Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier: 0fArk0Kt9Kp3QT4h2WC/nUJon/YaxpqJBiGHZh+ZfuA=
Subject key identifier: E8:C1:24:D7:93:44:2C:3C:DF:D4:AB:69:82:1D:0C:80:97:98:A0:55
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial: 01964BFD89526A43D4A2125B2FD2913AC778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number: 01CC
Signing time: Sat 19 Apr 2025 03:00:28 +0000
Manifest this update: Sat 19 Apr 2025 03:00:28 +0000
Manifest next update: Sun 20 Apr 2025 03:00:28 +0000
Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: iYUsYpuqH67h2bnnvHKMr9a2IkfxEJGc1PQ0DK0MsuU=)
2: zto4NeQB1_I3QORAJXQ-oNO5db0.roa (hash: 4X/MAtxcgqfp8hiwe6Iai+qfAWiiXuU0LC7+GPHFtZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:89:52:6a:43:d4:a2:12:5b:2f:d2:91:3a:c7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Validity
Not Before: Apr 19 03:00:28 2025 GMT
Not After : Apr 20 03:00:28 2025 GMT
Subject: CN=e8c124d793442c3cdfd4ab69821d0c809798a055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:78:49:84:76:03:64:7e:f9:33:7b:ea:f1:
fb:c0:a3:89:cd:de:cb:bd:e2:c1:ae:e7:e0:5d:30:
2f:9b:7b:6c:33:6c:2d:ae:50:ff:f5:bb:21:aa:14:
d3:55:51:22:b1:9d:03:fe:d6:b5:3f:4d:c5:2a:51:
95:b3:10:a9:47:ac:2a:06:27:18:67:80:9c:51:b8:
81:bb:ee:07:34:68:b1:2d:2d:1f:82:91:30:36:bf:
93:a0:04:97:6a:54:21:e6:31:af:50:f0:b2:f8:7e:
45:af:e4:dc:52:28:4c:94:dc:b1:0c:9c:35:e0:e3:
dd:82:2d:b6:7f:13:91:dd:d5:b2:bb:e6:3b:04:28:
5b:80:cc:2f:64:47:55:d8:eb:12:7d:fc:50:6e:7f:
68:99:3f:13:66:7e:e3:d3:b5:5c:a7:22:23:90:3a:
aa:91:7d:43:41:a6:c2:e9:f5:66:0e:99:e7:35:76:
6b:72:bb:8a:5d:85:3a:81:99:c5:e8:0e:25:24:80:
e9:2e:3d:10:cb:73:78:17:70:26:07:34:06:0f:66:
a8:a1:9f:c3:16:bc:12:79:90:75:a5:0f:2a:f5:96:
fb:e8:f5:27:ba:a1:ef:a8:0b:3c:7b:0f:b0:47:88:
b3:2d:d8:70:f8:22:03:92:29:cf:c6:87:ee:f4:9c:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C1:24:D7:93:44:2C:3C:DF:D4:AB:69:82:1D:0C:80:97:98:A0:55
X509v3 Authority Key Identifier:
keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:eb:d8:df:e5:0c:75:cb:94:2c:e7:72:c9:2b:76:d9:f0:4a:
19:3d:5d:16:94:bc:61:3a:a1:87:b7:5d:40:12:83:21:be:f3:
c2:12:74:c3:3c:a9:4f:8e:cc:a5:2b:2b:21:de:f5:f8:fb:f2:
4b:38:1b:17:9c:13:58:af:6d:cf:9a:d6:63:9f:99:2c:b5:d2:
77:11:bf:70:f1:6d:95:36:54:3f:5b:61:7d:1c:53:c1:60:d0:
95:8c:be:94:13:c4:67:5f:f1:46:93:1e:f6:e4:89:1e:f8:ef:
0d:c1:43:e7:07:b7:39:06:30:69:7c:c1:f6:1a:5b:77:7b:88:
5a:cb:49:38:be:37:67:02:9b:b1:52:4d:ff:7d:be:fa:fc:2f:
81:8e:d9:f2:36:b3:aa:77:2e:45:ad:af:a5:ac:33:df:29:c8:
4d:69:2d:4c:9d:b6:23:04:87:7d:4a:12:05:c8:db:80:31:64:
61:c8:da:7f:7b:6a:f6:8c:ed:b6:d3:80:02:99:94:f9:4d:60:
0b:75:4a:3d:b4:48:b2:d7:54:c6:7c:45:f9:e1:95:4c:bd:3d:
23:b9:d4:b9:63:e4:05:d4:5a:e8:49:44:ab:87:95:b7:db:88:
69:0f:c3:96:ea:bf:07:f0:fb:26:de:fd:f2:63:df:d6:84:4f:
c0:71:16:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:07:08 2025 by rpki-client