
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
File: CDC8NLj0_Lwr9SO72-mgRKJEX74.mft (raw, json)
Hash identifier: ubgszgDEnADZAxMCNljiwBC3QHkTsdh/oazLAn642ik=
Subject key identifier: 80:E4:8B:D2:95:CA:CA:1B:E4:93:C0:7A:49:E7:09:04:5C:15:3D:5C
Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Certificate serial: 0196029B7EE3820468107050609DB67A546F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
Manifest number: 14D3
Signing time: Fri 04 Apr 2025 21:01:06 +0000
Manifest this update: Fri 04 Apr 2025 21:01:06 +0000
Manifest next update: Sat 05 Apr 2025 21:01:06 +0000
Files and hashes: 1: 7Jx_d84jw9RCpVbZlGjBj5ncWcE.roa (hash: 5qe+SEXJJD8iF6SfIvYp7Poby6fZfVkFooQVkliL5/M=)
2: CDC8NLj0_Lwr9SO72-mgRKJEX74.crl (hash: YygE/mh9MIcgOLNI0NcTMgB6rYebLL3TzxsA7P/HqrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:02:9b:7e:e3:82:04:68:10:70:50:60:9d:b6:7a:54:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Validity
Not Before: Apr 4 21:01:06 2025 GMT
Not After : Apr 5 21:01:06 2025 GMT
Subject: CN=80e48bd295caca1be493c07a49e709045c153d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:d4:f5:24:ff:87:e2:7b:a4:58:46:35:38:
e7:44:6f:ae:e1:25:0a:81:96:31:b1:b7:dd:9f:38:
9b:b8:64:04:58:13:f2:d0:f3:09:a8:b9:21:89:40:
2f:19:50:02:15:92:19:74:e6:86:38:19:96:eb:82:
db:da:a0:9d:7a:ea:27:61:a0:07:15:cf:27:26:4d:
08:ad:79:38:c6:4f:b5:09:e4:c2:7c:d3:2b:a2:0e:
2f:29:64:22:ee:34:2e:d2:31:28:0f:ee:45:61:2b:
20:43:c9:02:2d:b6:91:9b:04:67:3e:19:59:4d:8d:
1b:1a:c1:a1:44:6c:c6:99:ca:e2:ea:53:f6:73:a5:
e7:dc:78:56:71:d9:ad:05:22:69:4b:7e:fc:4e:6b:
18:75:34:7b:a4:d5:a3:d1:7e:2f:48:38:7a:1e:82:
41:37:44:ea:3f:5d:06:21:32:26:3b:c3:af:fa:90:
8d:e2:16:6e:1c:ff:df:16:b6:f7:04:aa:81:20:3a:
c7:a8:6c:21:0a:d2:91:15:40:80:2e:f3:a7:be:37:
86:1a:70:60:42:4f:d5:8c:c3:07:a2:36:ba:ae:b7:
8c:d9:cf:2a:41:0b:ca:5c:5a:a0:f7:0c:63:88:87:
6e:1b:b6:08:10:e9:d8:6c:2b:50:c5:d0:49:e2:19:
0a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E4:8B:D2:95:CA:CA:1B:E4:93:C0:7A:49:E7:09:04:5C:15:3D:5C
X509v3 Authority Key Identifier:
keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d7:10:27:0e:c6:9f:22:46:1a:9a:72:dd:7f:40:54:fb:c0:
f9:5a:84:ce:96:c9:bc:c9:69:bc:08:57:0d:5d:9f:fe:c9:0f:
0f:29:a7:bf:f1:04:26:c4:af:f3:d4:b4:2c:3a:fb:73:37:0b:
49:fd:5d:d4:90:79:ea:96:e0:42:57:ca:cb:0b:fe:a6:e4:32:
ee:52:ff:64:ad:4c:e1:af:02:a4:93:68:c0:ca:fe:20:9b:04:
14:a4:40:4c:33:88:1a:14:7f:b2:43:6f:5d:f7:df:53:61:ee:
30:05:05:a4:8c:b5:33:2f:62:50:9f:b5:e2:8c:1a:9c:21:8c:
f1:80:a4:ce:74:11:38:d8:60:c4:1a:dd:69:32:61:42:8f:b5:
aa:4a:be:78:cf:db:d4:f9:d2:fb:6f:bd:a0:4f:af:df:90:c0:
c2:e0:2d:05:1a:a6:ef:2b:e6:4d:ed:d7:76:59:e5:cf:cc:8d:
da:dd:f3:ff:bb:3f:6e:90:5a:2f:d0:0b:73:39:1e:45:ae:80:
60:5e:05:9a:e2:88:65:b4:04:99:4a:34:27:7f:97:da:43:00:
ee:e2:df:37:82:2d:f2:6b:d1:d8:42:03:0b:a4:3e:36:52:96:
6d:63:4d:51:76:f9:16:f9:62:b1:d6:b1:7b:62:9f:d2:f4:b4:
5e:bf:8a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:58 2025 by rpki-client