fd:e4:92:2c:1d:5d:e7:4f:d7:dd:7a:be:57:15:ae:
1b:4c:40:a4:a7:83:90:03:7f:e2:08:b8:37:23:7d:
ea:46:67:52:cb:a1:f0:57:7b:15:12:ec:b7:38:b6:
ae:78:27:d0:31:d7:82:89:21:4e:54:b6:b2:56:e0:
36:3f:1a:9d:c9:34:92:b2:fd:3b:f3:8d:91:5e:c1:
e7:cb:ee:cd:4a:b8:2d:72:9b:20:00:0a:2f:25:31:
f3:64:73:d0:3e:30:f8:42:c4:a9:a5:e1:da:50:49:
3b:e2:48:c6:50:c0:30:25:b6:05:c5:94:32:bc:2e:
78:ab:d7:44:0d:6d:35:e2:ed:cb:06:12:51:b1:9b:
92:1c:c4:cc:44:24:c4:24:bc:62:8c:99:50:2c:4c:
3e:22:7f:bf:5a:af:37:83:ac:7a:61:ad:da:0e:84:
1b:d1:1a:fb:ee:c3:5b:99:0a:a9:a4:83:bf:94:ce:
97:21:bc:7c:22:43:22:d0:ff:39:23:66:e1:e7:19:
d4:f7:7e:20:05:66:a5:74:c6:ff:9e:e1:32:e1:1f:
2d:99:f1:2e:73:6f:9d:a7:59:c3:5d:bf:77:37:2f:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B5:C6:56:49:85:52:DC:15:64:5F:E9:BF:DF:6A:8E:66:43:29:A9
X509v3 Authority Key Identifier:
keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b0:c7:76:4f:0e:94:50:fd:96:3b:b4:f6:50:c7:c9:30:84:
f8:db:48:5b:a9:f6:b8:7c:d5:74:29:be:46:12:c6:a3:62:fc:
bf:8e:a1:a5:ae:29:82:90:a8:74:b0:4f:f1:e4:aa:a2:32:46:
e8:05:99:5a:dd:41:35:b5:ae:a1:56:97:54:a1:d4:8e:53:67:
83:3f:0d:b8:b8:e8:51:85:ad:f4:ec:8d:80:e5:84:17:f5:5a:
4a:ad:fd:b5:2e:2e:95:f8:9d:7d:93:c6:9b:7d:da:e4:74:66:
44:78:fc:74:a7:0e:8a:c0:16:81:44:94:1d:09:38:0d:f2:f5:
06:59:bd:9b:ed:4b:f8:b1:15:d7:1f:e3:51:42:1f:36:b3:78:
54:55:de:b7:06:69:5d:6d:8a:d8:51:f7:17:77:1c:98:b3:73:
95:14:51:22:be:cf:5c:4b:53:9e:31:8f:9c:cf:b7:2c:7e:5f:
5d:1e:3e:4d:a7:c3:72:2d:e1:b1:de:70:b4:73:00:77:ec:8a:
95:01:74:6a:19:e6:3f:85:35:c9:09:e4:e9:3c:8a:17:bb:04:
4f:fe:dc:79:08:54:4e:b8:1c:96:5f:0d:02:9c:8b:aa:9b:4f:
45:5d:29:01:01:33:fd:6b:cb:32:af:3c:aa:a2:26:76:85:80:
da:d6:96:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:52:37 2025 by rpki-client