Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
File: cRc4aXP7-IqGfIKohnsFD8pgsBE.mft (raw, json)
Hash identifier: +aJiygs0cK2t7Q0UFwVvfa/qxUsvtijt/lO3POyZ3Xk=
Subject key identifier: 5C:1C:65:09:A5:BA:91:36:38:F8:24:38:DF:41:56:D7:8F:28:D6:4B
Authority key identifier: 71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
Certificate issuer: /CN=7117386973fbf88a867c82a8867b050fca60b011
Certificate serial: 01958C607CA40AA5E876ABB7FA661A760991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 22:01:28 +0000
Manifest this update: Wed 12 Mar 2025 22:01:28 +0000
Manifest next update: Thu 13 Mar 2025 22:01:28 +0000
Files and hashes: 1: __J8knmzK0D7LeHPBcfH9mDXmDA.roa (hash: KGCws32qTez6CiaSk45QNDqYkcqePM9SEByg+MzKHwo=)
2: cRc4aXP7-IqGfIKohnsFD8pgsBE.crl (hash: yJbSSEsvbAiO2YRXfAZ8zxq6g3624B20V90wc5YUuSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:7c:a4:0a:a5:e8:76:ab:b7:fa:66:1a:76:09:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7117386973fbf88a867c82a8867b050fca60b011
Validity
Not Before: Mar 12 22:01:28 2025 GMT
Not After : Mar 13 22:01:28 2025 GMT
Subject: CN=5c1c6509a5ba913638f82438df4156d78f28d64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:67:b6:90:91:9a:c7:b2:43:c7:ee:93:d9:
12:89:c0:23:81:a4:22:c0:eb:63:54:a7:a0:e0:0a:
51:42:a7:65:a3:d0:ad:2c:b3:b7:cd:79:4b:27:8d:
c4:eb:fc:77:17:6a:88:15:bb:34:12:f9:be:b4:c4:
29:c1:f4:76:a9:b8:12:af:4a:2b:88:66:4d:32:c8:
fa:18:17:63:6e:38:65:47:02:f8:5a:ea:99:0b:ac:
23:18:1a:b0:79:6a:cf:7b:3f:bc:8f:e1:d7:79:ae:
3f:cd:cd:87:34:f6:a3:09:c7:0a:85:01:0e:b2:c7:
46:93:fd:fb:f3:83:ad:64:a8:52:f0:f3:bd:33:95:
73:63:4d:7a:a3:8c:f9:44:3e:ad:9d:87:b9:73:76:
a0:15:34:d3:a9:3b:40:2d:95:2b:aa:39:c0:78:8d:
27:8d:78:f8:c8:43:0a:4c:ce:30:13:64:a3:8e:8f:
cd:0d:ef:7e:ab:e5:77:5a:13:4b:7d:7c:ac:a8:2f:
34:79:ea:55:a7:0e:c8:8b:fe:67:f9:a4:0c:cc:7f:
89:da:e5:77:07:50:bd:4f:cf:be:17:86:8f:a4:f5:
49:63:f6:57:95:6e:0e:b3:c0:28:d0:5b:69:c5:f3:
04:6a:6f:c5:22:02:e3:b8:e5:43:84:2d:d0:53:ed:
98:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1C:65:09:A5:BA:91:36:38:F8:24:38:DF:41:56:D7:8F:28:D6:4B
X509v3 Authority Key Identifier:
keyid:71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9b:2a:bd:3e:31:ed:a2:18:a2:55:a3:c9:50:f6:aa:1a:72:
9b:54:e0:7e:9c:2a:72:a5:a1:be:c1:8c:a5:e8:ef:59:86:24:
55:86:56:c1:d1:8f:8c:f9:3c:60:76:d5:66:fd:bf:a4:6a:92:
58:c8:da:9d:59:bc:8c:53:dc:7a:be:b9:d4:b6:05:04:96:ed:
7c:22:ce:39:c1:a0:18:85:9e:c6:dc:d7:99:60:25:1d:96:08:
12:20:35:2f:9e:a1:70:81:3e:80:e4:3b:3f:7f:ab:f5:27:6d:
40:df:f2:18:77:76:4c:07:cc:75:f2:6a:83:af:3a:83:24:7a:
05:0b:99:7a:ec:a1:e5:38:ff:d8:3e:8a:33:c1:3c:2a:ed:5d:
00:58:da:16:93:48:16:a7:d2:82:41:a9:ae:5d:dd:39:bb:5b:
73:d2:9c:7d:52:7c:a9:c4:e8:b7:58:18:e1:30:6f:e4:d4:60:
9c:c3:25:4b:65:49:08:16:86:e9:32:0f:9a:a1:8d:15:57:0f:
91:a8:c6:33:de:fc:e4:ee:7b:c3:69:34:de:35:33:8d:be:b5:
0f:ef:ff:d2:6a:0f:7f:d8:ae:96:94:6c:b7:bf:59:d4:5e:b4:
24:83:36:18:23:03:a0:d4:ad:1f:ca:31:32:8a:de:20:01:27:
23:7f:44:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:51 2025 by rpki-client