Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
File: CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json)
Hash identifier: /f589jbv2RuaD7g+2A8aQ8GQ6m7hNIoF0GRGwwSu+EI=
Subject key identifier: FD:7C:D5:C5:50:09:D8:9B:08:91:17:7C:3D:08:E3:A3:DB:9E:2B:58
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial: 01960E9F9EF7F43A46957FF24CF20545E058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
Manifest number: 14DB
Signing time: Mon 07 Apr 2025 05:01:03 +0000
Manifest this update: Mon 07 Apr 2025 05:01:03 +0000
Manifest next update: Tue 08 Apr 2025 05:01:03 +0000
Files and hashes: 1: 660TeS3Zn3DLQGxj61zAMaI5cys.roa (hash: /OIs6zbcslTXyME8vlZ0u2I1w3H0JKAUoh5g6JxOOP4=)
2: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: sRpYf//OyUxu5lDLQI67AHvHIkqvWuAKLu28ppcKM7Q=)
3: KooPuekVUAdlKPtxN-pIrWZJGfI.roa (hash: IrfdSHL+ZRO1mnii3eZrt4lHidhpYe4uCjXuV308boU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:9f:9e:f7:f4:3a:46:95:7f:f2:4c:f2:05:45:e0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
Validity
Not Before: Apr 7 05:01:03 2025 GMT
Not After : Apr 8 05:01:03 2025 GMT
Subject: CN=fd7cd5c55009d89b0891177c3d08e3a3db9e2b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:d2:49:0c:0f:c5:60:79:9c:86:c0:9a:fb:
0e:a0:33:4a:67:66:e9:8c:1e:08:26:a9:99:fd:6b:
95:19:55:5a:e6:98:7e:a6:3b:90:65:19:cd:d5:58:
f4:fb:82:17:aa:ee:77:73:62:ac:ff:82:37:15:b9:
5b:d0:2e:9a:d7:95:99:07:5d:17:f5:4c:e8:b9:2e:
cc:9a:28:35:9c:5a:c0:26:4f:82:61:ab:f5:90:86:
3d:ad:6e:db:0e:96:e6:95:c4:8f:fd:4d:58:ea:d7:
a6:76:73:0a:44:84:e8:45:ff:97:d6:fc:31:98:3b:
32:b7:a2:75:3e:15:1f:49:eb:7d:b9:ff:67:2e:5c:
ae:be:a1:29:ca:a7:33:2c:1c:1b:7c:67:fe:50:46:
3f:99:5f:c1:78:aa:19:c7:e1:f6:df:de:88:49:1a:
ec:3b:ee:f6:2d:bb:92:5a:61:6d:02:05:7f:50:25:
c9:34:23:ed:4c:28:5a:87:e0:c6:0e:77:64:95:ed:
59:fe:66:e2:16:49:5e:8c:56:21:48:e8:85:66:bd:
11:91:e9:6b:fa:5d:19:44:96:30:86:84:ff:87:f2:
03:8a:ec:2b:6d:2e:a3:d6:e4:92:35:91:5e:20:64:
1a:16:cf:2c:dd:9a:d3:55:36:b0:22:4b:2f:67:05:
bf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7C:D5:C5:50:09:D8:9B:08:91:17:7C:3D:08:E3:A3:DB:9E:2B:58
X509v3 Authority Key Identifier:
keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:09:8f:b2:b3:fe:70:b9:49:ae:20:1e:22:7e:2b:69:6b:a0:
30:28:28:6f:ff:eb:bf:15:df:e5:ad:16:32:65:bd:15:f3:0e:
72:0d:52:91:d1:a8:1f:62:6c:70:d2:a5:24:76:4a:e2:67:6c:
09:05:a8:52:95:c8:96:43:a7:34:36:b2:76:b7:d3:b6:aa:82:
04:cb:21:8d:a2:25:ce:60:bb:a0:69:75:e8:81:d1:cf:c6:cc:
0f:4a:92:21:f6:2d:46:59:69:67:0f:37:8a:29:88:27:f9:9a:
3a:e6:6c:28:e4:7f:0d:17:46:44:ac:a8:38:fc:3c:65:09:99:
03:c7:ef:de:5c:76:e9:e3:f9:e6:70:3f:0e:64:78:04:08:8b:
61:d5:69:64:7a:a0:f4:fc:ce:e2:ad:26:39:76:8b:0d:f8:22:
54:6e:25:63:21:e8:99:9e:0e:45:d3:a7:a5:5c:e5:4d:ba:a1:
5d:5d:db:c9:5b:af:74:34:40:65:83:dd:60:dd:99:b0:4f:b1:
b8:37:6f:d3:d5:ed:00:9e:bd:e6:f7:12:85:35:77:50:41:4c:
8e:c9:48:d0:0b:de:38:7c:52:b1:ec:3a:5d:28:84:78:94:6c:
57:8f:14:91:0c:ab:0f:e4:b4:e4:22:22:f4:0b:72:4c:0d:8e:
34:0a:05:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:31:18 2025 by rpki-client