Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
File: CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json)
Hash identifier: xHOWZqagl1jHWpM3MpS1NSWhQ/DlaqQrXF51MEnjhP8=
Subject key identifier: AB:46:06:FD:64:B5:EA:09:EE:AA:DF:08:6C:92:A1:A6:42:3C:0A:1D
Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Certificate issuer: /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Certificate serial: 01965191BB3517712EDC0573691A372BE1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 05:00:27 +0000
Manifest this update: Sun 20 Apr 2025 05:00:27 +0000
Manifest next update: Mon 21 Apr 2025 05:00:27 +0000
Files and hashes: 1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: Zl0ywyn1wFtmYyn6+O0UBhhGL4lz79RSXk/MPfeZAS4=)
2: w5pXk-zMDjFo7rYudSF_ATInnUI.roa (hash: 33j8kQlj8EM4Xb9f4KytIpk1E+D5CzmOoXGUrxjI1vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:bb:35:17:71:2e:dc:05:73:69:1a:37:2b:e1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Validity
Not Before: Apr 20 05:00:27 2025 GMT
Not After : Apr 21 05:00:27 2025 GMT
Subject: CN=ab4606fd64b5ea09eeaadf086c92a1a6423c0a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:aa:44:51:31:b3:9d:33:04:9f:b7:99:86:
fb:dc:9a:9a:33:c2:90:57:ca:fc:69:1b:76:76:0a:
b2:cb:d6:4b:5f:2e:73:70:ff:ce:90:a0:56:71:f4:
a5:f8:d1:5f:65:eb:d8:f5:ba:f5:86:21:cd:ac:24:
53:1d:05:fa:79:d7:ef:88:7c:3b:fe:94:17:b7:b1:
7a:32:59:3c:1e:63:82:43:be:98:ff:63:a7:56:b3:
9f:80:b3:5b:02:06:17:00:a5:d8:5a:b0:49:f8:5a:
7a:dd:50:b3:d4:5c:41:cc:8f:46:4a:0c:bc:ba:44:
05:06:1e:d5:73:be:21:b9:5a:6c:21:bd:d5:9d:23:
37:24:1a:37:5f:b6:d3:66:1d:eb:33:c1:35:54:c2:
43:77:1d:11:26:61:0e:a2:0a:b8:f8:0a:df:52:c8:
fc:6e:61:84:68:92:ce:2e:3e:59:d2:cd:a9:92:14:
aa:93:2d:8b:fe:89:0d:d4:26:8a:1f:33:1c:1d:b0:
0f:33:b4:89:a5:25:90:38:06:9b:9d:ce:20:e9:c7:
02:fe:c9:5a:f8:b9:ca:53:27:50:3e:f0:52:25:d0:
df:71:cd:35:c9:42:9b:82:43:6b:85:88:f2:02:02:
af:1c:a8:49:fb:b2:a9:39:27:59:04:6c:58:c0:ae:
24:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:46:06:FD:64:B5:EA:09:EE:AA:DF:08:6C:92:A1:A6:42:3C:0A:1D
X509v3 Authority Key Identifier:
keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0b:2f:6a:82:81:80:03:a8:a2:75:37:09:33:51:04:83:d1:
fb:6d:57:19:1a:62:38:95:a5:10:02:de:e3:d9:45:0d:1d:e6:
fe:77:31:0a:4f:c7:44:6d:d7:38:ed:28:ba:bf:88:be:32:dd:
47:e7:01:d0:3e:e9:bf:64:66:d3:ef:94:64:6d:3d:b9:39:72:
de:f1:7a:a5:7b:b8:37:73:4f:24:0b:a7:fb:b8:dd:78:20:16:
fb:82:82:ce:0a:18:5e:19:25:21:ae:09:e5:05:55:40:41:ec:
2d:ec:38:cf:07:a6:e2:80:56:ea:07:d3:ed:94:a4:46:67:88:
78:53:d0:ec:62:3e:a2:c2:eb:86:2f:cc:84:64:6e:59:c4:43:
5d:ac:09:f4:10:9a:2b:c6:aa:ee:4f:e9:15:46:63:50:2b:d3:
2f:07:5d:ed:64:27:20:d7:50:fe:11:8a:bf:02:99:37:53:7a:
4c:ec:bb:db:33:76:08:dc:57:42:c8:75:a0:ca:88:cc:1a:56:
e5:c6:16:e9:65:b9:41:12:bf:5c:9e:96:b2:af:de:6b:06:f0:
98:cb:f1:4d:f6:bf:90:1d:57:7d:03:3c:27:37:cd:e7:a2:86:
37:36:5f:01:59:12:c8:cd:46:0d:31:d1:3c:e2:9f:0d:ed:87:
b5:fa:b8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:42 2025 by rpki-client