Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
File: CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft (raw, json)
Hash identifier: T5mBVnsTCia8ogIcLFjRljoLOGffZ1ZIiTOlvIGhBHI=
Subject key identifier: 2F:FC:0C:66:F8:2B:C1:45:A6:BE:43:46:2F:92:4F:1C:82:B3:78:0C
Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
Certificate issuer: /CN=0b1027ace17f0067f697c65361488192eaf64138
Certificate serial: 019655A5781059C06D691D02461FAC6ABABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 00:00:29 +0000
Manifest this update: Mon 21 Apr 2025 00:00:29 +0000
Manifest next update: Tue 22 Apr 2025 00:00:29 +0000
Files and hashes: 1: CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl (hash: /b548y03D/dBHVtg5HvN/cmnTJXrhOGAWYrXC3I5Kdc=)
2: ugc9sZedf1kQim_ILlGgEqT8zEQ.roa (hash: il9YS8RE+T8nxwMQDbcqvrV75JMzYR3yLbUc6KCg+oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:78:10:59:c0:6d:69:1d:02:46:1f:ac:6a:ba:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138
Validity
Not Before: Apr 21 00:00:29 2025 GMT
Not After : Apr 22 00:00:29 2025 GMT
Subject: CN=2ffc0c66f82bc145a6be43462f924f1c82b3780c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:27:2b:80:73:d4:46:d4:e7:43:54:6a:df:57:
99:50:3b:99:8c:06:d1:82:d1:4a:83:5a:93:0d:ae:
b5:6b:c7:da:86:55:2e:d3:32:07:30:86:ef:71:ce:
36:88:83:fe:d0:5c:25:a0:ac:5c:27:be:80:1b:ac:
60:fa:02:03:08:83:88:89:e1:a6:82:1f:86:69:60:
13:55:9f:bd:5e:eb:35:5c:af:8c:a2:1b:7c:2e:81:
a3:5f:df:5b:ea:ff:8e:c2:ad:be:bc:79:78:42:f2:
89:8c:45:d7:5e:ee:6f:3f:e6:fd:ff:27:f2:30:8e:
87:09:52:05:02:59:18:45:f1:3a:6a:86:86:b5:66:
d9:ec:fe:20:f7:bc:d0:22:70:fd:5f:46:cf:d5:f6:
ef:d9:07:dc:6c:6a:b4:b3:6f:ea:3c:71:40:0f:c7:
d4:c5:c0:80:09:cd:98:9e:3e:58:a2:6f:e8:ba:69:
43:c1:5b:c4:3d:ba:66:66:06:9c:10:bf:11:9d:4f:
7d:36:34:67:27:ae:5d:83:71:4a:b0:64:6e:d3:b8:
3c:d5:69:56:d0:ab:0a:b7:2f:ef:9c:db:36:5f:08:
ce:ac:7a:22:e4:74:a8:a9:63:5b:d6:20:d6:e4:06:
81:d8:12:7a:3e:32:48:5c:05:62:5b:89:b3:ea:e7:
7a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FC:0C:66:F8:2B:C1:45:A6:BE:43:46:2F:92:4F:1C:82:B3:78:0C
X509v3 Authority Key Identifier:
keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f7:af:59:f3:70:96:b0:97:ed:af:03:94:4a:41:f3:cd:e1:
5b:48:b1:b6:cd:c3:92:6f:7a:68:14:12:20:0b:fb:80:04:c3:
01:bb:09:54:36:cd:76:bb:6b:3d:61:a7:9d:ff:3e:4b:13:45:
dd:2b:e3:ba:16:4f:a5:dd:20:6b:47:0f:5b:a6:0b:57:7c:e4:
c2:47:4e:98:d5:45:cf:4b:b9:9b:07:d9:e2:a9:e0:7a:9b:cd:
23:38:57:d1:9f:30:7b:d8:e0:39:0e:5b:49:2f:85:77:4c:c4:
20:14:c3:25:db:11:bf:69:87:46:e6:da:e1:59:63:08:fd:cc:
ec:8a:84:a8:91:0c:1b:3d:b7:1f:5a:fb:6a:6f:d6:49:cf:eb:
90:26:f5:8b:59:8c:fb:fa:6e:d5:ec:5b:00:33:ba:2a:51:f3:
75:f5:43:47:ca:64:73:76:38:62:82:9b:78:2c:73:4d:bb:f4:
de:ae:33:da:d2:a5:97:95:38:63:79:53:58:ef:f0:a0:04:10:
58:93:52:9c:fe:69:6c:5c:89:9d:5f:bf:d2:9a:26:f9:4f:cf:
4b:6f:92:fa:97:76:33:88:93:db:ff:a7:77:1e:65:2d:6e:35:
b2:ef:d3:59:dd:ea:c4:2d:94:4c:ca:53:e5:53:48:f9:c4:68:
6d:9a:0e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:37 2025 by rpki-client