Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
File: C2LPjNkLafk26CtXgBzXedcuPz4.mft (raw, json)
Hash identifier: 5LwUUjgB2WlRNWwPopfH/vnx42ft2T076Rz3Ex8h+AE=
Subject key identifier: 4F:9C:22:79:C6:2D:72:A2:FD:DD:4E:EA:37:DF:4E:84:40:60:EC:B6
Authority key identifier: 0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
Certificate issuer: /CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Certificate serial: 01964A7D87C6A68229658890BA95DFF5ACF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
Manifest number: 08E1
Signing time: Fri 18 Apr 2025 20:01:02 +0000
Manifest this update: Fri 18 Apr 2025 20:01:02 +0000
Manifest next update: Sat 19 Apr 2025 20:01:02 +0000
Files and hashes: 1: C2LPjNkLafk26CtXgBzXedcuPz4.crl (hash: S8WsJ7j1eewQaUpcRsfjZUBFtYbx/rD0abXloRkdrh4=)
2: nxhi5-9uC3Z2GcyVtgN0XH2e-AY.roa (hash: TCpb7ZM9/5X8OkM3MtmPCms5hmL6B1GslczU1sVSQk4=)
3: tTnc9Ad6JQOwjtbe1qMkIXZeOKs.roa (hash: kZVYztMlLb2WdXu0JA5CW12HKzbSxV0vVIBzzUUHcG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:87:c6:a6:82:29:65:88:90:ba:95:df:f5:ac:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Validity
Not Before: Apr 18 20:01:02 2025 GMT
Not After : Apr 19 20:01:02 2025 GMT
Subject: CN=4f9c2279c62d72a2fddd4eea37df4e844060ecb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:0e:fd:eb:66:27:12:93:d6:98:53:d5:53:
63:27:cd:d9:e1:17:56:dc:06:b5:be:1c:b4:b4:38:
28:83:79:33:95:0a:fb:bf:f7:f2:34:ab:40:32:aa:
96:71:42:89:fc:0b:57:28:e1:f0:59:05:fb:24:6a:
5c:0c:cd:54:78:ae:33:a0:38:68:53:67:26:8e:85:
bd:03:31:71:af:a1:7a:6f:09:f8:8f:f5:c6:74:5d:
33:69:b6:9f:7b:aa:6d:68:3b:73:fd:61:99:d9:6a:
ad:32:93:80:b5:ec:71:0d:45:9b:16:9d:35:be:f2:
73:f4:95:3e:b1:9f:1b:ad:7f:5e:0f:5f:b6:2f:51:
51:63:7b:e1:79:c3:03:81:a3:7d:dc:e7:b9:df:00:
28:a5:15:3b:41:0b:74:ab:9a:ab:c8:e4:ba:db:ac:
49:05:6d:f8:70:d0:cc:d6:72:9a:fb:6e:4d:c8:43:
59:35:30:49:65:dd:85:1c:b6:99:1f:21:41:b2:c9:
7b:db:4e:63:d9:56:83:bd:db:dd:9c:47:ef:03:0e:
97:31:9c:f5:8c:3f:d8:e6:d9:38:1a:43:41:f8:f1:
cc:59:f8:c0:97:74:a1:f7:1a:f5:7b:58:ae:73:20:
a7:7b:41:c5:2f:02:7c:dc:55:3d:19:ff:48:52:1a:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9C:22:79:C6:2D:72:A2:FD:DD:4E:EA:37:DF:4E:84:40:60:EC:B6
X509v3 Authority Key Identifier:
keyid:0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d7:cf:1e:97:b0:72:db:d7:3e:36:6c:58:7c:b6:d3:b1:eb:
08:37:89:82:c3:51:be:be:a3:39:95:3f:8b:4e:38:f1:b0:6f:
55:3c:47:09:8e:ab:2d:8f:ab:66:cd:fe:59:1e:90:f2:cc:8a:
ac:82:4c:18:a0:9c:0a:cc:15:90:53:c7:cd:46:20:db:35:72:
02:a9:2c:2d:3a:8e:9b:61:54:5f:b1:4e:6c:28:cc:41:0c:86:
36:92:94:d8:c1:f5:6d:84:8a:ca:32:0e:2f:84:88:a5:41:fd:
31:ee:ea:40:ab:b4:cc:b1:51:21:45:b3:9c:37:11:d4:78:c4:
6f:08:57:a5:e7:c3:ad:86:2d:ca:ce:b5:79:a7:bd:60:a1:3b:
5d:28:b7:59:d5:c4:f4:cf:13:a3:3b:ac:d2:d4:da:06:dd:b3:
17:7a:d7:71:7c:db:0c:02:96:30:56:c9:e9:34:ec:3c:d3:05:
af:07:6b:ed:3d:4f:fe:31:ac:ea:ca:37:08:f2:e2:e7:49:7f:
99:5f:0b:6c:7b:39:cc:35:61:6f:98:23:05:44:8f:6e:da:62:
b2:c3:78:3d:fb:e1:de:64:bd:bd:6f:d6:91:bb:31:02:1f:42:
09:35:6b:3f:fa:d6:7b:ff:30:9e:62:1d:af:ea:62:7f:75:86:
3b:1e:67:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:41:29 2025 by rpki-client