Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
File: _cv3oqQ7GA1yKzdjHoea-huaXts.mft (raw, json)
Hash identifier: 8jxRDSyVUSrQ1s8ibe7rgp4r0vfLfFkERtzC0/jnLiw=
Subject key identifier: 92:C8:65:3A:23:CD:B0:C0:A9:47:66:94:B8:64:CB:A0:52:C9:4D:12
Authority key identifier: FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
Certificate issuer: /CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Certificate serial: 0196108E342E5E27BAD4DC4FFC3ABC0A5EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
Manifest number: 14DB
Signing time: Mon 07 Apr 2025 14:01:16 +0000
Manifest this update: Mon 07 Apr 2025 14:01:16 +0000
Manifest next update: Tue 08 Apr 2025 14:01:16 +0000
Files and hashes: 1: _cv3oqQ7GA1yKzdjHoea-huaXts.crl (hash: YBOzWC8cEPk55o16zNYH2u90HpyUxN+MCZClLRkBCBY=)
2: t-4cbJi-Ew3u3ipzgXiueic4IR4.roa (hash: bVpOfO45u9FlgP+T8GAth2ynXzQ4yeosDEHag/U9nSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:8e:34:2e:5e:27:ba:d4:dc:4f:fc:3a:bc:0a:5e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Validity
Not Before: Apr 7 14:01:16 2025 GMT
Not After : Apr 8 14:01:16 2025 GMT
Subject: CN=92c8653a23cdb0c0a9476694b864cba052c94d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:63:24:b1:63:c5:57:f6:1c:23:6d:66:50:
8a:f3:49:f0:39:d7:29:fb:dd:e1:f6:a9:cc:82:db:
a2:27:ac:a2:58:94:56:c0:7b:af:90:59:ca:b7:07:
eb:39:7a:f7:69:82:91:aa:59:23:5f:58:5b:02:58:
72:63:02:aa:0e:c3:a5:13:b9:8f:7b:c4:da:f8:6a:
b7:99:68:5d:26:64:42:e3:f8:81:a2:26:67:ec:8e:
67:d6:7a:8b:62:f6:f6:f7:dd:f3:5b:15:ea:39:80:
a6:6a:4d:ff:9b:c7:d6:01:8b:aa:54:4d:6b:da:88:
2d:11:c9:d0:6d:bb:3c:55:c0:00:f7:81:83:7f:66:
93:c5:6f:ee:ee:83:65:26:d1:88:33:e2:90:d8:42:
ce:c9:60:2e:0b:de:25:25:38:30:f1:73:4d:ec:a2:
c5:bb:9d:6a:36:a0:06:6a:32:9f:6b:c1:9e:32:be:
3e:55:a2:4a:4d:25:d9:ed:fd:e9:76:ce:23:be:00:
9f:d7:85:6f:40:f8:94:51:b2:14:7e:5d:52:d7:ef:
6a:8c:d5:ec:d3:3a:aa:d5:33:ab:82:1b:c9:42:6e:
6c:f9:61:40:54:a4:59:1b:75:60:bf:bb:3d:2a:e1:
e9:46:90:37:e6:ea:a0:f1:c9:1e:6c:e8:9c:f9:3f:
95:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C8:65:3A:23:CD:B0:C0:A9:47:66:94:B8:64:CB:A0:52:C9:4D:12
X509v3 Authority Key Identifier:
keyid:FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:25:2b:3f:dd:23:16:03:fa:94:b1:d1:51:21:be:64:be:32:
02:f3:78:87:85:2c:ab:57:b2:cd:33:ae:aa:e6:46:e5:8a:9d:
38:55:ff:13:8e:16:10:b5:63:67:28:20:49:99:e8:07:78:95:
52:f9:73:e4:91:17:06:62:ff:a4:42:49:6e:1d:8d:25:43:3b:
d8:43:61:fa:15:50:1b:29:67:97:65:0f:cc:27:1a:6b:ab:cc:
ab:55:43:20:e1:0a:ea:8b:4e:91:cc:b1:14:89:42:01:33:6e:
a6:b2:87:47:f2:57:05:ef:cc:f7:5e:1a:ee:70:0d:64:a3:9b:
b9:86:12:8a:30:ce:62:86:a9:91:c8:26:ae:87:66:42:29:51:
50:f4:1c:f9:db:95:e3:7e:ae:e7:ff:46:4b:77:6a:d9:dd:6d:
2a:16:b1:30:04:1a:d6:67:99:56:7a:b3:6a:84:f8:b2:08:7a:
bc:fe:f8:19:b2:c7:b0:25:0a:58:c2:45:4e:72:7f:4a:3c:81:
9c:eb:cf:17:f3:38:eb:2c:09:9b:33:af:81:c8:dd:62:0e:e6:
1c:b9:6f:84:32:8e:64:14:04:a2:67:ba:74:ef:56:c7:35:04:
5b:12:73:44:43:80:0a:43:56:44:02:87:d7:11:31:c2:7d:d2:
0c:94:40:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:19 2025 by rpki-client