Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
File: CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json)
Hash identifier: QzLc9B4IBItPPzLOcAFuJJ3NVqU69XNailWLkjWCv3Y=
Subject key identifier: 50:C3:FF:2F:6F:F3:EB:E1:08:A9:F8:47:35:AB:2D:82:FB:10:DC:31
Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Certificate issuer: /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Certificate serial: 0195907419F1C24489C79608073BE76F948E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
Manifest number: 1497
Signing time: Thu 13 Mar 2025 17:01:22 +0000
Manifest this update: Thu 13 Mar 2025 17:01:22 +0000
Manifest next update: Fri 14 Mar 2025 17:01:22 +0000
Files and hashes: 1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: osZrqxOTanoLWDcgK6BYUo1iSpDwm29xzaIUSMJOhmw=)
2: w5pXk-zMDjFo7rYudSF_ATInnUI.roa (hash: 33j8kQlj8EM4Xb9f4KytIpk1E+D5CzmOoXGUrxjI1vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:74:19:f1:c2:44:89:c7:96:08:07:3b:e7:6f:94:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Validity
Not Before: Mar 13 17:01:22 2025 GMT
Not After : Mar 14 17:01:22 2025 GMT
Subject: CN=50c3ff2f6ff3ebe108a9f84735ab2d82fb10dc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0d:62:b6:da:df:2c:84:a8:08:25:b3:aa:aa:
2f:dc:f2:63:36:51:7b:8b:fc:a0:77:52:e4:6a:87:
a2:fc:a0:25:a8:5c:19:6e:c4:bd:76:3e:ec:fe:90:
6b:ae:b1:43:58:0b:73:ea:90:70:17:dd:25:6d:d1:
68:5b:70:5d:33:73:e4:a7:ab:9c:e9:50:21:1b:35:
8a:63:ef:a1:d5:e4:32:ac:9f:f8:fe:70:bb:24:a0:
3c:75:d1:9d:63:ab:f5:77:eb:b7:5f:8a:94:b2:65:
2d:f3:fa:df:bb:64:9e:9a:62:3d:d8:00:1a:57:bf:
ed:7e:3a:ae:08:d6:49:63:ec:9c:9a:07:65:86:d3:
46:32:20:43:b1:6b:89:43:a3:ea:09:b6:18:41:88:
40:00:a0:87:93:11:b7:52:4a:60:0e:11:f6:37:4f:
e3:d1:e4:bf:b6:60:77:2c:fe:98:59:ea:5d:61:65:
0d:39:b3:61:c8:1c:19:2c:e8:47:a7:12:7a:fd:c8:
06:bf:d3:38:ae:5b:4c:2e:19:52:1e:c5:62:79:9e:
ee:35:d5:79:d9:16:fe:c2:a4:ba:2e:b8:43:c6:f9:
11:1d:2b:d4:17:dd:33:5c:1c:f3:92:6a:47:c3:ae:
8c:be:be:65:ed:a7:a5:7d:a8:ff:5b:8d:e8:b3:a8:
99:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C3:FF:2F:6F:F3:EB:E1:08:A9:F8:47:35:AB:2D:82:FB:10:DC:31
X509v3 Authority Key Identifier:
keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:df:9f:7f:73:9b:9a:2b:ed:e7:fb:dd:8f:66:1a:f6:54:61:
2a:d5:8f:fb:7e:7b:3c:25:28:f6:08:a4:15:33:b0:a6:03:b8:
f1:78:ea:52:af:a7:f5:c9:79:3f:d3:22:26:96:4e:7a:8d:d3:
85:d8:08:5b:05:9e:52:e0:ce:52:b0:c4:33:8a:c7:cf:e8:40:
d3:60:a1:18:71:95:6f:f4:31:c3:1f:57:8a:06:96:f5:e1:02:
a8:7f:54:55:e1:7f:1a:8b:02:07:73:ba:3b:e1:81:8c:7b:24:
5b:43:29:e7:a2:03:db:16:4c:d9:f3:4c:8d:aa:37:a8:cd:be:
99:b0:d3:91:47:eb:e7:66:50:e6:4f:68:fb:c3:63:bb:76:97:
28:f1:fc:b5:14:14:49:5a:9a:c5:88:1a:8e:f7:47:ee:97:b8:
b8:10:e3:ca:77:1b:59:35:c9:a3:1b:bf:13:0f:46:42:a3:57:
46:f4:ec:f3:18:e3:04:bc:25:f3:1a:8d:cf:e6:50:23:13:e3:
94:c8:1c:66:ec:61:00:dc:c6:d4:f9:19:4f:ed:71:24:f2:c3:
cd:71:08:76:35:a9:3a:ff:f9:54:fd:0f:76:69:45:28:6c:08:
c8:18:00:73:c7:92:c4:50:7c:3f:9f:9d:d0:ce:f2:78:92:ae:
8b:4e:a5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:51:00 2025 by rpki-client