Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
File: CIAqhiH4eCf9WXI85my1nDj5HyE.mft (raw, json)
Hash identifier: 0FdFJHaoQOChGU/wNf8aNZIV/JDG9D8yld6tq8Qv01g=
Subject key identifier: BC:11:CD:60:87:F8:DE:37:76:CA:8E:B0:0C:FB:39:42:5B:B3:E5:BB
Authority key identifier: 08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
Certificate issuer: /CN=08802a8621f87827fd59723ce66cb59c38f91f21
Certificate serial: 019655A5BBEC0FEC296E0D40A884F5435EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
Manifest number: 0856
Signing time: Mon 21 Apr 2025 00:00:47 +0000
Manifest this update: Mon 21 Apr 2025 00:00:47 +0000
Manifest next update: Tue 22 Apr 2025 00:00:47 +0000
Files and hashes: 1: CIAqhiH4eCf9WXI85my1nDj5HyE.crl (hash: hVB8JH52d/Cj05kFGf2PzhVlpEMCinquXt+wOXdljMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:bb:ec:0f:ec:29:6e:0d:40:a8:84:f5:43:5e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08802a8621f87827fd59723ce66cb59c38f91f21
Validity
Not Before: Apr 21 00:00:47 2025 GMT
Not After : Apr 22 00:00:47 2025 GMT
Subject: CN=bc11cd6087f8de3776ca8eb00cfb39425bb3e5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:49:48:e0:ab:be:fb:94:89:b1:8e:c2:cf:
5c:46:53:af:9c:f9:cf:37:8b:48:58:f5:71:56:2f:
7f:c2:65:01:e5:0b:c2:08:9f:b4:b9:ec:6b:a1:79:
2f:97:81:27:95:3e:6e:97:49:af:38:30:b9:77:95:
17:bc:ad:2e:da:ba:48:29:a5:43:89:78:eb:11:4a:
73:4c:36:01:fa:46:9c:b1:12:5b:c0:4e:aa:59:f6:
bd:c7:69:f3:a2:d7:e0:ee:17:17:24:a5:1c:87:ae:
d5:0f:39:8c:7a:62:2b:62:d4:6d:78:b1:e1:2a:78:
75:ad:ca:ad:f1:f8:9a:40:53:f6:10:a5:e3:15:6c:
83:d4:7c:a1:0c:bb:e4:7c:73:20:cc:6f:d3:a1:50:
de:c7:85:0b:3e:50:f7:43:f7:e0:72:0e:dc:e8:07:
29:77:7b:df:50:54:42:b1:bf:0c:91:18:c3:17:04:
4d:56:cc:33:92:62:69:37:b4:1d:cb:c2:f9:6d:63:
70:73:63:39:2f:77:e2:39:8f:5b:0f:93:6b:65:8e:
48:1f:f2:40:62:dc:e5:ce:58:e1:50:d7:cd:9a:1b:
3a:8e:1c:59:28:ea:1f:c0:59:bf:a3:de:07:cd:11:
5a:3c:66:47:7d:53:c3:7e:ee:41:a4:32:93:5f:b9:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:11:CD:60:87:F8:DE:37:76:CA:8E:B0:0C:FB:39:42:5B:B3:E5:BB
X509v3 Authority Key Identifier:
keyid:08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:13:b2:d5:82:08:69:db:a0:c2:d6:34:36:db:5f:8c:1d:8f:
2b:7b:de:6c:60:ca:7d:d7:bc:ba:06:23:ee:28:0d:f6:e6:84:
ee:cc:0e:b1:25:51:e1:9b:16:5f:7c:ea:6f:8e:95:18:fb:33:
35:27:b3:6b:a9:10:a3:6f:0d:d4:77:3f:c6:bb:cf:52:02:2a:
90:c0:ea:a5:2d:67:16:e4:33:f9:42:6a:64:b7:9a:8b:36:e6:
73:96:6a:3e:fd:6b:a7:c8:aa:7c:b0:f4:a4:93:71:03:47:9e:
9c:1b:c2:e0:28:9d:4c:20:8b:cc:9c:87:d6:bf:9b:10:07:58:
66:4b:7b:a3:77:89:ec:8b:d9:c4:ec:c8:9e:99:0d:20:72:20:
28:b4:08:51:3d:2f:65:3d:7a:bb:46:bb:6e:cf:13:6b:ba:2c:
41:27:9e:45:55:63:f6:cf:10:96:3a:5e:8d:79:9c:07:29:d3:
18:fa:73:52:89:ca:b7:e1:3b:f8:7d:2f:07:44:73:85:08:42:
67:86:f4:20:3c:0b:13:a8:6a:ea:96:4f:62:56:01:cc:a0:fb:
eb:4e:84:06:ea:29:f8:46:ae:ba:09:7f:0d:01:ab:bf:3e:b5:
47:f8:b9:8a:8b:db:66:81:13:d1:2e:18:3b:59:b4:aa:50:9a:
4d:03:55:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:14:36 2025 by rpki-client