Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
File: CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json)
Hash identifier: Dddq4aUtYOVqNCGFYSp4tvo0ZxMH55anDp4FXca7WVE=
Subject key identifier: 7C:08:CB:2E:CF:29:97:AE:CE:53:49:26:9D:4F:FA:99:6A:FC:D9:47
Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Certificate issuer: /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Certificate serial: 019510FDD582E844DCAA323D51294EA0C06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
Manifest number: 1455
Signing time: Sun 16 Feb 2025 23:00:25 +0000
Manifest this update: Sun 16 Feb 2025 23:00:25 +0000
Manifest next update: Mon 17 Feb 2025 23:00:25 +0000
Files and hashes: 1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: cQTh43340U5nW6/3dDUR/dLmttgeegAeNbETReyr5yw=)
2: w5pXk-zMDjFo7rYudSF_ATInnUI.roa (hash: 33j8kQlj8EM4Xb9f4KytIpk1E+D5CzmOoXGUrxjI1vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:d5:82:e8:44:dc:aa:32:3d:51:29:4e:a0:c0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Validity
Not Before: Feb 16 23:00:25 2025 GMT
Not After : Feb 17 23:00:25 2025 GMT
Subject: CN=7c08cb2ecf2997aece5349269d4ffa996afcd947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:85:cc:8f:ff:6f:f5:56:5c:37:33:d5:40:
0f:09:71:1b:d2:bb:4c:4a:5c:95:61:8e:71:17:2e:
b7:0e:41:c4:f4:04:ce:03:8f:13:10:ea:d6:b4:ae:
7e:15:46:09:f9:b2:9a:9f:2d:bb:fb:a5:8c:ea:3e:
3b:ad:54:ef:0b:30:83:52:9b:31:44:e8:dd:0d:ca:
f4:a7:ad:97:3f:15:52:8d:99:5b:4f:24:a2:52:b3:
d0:d5:b0:5a:a7:bd:d0:c1:85:a1:c1:92:21:39:f7:
28:cf:39:77:90:7b:0e:46:f8:ba:09:15:98:23:29:
ab:90:10:6d:cb:e9:01:55:8a:88:2d:bf:34:39:c9:
49:20:4b:51:d9:7d:1b:e7:50:ab:a0:63:b7:85:9b:
70:a2:d4:f8:94:a1:49:34:dd:4c:71:0f:b9:03:04:
4a:27:a8:43:86:72:e0:ec:21:1d:1a:da:93:f2:2c:
3f:08:31:ec:73:f0:0c:00:94:c3:a7:f2:3e:1d:09:
56:70:94:4e:ce:ab:5b:60:2a:eb:84:55:24:33:22:
5d:2a:fb:4c:94:56:1b:e2:ed:5e:0d:51:a5:d3:2c:
b1:23:41:af:eb:a8:94:e0:1b:3b:20:66:fb:3c:23:
5b:0c:78:ba:29:75:9e:3f:63:22:f7:c2:56:3b:c5:
b2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:08:CB:2E:CF:29:97:AE:CE:53:49:26:9D:4F:FA:99:6A:FC:D9:47
X509v3 Authority Key Identifier:
keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:11:6d:f2:70:80:9c:4c:a7:b8:05:5b:06:ca:a3:f8:6b:4a:
23:5f:c7:31:15:f0:92:86:d0:86:e3:89:56:77:cf:16:ad:f3:
05:43:a7:8f:a7:27:7f:f7:44:82:80:22:11:2d:65:ec:a3:fb:
6d:5f:bb:53:e2:85:87:7c:70:96:ed:21:63:f2:d9:ba:0d:0c:
0b:3a:e0:5f:88:d7:6b:f5:13:32:1f:15:f8:83:f7:fa:17:83:
80:cd:a3:f7:71:53:e6:4f:89:50:9d:5e:78:bd:90:09:58:d9:
c2:5f:c4:27:d7:4c:95:07:7a:98:85:33:28:ce:58:6d:8d:63:
04:f9:50:a8:bb:bc:91:fb:c4:04:54:cc:55:84:30:33:68:f4:
9b:f0:81:20:7d:30:11:a2:78:e4:61:63:eb:eb:b0:51:04:69:
b8:c3:73:fa:4d:ca:f6:69:c7:ad:2a:14:15:fd:be:3e:2a:53:
c2:63:ed:55:ee:43:8a:ce:19:73:32:d6:f9:68:db:61:97:8d:
58:8b:42:bf:af:36:da:55:66:09:96:30:ee:35:d4:53:72:4d:
07:38:8b:4c:57:39:cc:ac:e2:f9:a7:43:7a:e6:1d:18:c7:67:
2d:31:6a:ae:f8:1a:22:c3:0e:96:17:cf:ea:39:ae:df:63:6b:
dc:80:83:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:03 2025 by rpki-client